Privacy Policy
To provide the best experience possible for our users, startups, partners, and community in the use of our website (www.kickstart.ph) and associated services, we regard your privacy with utmost importance. As such, we ensure that all personal data collected are protected at all times in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (“Data Privacy Act” or the “Act”), its corresponding Implementing Rules and Regulations (“IRR”), and the existing Memorandum Circulars, Advisories, and other issuances issued by the National Privacy Commission (“NPC”).
This Privacy Policy outlines our policy in relation to the collection, use, and protection of your personal data. From time to time, we may update our Privacy Policy to reflect current changes in our policy and the law. When we do so, we will notify you by posting it on our website for your information and reference.
By continuing to use our website, engaging in any of our services, interacting with us, and participating in any Kickstart activity, such as but not limited to corresponding via email, phone or text message and attending pitch meetings, community and marketing events, you signify that you have read, understood, and consented to the collection, process, share, and use of your personal data, in accordance with this Privacy Policy and the website Terms of Use, as applicable.
As part of our commitment to protect your personal data, we have installed internal policies and technologies that ensure that your data is free from unauthorized access, processing, and disposal. We continually improve these policies, processes, and technologies to make sure that the protection that we put in place are always relevant and up-to-date.
The Information We Collect
We collect and process the following types of personal date, among others:
Personal information (such as name, phone number, email and postal address), employment information, and/or business affiliation for you or for other people you would like us to contact (e.g. principals or representatives in your business).
Personal information in content you submit to us (e.g. business plans, pitch decks, investment memos).
Personal information, employment history, educational background, biometric information, organizational affiliation, filial relations, gender, date of birth, religion, ethnicity, civil status citizenship, physical medical history, past criminal and/or administrative records, government issued identifying information (such as Pag-IBIG, SSS, TIN, PhilHealth, Professional IDs, Passport, and Birth Certificates), payroll information, company identification of our prospective job applicants, current employees, agents and stakeholders.
We also collect information when you use our website and electronically communicate with us. Depending on your settings, we may use cookies, web beacons, small data text files, or similar technologies to identify your device and record your preferences. This information is statistical and aggregated and does not identify you (so it is not personal data). We use it to monitor usage of the website and improve our website and associated services to you.
If you are just browsing our website, we will not collect personal data.
Purpose of Collection and Use of Data
In general, we collect and process personal data for legitimate business purposes and needs, the achievement of corporate objectives, communications and administration, internal operations, human resources and financial management, and compliance with applicable laws, rules and regulations.
Vendors, Partners, Investors, and other Business Contacts
For purposes of ensuring our investor and business contact records are up-to-date;
For purposes of identifying opportunities to develop our business and conducting appropriate and necessary due diligence;
For purposes of verification, assessment and accreditation;
For purposes of communication and maintenance of continues business relations;
For the management of our business;
To process information for statistical, analytical, and research purposes. We use your Non-Personal Information for statistical, analytical, and research purposes to create anonymous and aggregate reports that we use to further improve our business operations and processes;
To exercise or defend any legal claims of the organization; and
To fulfill and enforce any contractual terms and obligations we may have.
Employees
We collect, process personal data from and about our employees for administrative and human resource development purposes as well as in compliance to applicable regulations and/or laws, including, but not limited to: identity verification; pre-qualification and post-qualification assessment; processing of employment compensation and benefits; internal security; compliance to regulatory requirements; for the protection of lawful rights and interests of the organization in internal administrative and court proceedings, or the establishment, exercise or defense of legal claims of the organization.
Pitch Decks/Business Plans/Business Proposals
If you choose to submit a pitch deck, business plan, or business proposal, we will review that plan in order to review and consider plans for potential investment. If your deck, plan, or proposal contains any personal data, we will use that information only in the context of reviewing your business plan. It is in our legitimate interests to assist startups but to do so we only process personal data that you provide to us. You can object to processing of your personal data on the grounds of legitimate interest (see the 'Your Rights' section). However, bear in mind that if you do, we will not be able to review your business plan.
How We Collect and Process Personal Data
We collect both electronic and physical personal data from the following sources:
When you interact with us, for example by visiting our offices, corresponding with us by email, post or telephone, or speaking to us at an event or meeting.
When you contact us through our agents and representatives, sign up to receive communications from us, respond to our surveys, participate in our events; and indirectly through third-party sources such as social media sites, publicly available databases and government repositories and/or from other customers.
When you visit our website and social media profiles as well as when you use our digital platforms and/or mobile applications.
When you submit a business plan, pitch deck, business proposal or any content through our website or to our offices.
When individuals representing or affiliated with our vendors, partners, investors and other business contacts voluntarily provide us with their contact information in order to develop business relations and/or complete legitimate transactions with them.
Directly from our employees and job applicants through their curriculum vitae, personal information sheets, submitted medical records and government documents, and interview and training assessment results conducted by authorized personnel, and pre-employment health screening and indirectly from the verification efforts of third-party employee background/screening service providers, job search sites and/or other social media sites and references.
Our data processing is always in a manner compatible with declared, specified, and legitimate purpose. Data processing is also adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
When required by our Privacy Policy and the law, and before we collect, process, use, or share your Personal Information for any other purpose other than enumerated above, we will ask for your consent.
Disclosures of Information
We generally do not share, disclose, or sell the personal data we process to third parties without the consent of data subjects unless: (a) we are legally required to do so; (b) it is necessary to fulfill the purposes for which we process personal data as mentioned above; or (c) such action is necessary to protect, defend and/or enforce our rights, property or the personal safety of our employees and other individuals.
Like any business, we use third-party service providers/ suppliers/ vendors/ consultants to assist us in our business operations. Some of these third-party providers will process your data as part of the services they offer to us. Nevertheless, we remain responsible over the personal data disclosed to such third parties and we take steps to ensure that our service providers treat your data in accordance with the law, only use it in accordance with our contract with them and keep it secure.
If you would like additional information on the identities of these parties, please contact our Data Privacy Officer.
Your Rights
We recognize your rights under the Data Privacy Act of 2012. To this end, we are mindful of your legal rights as a data subject:
Right to be Informed - You have the right to be informed of how and why we collect and process your personal data, including where we collected it, with whom we share it and why, how we protect it, how long we keep it, and how we dispose of it, and any changes to our data processing activities before they are implemented.
Right to Object - You have the right to object to the processing and/or sharing of your personal data especially when you feel that we do not have lawful grounds to do so.
Right to Withdraw Consent - When our collection and processing of your personal data depends on the consent that you provided to us, you have the right to withdraw your consent at any time subject to our internal procedures. This, however, does not apply to instances where we rely on grounds provided by law, other than consent. Nevertheless, you always have the right to object.
Right to Access - You have the right to request reasonable access to your personal data subject to our internal procedures. We, however, reserve the right to seek reasonable fees when providing such data presents certain challenges due to its volume as well as to restrict access to linked data that may be confidential, proprietary, or belong to other individuals.
Right to Data Portability - You have the right to obtain a copy of your personal data or have it transmitted to other entities in a format that is portable and commonly accessible subject to our internal procedures.
Right to Rectify - We keep our records as accurate as possible. Where there are any errors or inaccuracies to your personal data, we give you ways to dispute and rectify or update it, subject to our internal procedures.
Right to Erasure or Blocking - You have the right to suspend, withdraw, or order the blocking, removal, or destruction of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data, or personal data not necessary for the purpose for which it was collected, and for such other cases provided in the Data Privacy Act of 2012.
Right to Damage - You have the right to be indemnified for damages sustained, if any, due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data
If at any time you object or withhold your consent to the collection and processing of your personal data, we will be constrained to terminate all activities associated with such and not be able to fully deliver our services. Further, we will be unable to provide you with any updates and you may be unable to participate in our events and/or other activities.
Should you feel at any point that there has been mishandling or misuse of your personal data, or that any of your data privacy rights have been infringed, please contact our Data Privacy Officer.
Protection of Information
We secure and protect your personal data with proper safeguards to ensure confidentiality and privacy; prevent loss, theft, or use for unauthorized purposes; and comply with the requirements of the law.
We make reasonable and appropriate security arrangements and measures that use a variety of physical, electronic, and procedural safeguards to protect your personal data. We regularly review our information collection, storage, and processing practices, including physical security measures, to guard against unauthorized access to our system and unauthorized alteration, disclosure, or destruction of information we hold.
We only permit your personal data to be collected, processed, used and shared by our authorized employees, contractors, and subcontractors who hold such information under strict confidentiality and in accordance with their contractual obligations and who have implemented minimum security features against data leakage, unauthorized access, or disclosure.
We keep your personal data in our business records as long as it is necessary to fulfil the purpose for which it was collected, or while it is needed by us for business, tax, or legal purposes. When disposing of your personal data, we take reasonable measures to ensure that it is done properly and is not accessible to the public.
Contact Us
For any questions or concerns, you may contact our Data Protection Officer as follows:
Email: privacy@kickstart.ph
Telephone: +632 7625 8723