Third-Party Integration Policy

1. Introduction

This policy outlines the procedures, guidelines, and legal requirements for integrating third-party services, tools, and technologies with ROC.PH Digital Marketing Services. ROC.PH commits to adhering to applicable laws and best practices in the Philippines, including international laws for cross-border operations, ensuring data protection, privacy, and consumer safety.

2. Legal Compliance

ROC.PH and its third-party vendors must comply with all relevant local and international laws, regulations, and industry standards, including but not limited to:

  • Data Privacy Act of 2012 (Republic Act No. 10173) and applicable international data protection laws, such as the General Data Protection Regulation (GDPR) for handling personal data.
  • Consumer Protection Act and other related regulations governing the marketing, sale, and delivery of products and services to consumers.
  • Philippine Intellectual Property Code (Republic Act No. 8293) for the protection of intellectual property rights.
  • Competition Act (Republic Act No. 10667) to prevent anti-competitive behavior or unfair trade practices.
  • Cybersecurity Act of 2015 for ensuring that third-party vendors adhere to cybersecurity protocols.

3. Third-Party Data Protection

ROC.PH takes the privacy and security of its users and clients seriously. All third-party vendors must comply with the following requirements:

  • Data Handling and Security: Third-party integrations that involve personal or sensitive data must employ proper data security measures, including encryption, secure data storage, and protection against unauthorized access.
  • Cross-Border Data Transfers: If personal data is transferred across borders, third-party vendors must ensure compliance with the Data Privacy Act and GDPR. Third-party vendors must enter into agreements ensuring that cross-border data transfers meet the legal requirements for data protection.
  • Third-Party Data Processing: If third-party vendors process personal data, they must sign a Data Processing Agreement (DPA) with ROC.PH outlining their obligations and responsibilities concerning data protection.

4. Consumer Protection and Marketing

Third-party vendors must adhere to consumer protection laws to prevent deceptive or misleading advertising, ensure fair product offerings, and honor warranties and refund policies. This includes:

  • Fair Advertising: All third-party advertising campaigns and marketing materials must comply with the Consumer Protection Act to avoid false claims, misrepresentation, or deceptive practices.
  • Consumer Rights: Vendors must respect consumer rights, including product returns, refunds, and warranties in line with applicable regulations.

5. Intellectual Property

  • Licensing: ROC.PH and its third-party vendors must ensure that all integrated tools, software, and technologies are legally licensed. Vendors must provide proof of proper licenses for any third-party intellectual property used in their services.
  • Ownership of Deliverables: Any intellectual property (e.g., software, design, code) created during the integration process shall be clearly defined in a written agreement. ROC.PH shall retain ownership of any work product developed specifically for the company, unless otherwise stated.
  • Infringement: Third-party vendors must guarantee that their products or services do not infringe upon any intellectual property rights, including patents, trademarks, copyrights, and trade secrets.

6. Third-Party Vendor Risk Management

ROC.PH shall conduct thorough due diligence when evaluating third-party vendors. The following aspects will be reviewed:

  • Legal and Regulatory Compliance: Vendors must be compliant with all relevant laws, including the Philippine National Privacy Commission (NPC) regulations, and international laws if applicable (e.g., GDPR).
  • Business Continuity and Risk Assessment: ROC.PH will assess the vendor’s business continuity plans, including disaster recovery and data backup measures.
  • Financial Stability: ROC.PH will verify that the third-party vendors are financially stable to avoid disruptions in service delivery.

7. Indemnity and Liability

  • Indemnity: Third-party vendors shall indemnify and hold ROC.PH harmless from any claims, damages, or expenses arising from the use of their services, including legal fees associated with data breaches, intellectual property infringement, or other regulatory violations.
  • Liability: ROC.PH is not liable for the actions or failures of third-party vendors. However, ROC.PH will work closely with vendors to ensure minimal service disruption, data loss, or any adverse impact on client relationships.

8. Dispute Resolution and Jurisdiction

In case of a dispute arising from third-party integrations, the following procedures will apply:

  • Jurisdiction: Disputes will be resolved in the jurisdiction where ROC.PH is incorporated or where the primary contract governing the integration was signed. If applicable, third-party vendors must adhere to Philippine laws or, in the case of international vendors, the laws of the country where ROC.PH operates.
  • Arbitration: ROC.PH and third-party vendors shall agree to resolve disputes through arbitration in the event of a conflict that cannot be settled amicably.

9. Third-Party Performance Monitoring

ROC.PH will continuously monitor the performance of third-party services to ensure that they meet agreed-upon service levels, security standards, and operational requirements. This includes:

  • Regular Audits: ROC.PH may conduct audits of third-party services to ensure compliance with agreed-upon standards.
  • Service Level Agreements (SLAs): Vendors must adhere to SLAs that define expected service levels, including uptime, response time, and issue resolution timelines.

10. Termination and Exit Strategy

In the event of termination of a third-party integration:

  • Data Return/Deletion: ROC.PH shall ensure that all personal data handled by the third-party vendor is returned or securely deleted upon termination, in compliance with data privacy laws.
  • Transfer of Services: ROC.PH will ensure that, if applicable, any services provided by the vendor can be transferred to another provider without significant disruption to operations.

11. Continuous Review and Updates

ROC.PH will periodically review and update this policy to ensure compliance with changing laws, regulations, and industry standards. Any updates to the policy will be communicated to third-party vendors and other stakeholders.

Acknowledgment

By entering into a third-party integration agreement with ROC.PH, all parties acknowledge and agree to comply with this policy and all applicable laws and regulations.