Privacy & confidentiality
Privacy & confidentiality
At iFOVS we place the utmost value on the privacy and confidentiality of our clients' data — and we have taken tangible steps to ensure that trust is not only earned but maintained.
Robust security protocols
Encryption and access controls that protect client data from unauthorised access.
Transparency & control
Regular updates, clear communication and a say in how your data is used.
Legal compliance
We meet the legal requirements set by government agencies and industry bodies.
Partnership, not vendorship
We treat clients as partners and work collaboratively toward mutual goals.
How access to your systems actually works
Confidentiality here is contractual rather than a verbal assurance. An NDA is signed before anyone is given access to a client system, and it covers the assigned staff member, their team lead and the account manager alike.
Access is granted to a named individual through your own systems. We do not use shared logins, and we do not pass credentials between staff. Access is scoped to what the task actually requires, so an assistant working your inbox does not hold access to your accounting platform because nobody gave them a reason to.
When someone leaves your account, their access is revoked and we confirm to you that it has happened. You should not have to remember to ask.
Where your data lives
Your data stays in your systems. We work inside the CRM, inbox, helpdesk or accounting platform you already run, rather than copying records into tools of ours. That means there is no second copy of your client list sitting on our infrastructure, and no migration to unpick if you decide to stop working with us.
Where a task genuinely requires a file to be handled, it is handled in the storage you nominate, under the access rules you set.
An office, not a spare room
Our team works from our office in Ipil, Zamboanga Sibugay, on equipment we provide and redundant internet, not from personal laptops at home. For work involving client records, payment details or patient information, that distinction matters more than any policy document.
Standards we align our practices to
We align our handling of client data to GDPR, ISO/IEC 27001 and PCI DSS. To be precise about what that means: these frameworks shape how we scope access, handle records and train staff. We describe our practices as aligned to them rather than claiming certification we do not hold.
What we will not do
- Share your data with another client, or use it as an example in our own marketing without written permission.
- Work from a shared login, or let one person hand credentials to another.
- Move your records onto our own systems for convenience.
- Retain access after a staff member leaves your account.
If something goes wrong
If we believe your data has been exposed, you hear it from us, with what we know and what we are doing about it. Tell us who the right contact is when the account starts, so that conversation is not delayed by working out who to call.
Questions about any of the above can go to info@ifovs.net, or raise them on the discovery call before anything is signed.
Let's talk
Ready to transform your business?
Tell us what's taking up your time. We'll show you exactly how a trained iFOVS team can take it off your plate — and what it costs.