Privacy policy

1. Who we are

Straight Login Inc. (“Straight Login”, “we”, “us”) is a company registered in the Philippines with its office at SOHO Avida Cityflex Tower 1, 7th Ave. corner Lane T, Bonifacio Global City, Taguig, Metro Manila 1634, Philippines. We are the personal information controller for the personal information described in this policy.

Our Data Protection Officer (DPO) can be reached at privacy@slogin.io.

2. Information we collect

We collect only what we need for the purposes in section 3:

• Enquiries. When you use our contact form or email us: your name, work email, company, phone number if you give it, the type of enquiry and your message.
• Job applications. When you apply for a role: your full name, gender, date of birth, address, email, phone number, expected monthly salary, how you heard about us, a portfolio or LinkedIn link if you give one, your résumé and anything else you choose to include. Your date of birth (your age), and details in your résumé such as your education, are sensitive personal information under the law. We process them only with your express consent, which you give by ticking the consent box on the application form, and only to assess your application.
• Website use. Technical data your browser sends when you visit, such as IP address, browser type, pages viewed and the time of the visit, kept in server logs. When you submit a form, we also check technical signals from your browser to tell people apart from automated spam, and use them only for that check. If you accept analytics cookies, Google Analytics 4 also records how you use the website (see section 9).
• Clients. Business contact details of the people we work with, and information we process on a client's behalf under a separate agreement (see section 4).

We do not knowingly collect personal information from children (see section 10).

3. How we use it and why

We use personal information for these purposes, on these legal bases under the Data Privacy Act:

• Answering enquiries and preparing proposals: to take steps you ask for before entering into a contract, and our legitimate interest in responding to business enquiries.
• Delivering services to clients: performance of our contract with the client.
• Assessing job applications: your consent, given when you apply, and steps taken at your request before an employment contract.
• Understanding how the website is used: your consent to analytics cookies, which you can withdraw at any time.
• Running and securing the website: our legitimate interest in keeping the site available, fast and protected from abuse.
• Legal and tax obligations: where Philippine law requires us to keep records.

We do not sell personal information, and we do not use it for automated decisions that affect you.

4. Who we share it with

We share personal information only with service providers that process it for us under written agreements, and only as far as they need it:

• Providers of email and office software, which we use to receive and answer your messages.
• Cloud service providers that run the website and store files such as résumés.
• Google, as the provider of Google Analytics, only if you accept analytics cookies.

We may also disclose information when the law requires it, or to protect our rights in a legal claim. When we process personal information on a client's behalf, the client is the controller and our handling of that information is governed by our agreement with them.

5. Transfers outside the Philippines

Some of our service providers store or process data outside the Philippines, including in Japan and the United States. We remain responsible for that information and use providers that protect it to a standard comparable to the Data Privacy Act, through contracts and their security measures.

6. How long we keep it

• Enquiries that do not lead to a project: one year after our last contact.
• Client records: for the length of the engagement and as long as tax and accounting laws require after it.
• Job applications, including résumés: deleted automatically one year after you apply, unless you are hired or you ask us to delete them sooner.
• Server and security logs: only as long as needed to run and protect the website.
• Analytics data, if you accept analytics cookies: up to 14 months.

7. How we protect it

We use organisational, physical and technical measures appropriate to the risk: access limited to the people who need it, encrypted connections, private, encrypted storage for files such as résumés, internal links to a résumé that expire after 7 days, reviewed access to production systems, and secrets kept out of code. If a personal data breach is likely to put you at risk, we will notify you and the National Privacy Commission as the law requires.

8. Your rights

Under the Data Privacy Act you have the right to:

• be informed about how your personal information is processed;
• access the personal information we hold about you;
• object to processing, including for direct marketing;
• have inaccurate information corrected;
• have your information erased or blocked when it is no longer needed or was processed unlawfully;
• obtain a copy of your information in a commonly used electronic format (data portability);
• withdraw your consent at any time, where we rely on it;
• be indemnified for damages caused by inaccurate, unlawfully obtained or unauthorised use of your data.

To exercise these rights, email privacy@slogin.io. We may need to verify your identity first, and will reply within 30 days. You may also file a complaint with the National Privacy Commission.

9. Cookies

The website uses two kinds of cookies:

• Strictly necessary cookies, which the website needs to work and be secure. They are always on.
• Analytics cookies from Google Analytics 4 (named _ga and _ga_*), which tell us how visitors use the website. They are set only if you accept them in the cookie banner, and you can change your choice at any time.

We do not use advertising or cross-site tracking cookies.

10. Children

Our website and services are meant for businesses and job seekers aged 18 or over. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy as our services or the law change. The date at the top shows the latest version; for significant changes we will give notice on this website.

12. Contact

Data Protection Officer, Straight Login Inc.
SOHO Avida Cityflex Tower 1, 7th Ave. corner Lane T, Bonifacio Global City, Taguig, Metro Manila 1634, Philippines
privacy@slogin.io