Your data, handled with care.

This Privacy Policy applies to personal data we process when you visit truenextglobal.com, contact us through a form or email, apply for a role, or engage TrueNext Global for business process outsourcing services across Healthcare, Technology, Marketing, and Executive Support.

Where we process personal data on behalf of a client (for example, when our agents handle support tickets containing the client's customer data), the client is the controller and TrueNext Global acts as a processor under a separate Data Processing Addendum.

TrueNext Global, with offices at 3rd Floor, Festive Walk Mall, Megaworld Boulevard, Mandurriao, Iloilo City 5000, Philippines, is the data controller for personal data collected through this website, recruitment, and direct business inquiries.

You can reach our Data Protection Officer at privacy@truenextglobal.com.

Information you provide

• Identity & contact: name, work email, phone, company, role, country.
• Inquiry content: the message and requirements you share through forms or email.
• Recruitment data: CV, employment history, credentials, references, and any data you choose to include in an application.
• Engagement data: contract details, billing contacts, and information needed to provide services.

Information collected automatically

• Technical: IP address, device and browser identifiers, timestamps, referring URLs.
• Usage: pages viewed, links clicked, approximate location (city-level), and session duration.
• Cookies and similar: see our Cookie Policy.

Information from third parties

• Enrichment data from business directories (e.g. company size, sector) used to qualify inbound inquiries.
• Background-check results (only with explicit candidate consent, and only for finalist candidates).

• To respond to your inquiry and provide proposals.
• To deliver, support, and improve the services you've engaged.
• To evaluate candidates and manage recruitment.
• To send service announcements, security notices, and contract-related communications.
• With your consent, to send marketing emails about relevant services. You can unsubscribe from any email at any time.
• To detect, investigate, and prevent abuse, fraud, or violations of our Terms of Service.
• To meet legal, tax, and regulatory obligations.

Where the GDPR or UK GDPR applies, we rely on one or more of the following lawful bases:

• Contract: to take steps at your request before entering, and to perform, a contract with you or your employer.
• Legitimate interests: to operate, secure, and improve our services; to evaluate candidates; and to grow our business in a measured, privacy-respecting way.
• Consent: for marketing emails, non-essential cookies, and other situations where consent is required.
• Legal obligation: to comply with applicable laws.

We do not sell personal data. We share data only with the following categories of recipients, under written agreements that require appropriate safeguards:

• Service providers: cloud hosting (AWS), email (transactional and CRM), analytics, identity, payments, and background-check vendors.
• Clients:when we deliver services on a client's behalf, we share data with that client as needed.
• Professional advisors: lawyers, accountants, and auditors, under professional confidentiality.
• Authorities: where required by law, court order, or to protect rights, property, or safety.
• Corporate transactions: in connection with a merger, acquisition, or asset sale, subject to standard confidentiality.

TrueNext Global operates from the Philippines and uses infrastructure and vendors located in the United States, the European Economic Area, and other regions. When we transfer personal data outside the EEA, UK, or Philippines, we rely on:

• European Commission Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable).
• Adequacy decisions, where the destination country has been recognized as providing an adequate level of protection.
• Your explicit consent, where the transfer is occasional and necessary.

• Inquiries: up to 24 months from last contact, unless you ask us to delete sooner.
• Client engagement data: for the duration of the contract plus 7 years for tax and audit purposes.
• Recruitment data: up to 24 months after a decision, to consider you for future roles. You can ask us to delete it at any time.
• Website analytics: aggregated for up to 26 months.

We protect personal data with administrative, technical, and physical safeguards proportionate to the risk, including role-based access controls, encryption in transit and at rest for sensitive systems, mandatory MFA for staff accounts, audit logging, vendor due diligence, and a documented incident response plan. We notify affected individuals and regulators of qualifying breaches within statutory timeframes (e.g. 72 hours under the GDPR).

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete data, subject to legal retention requirements.
• Restrict or object to certain processing.
• Port data to another provider in a structured format.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with your local supervisory authority (e.g. the National Privacy Commission of the Philippines).

To exercise any of these rights, email privacy@truenextglobal.com. We respond within 30 days and may ask you to verify your identity before acting on a request.

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, the right to correct inaccurate information, the right to opt out of "sale" or "sharing" of personal information, and the right to limit use of sensitive personal information.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. To submit a request, email privacy@truenextglobal.com.

Under RA 10173, you have the rights to be informed, to object, to access, to rectify, to erasure or blocking, to damages, to data portability, and to file a complaint with the National Privacy Commission (NPC). Our Data Protection Officer is registered with the NPC and reachable at privacy@truenextglobal.com.

Our services are intended for businesses and adult professionals. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time. Material changes will be announced on this page and, where appropriate, by email. The "Effective" date at the top of this page indicates the latest revision.

For any privacy question or to exercise your rights, contact our Data Protection Officer:

• Email: privacy@truenextglobal.com
• Mail: Data Protection Officer, TrueNext Global, 3rd Floor, Festive Walk Mall, Megaworld Boulevard, Mandurriao, Iloilo City 5000, Philippines.