Request an account

PRIVACY NOTICE — FTI PORTAL ACCOUNT Issued under the Data Privacy Act of 2012 (Republic Act No. 10173) Version: account-2026-11 Effective: 6 November 2026 1. WHO THIS IS FOR, AND WHO IS RESPONSIBLE 1.1 This notice is for anybody asking FTI for a portal account: a client of FTI, somebody who works for a client, somebody asking FTI to quote or to repair something, and FTI's own staff. "You" means that person. 1.2 Faithmarco Technologies Inc. ("FTI") is the Personal Information Controller for the data described here. Registered office: 1547-A MM Estonina Townhouse, Diamante St. cor. Rubi St., Barangay 798 Zone 87 District V, Santa Ana, City of Manila. 1.3 Data Protection Officer: Not yet designated. Write to privacy@fti.one; your request will be acted on. 2. WHAT WE COLLECT 2.1 From everyone who asks for an account: full name, email address, mobile number, and the company you say you belong to. 2.2 From a client under a service agreement: the agreement code or the control number of the computer issued to you, and through it the company and computer you are attached to. 2.3 From a member of FTI's staff: employee number and job position. 2.4 While you hold an account: the date your account was opened, when you last signed in, whether you have set a password, and the entries you make in the portal — faults you report, notes you write, and reports you submit. 2.5 We do not collect sensitive personal information as section 3(l) of the Act defines it: no health, education, genetic, biometric, racial, religious, political, sexual or criminal data, and no government-issued identifier. 2.6 Giving us 2.1 to 2.3 is a condition of being given an account. You are free not to give it, and FTI is then unable to open one — there is no account without somebody to attach it to. 2.7 Your password is not among the above. It is set directly with our authentication provider, which stores it hashed. FTI never receives it, and it is not in any FTI record. 3. WHY WE USE IT, AND ON WHAT BASIS 3.1 To decide whether to open your account, and to open and run it. Basis: your consent (section 12(a)), which you give by accepting this notice, and the performance of the service agreement between FTI and your company where one exists (section 12(b)). 3.2 To confirm it is you signing in, by sending a code or a link to the address and number you gave. Basis: our legitimate interest in keeping accounts secure (section 12(f)), which does not override your rights because the alternative is an account anybody can open in your name. 3.3 To reach you about the computers you use or oversee, the service on them, and anything FTI has quoted you. Basis: performance of the agreement (section 12(b)), or your consent where there is no agreement (section 12(a)). 3.4 To keep a record of service work, which may later support or answer a charge. Basis: our legitimate interest in being able to show what was done, and the establishment or defence of a legal claim (section 12(f)). 3.5 To tell you about FTI's other products and services, only if you ticked the separate box for it. Basis: your consent, given separately and withdrawable at any time without affecting your account. 3.6 No decision about you is made by automated means alone. A person decides whether your account is opened. 4. WHO ELSE SEES IT 4.1 FTI's own staff, each according to what their role requires. A technician does not see commercial terms; a client sees only their own company. 4.2 If you work for a client of FTI, your company's supervisor sees that you have an account and which computer is yours. That is what a supervisor's account is for. 4.3 The following processors, each acting only on FTI's instructions: — Supabase Inc. (database, authentication, file storage), Singapore — Vercel Inc. (hosting and delivery of the portal), United States — Google LLC (the mailbox the portal sends from), United States — Semaphore / Kwantified Inc. (text messages), Philippines 4.4 Nobody else. FTI does not sell personal data, and discloses it to no other client, no advertiser and no other company. 4.5 We will disclose data where the law requires it, to a court, a regulator or a law-enforcement body acting within its authority. Where we are permitted to tell you that we have, we will. 5. WHERE IT IS KEPT, AND THE TRANSFER OUT OF THE PHILIPPINES Your data is stored on servers in Singapore, which is outside the Philippines, and is handled by processors in the United States, as named in 4.3. By accepting this notice you consent to that transfer. FTI remains accountable for your data in the hands of those processors, and has contractual terms with each requiring protection equivalent to that required here. 6. HOW LONG WE KEEP IT 6.1 For as long as you hold an account, and for two years after it is closed. 6.2 Longer where a record your name appears on may still be questioned: a service report keeps the name of whoever signed it, and closing an account does not remove your name from a report you signed. Such records are kept for as long as a claim arising from them may be brought. 6.3 Longer where the law or a tax authority requires it. 6.4 If FTI refuses your request, the login created when you chose a password is deleted, and the request itself is kept for two years as the record of a decision FTI made. 6.5 At the end of the period the data is deleted or anonymised so that you can no longer be identified from it. 7. YOUR RIGHTS Under section 16 of the Act you have the right: 7.1 to be informed whether your data is being processed, and how — this notice; 7.2 to be given access to it, in a readable form, on request; 7.3 to have it corrected where it is inaccurate or out of date; 7.4 to object to processing, including to withdraw a consent you gave; 7.5 to have it erased or blocked where it is incomplete, outdated, false, unlawfully obtained, or no longer necessary; 7.6 to be given a copy in a commonly used electronic form, and to have it moved to another controller where that is technically feasible; 7.7 to be indemnified for damage sustained through inaccurate, incomplete, outdated, false or unlawfully obtained data about you; 7.8 to lodge a complaint with the National Privacy Commission. To exercise any of these, write to privacy@fti.one. We will answer within fifteen (15) working days, and there is no charge. If we cannot act on your request we will say why, and tell you where to take it further. Withdrawing consent does not make lawful what was done before you withdrew it, and may mean FTI can no longer keep your account open. 8. HOW IT IS PROTECTED FTI maintains organisational, physical and technical measures as section 20 of the Act requires. In particular: access to the portal is by individual account and password; what each account may see is enforced by the database itself rather than by the pages alone; data is encrypted in transit and at rest by our processors; and access to the administration of the system is limited to named individuals. 9. IF SOMETHING GOES WRONG If a breach occurs that is likely to put your rights or freedoms at serious risk, FTI will notify the National Privacy Commission and the people affected within seventy-two (72) hours of becoming aware of it, as the Act and its implementing rules require. 10. COMPLAINTS Write to us first at privacy@fti.one; we would rather fix it than have it escalated. You may at any time complain to: National Privacy Commission 5th Floor, Delegation Building, PICC Complex Roxas Boulevard, Pasay City 1307 complaints@privacy.gov.ph — privacy.gov.ph 11. CHANGES TO THIS NOTICE A change of substance means a new version and a fresh acceptance. The version you accepted, and the full text of it as it stood that day, are kept on your request, so that what you agreed to can be answered years from now rather than guessed at. 12. WHAT ACCEPTING THIS DOES NOT DO It does not sign you up for anything else. Being told about FTI's other products and services is a separate box, it is optional, and leaving it alone has no effect on your account or on the service your company receives.