Privacy Statement

Issued in accordance with the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations. This statement reflects current practices and may be updated as necessary.

NPC COR/Seal

NPC Certificate of Registration & Seal

Certificate of Registration (COR) & Official Seal

As issued and certified by the National Privacy Commission. The Seal is displayed exactly as issued and must not be altered.

Compliance Disclaimer — This Privacy Statement is issued pursuant to the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. Although Functional Inc., located at 814 J.P. Rizal Street, Makati City, has been granted an Exception by the National Privacy Commission (NPC), we continue to uphold the principles of transparency, legitimate purpose, and proportionality. We voluntarily maintain standards designed to meet or exceed those applied to fully compliant organizations.

NPC Certificate of Registration & Seal

Functional Inc. maintains an active record with the National Privacy Commission (NPC) pursuant to the Data Privacy Act of 2012. The NPC Certificate of Registration (COR) confirms that our Data Protection Officer (DPO) and data processing details have been recorded through the NPC Registration System (NPCRS) following the NPC validation process for submissions.

The NPC Seal of Registration is the official emblem issued by the NPC and is required to be displayed prominently in offices and online platforms where personal data processing occurs.

Note: The NPC Seal is displayed exactly as issued by the Commission and must not be altered, redesigned, or modified.

Our Commitment

Functional Inc. is dedicated to protecting your privacy and ensuring the security of your personal information. Even with an NPC Exception, we voluntarily adopt industry best practices to ensure confidentiality, integrity, and availability of personal data.

Legal Basis for Processing

  • Contractual Necessity — To fulfill obligations related to your requested services.
  • Legal Obligation — To comply with laws and regulatory requirements.
  • Legitimate Interest — To ensure operational efficiency, improve systems, and maintain security.
  • Consent — For specific voluntary disclosures; may be withdrawn anytime.

Data We Collect and How We Use It

We collect only necessary and relevant information such as your name, contact details, company details, and documents related to our services. All data is used solely for its intended lawful purpose.

Data Protection Measures

We employ layered technical, organizational, and physical safeguards to protect personal data from unauthorized access, misuse, alteration, or destruction.

Data Sharing and Disclosure

We never share your data without your explicit consent unless required by law or necessary for service delivery. Any third-party partners are bound by strict confidentiality obligations.

Retention and Disposal

Personal data is retained only as long as necessary for its purpose or legal requirements. Once retention lapses, data is securely deleted, disposed of, or anonymized.

Your Rights as a Data Subject

  • Access to your personal data
  • Correction or updating of inaccurate data
  • Request deletion or blocking of data
  • Withdraw consent when applicable
  • Inquire or file complaints regarding data handling

Changes to This Privacy Statement

This Privacy Statement may be updated to reflect changes in our processes or legal requirements. The latest version will always be available on our website.

Contact Our Data Protection Officer

For any privacy questions or concerns, please reach out to your DPO using the contact information on our site.