OneForma — Privacy Policy

CENTIFIC and its affiliates are committed to protecting your privacy. This policy sets out what data we collect, how we use it, who we share it with, and the rights you have to control it.

Our approach to privacy

CENTIFIC GLOBAL SOLUTIONS, Inc. and its affiliates ("CENTIFIC", "we," "our," or "us") are committed to protecting your privacy. This privacy policy sets out how we collect, store, process, transfer, share, and use data that identifies or is associated with you ("Personal Information") and information regarding our use of cookies and similar technologies.

CENTIFIC operates a platform (OneForma) used to recruit crowd resources globally to support hosted projects, process work for different projects, and track resources' working hours. Users can register via our websites under the oneforma.com domain (our "Website") and browse, apply for published job opportunities, and take tasks from the online interface (the "Service").

This privacy policy applies to OneForma and all the tools that are part of it. Terms used in this privacy policy have the same meaning as in our Terms and Conditions unless otherwise defined here. Before accessing or using OneForma, please ensure that you have read and understood our collection, storage, use, and disclosure of your Personal Information as described in this policy.

CENTIFIC is the data controller of the Personal Information we hold about you. You can reach us at 14980 NE 31st Way, Suite 100, Redmond, WA, U.S. 98052; email [email protected]; phone +1.425.233.8578.

1. Personal information we collect and how we use it

We collect Personal Information about you when you voluntarily submit information directly to us when using OneForma. This can include information you provide when you register for an account; fill in a form; create or edit your profile; correspond with us via the Website, phone, e-mail, or otherwise; subscribe to our mailing lists, newsletters, or other forms of marketing communications; respond to surveys; or use some other feature of OneForma as available from time to time.

If you choose not to provide Personal Information, we may not be able to provide certain services to you or respond to your requests.

Supplemental notice — EU residents (GDPR)

CENTIFIC GLOBAL SOLUTIONS INC. processes your personal data through OneForma in order to:

Respond to your questions or information requests based on the consent you give us by contacting us or subscribing to our newsletter.
Register you on our platform, manage the freelancer/company relationship, manage your user account, provide our services, and enforce our Terms or protect the security and integrity of our Website.
Send you commercial communications about our services, legitimated by our legitimate interest.

Legal bases we rely on

The data subject has given consent to the processing of their personal data for one or more specific purposes — Art. 6.1.a GDPR 2016/679.
Processing is necessary for the performance of a contract to which the data subject is party — Art. 6.1.b GDPR.
Processing is necessary for the legitimate interests pursued by the controller or by a third party — Art. 6.1.f GDPR.

Retention periods

The data will be retained until the official termination of the relationship of the provision of services, and until no liability can be claimed in accordance with commercial and tax law.

Additional information

The table in Annex 1 sets out the categories of Personal Information we collect about you and how we use it, the legal basis on which we rely, the categories of recipients, and how we determine applicable retention periods. We also automatically collect Personal Information about how you access and use OneForma and the device you use — set out in Annex 2. We may also share your data with our vendors when they act as Processors of your Personal Information; our Processors comply with the highest standards of the data protection regulation.

Automated decisions and profiling

CENTIFIC GLOBAL SOLUTIONS INC. does not carry out automated decision-making or profiling.

2. Security and transferring your personal information

Security

We implement appropriate technical and organizational measures to protect your Personal Information against accidental or unlawful destruction, loss, change, or damage. All Personal Information we collect is stored on secure servers, and electronic transactions entered into via our Website are protected by SSL encryption. While we use these precautions to safeguard your Personal Information, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf.

International transfers

The Personal Information we collect may be transferred to and stored in countries outside of the jurisdiction you are in, where we and our third-party service providers have operations. We will only disclose Personal Information to third-party service providers who perform services on our behalf in accordance with applicable data protection laws, and on the basis that they are bound by contractual obligation to use it only for the specific business purposes for which we disclose it, to comply with applicable data protection obligations, and to provide the same or higher level of privacy protection.

Supplemental notice — EU residents (GDPR)

If you are located in the European Union, our servers are located in the US. Centific is aware of GDPR obligations regarding international data transfers, and we can ensure that these transfers are made pursuant to appropriate safeguards — such as Standard Contractual Clauses adopted by the European Commission and in accordance with the EU-US Privacy Framework. If you wish to know more about these safeguards, please contact us using the details at the end of this policy.

3. Your rights in respect of your personal information

Notice — EU residents (GDPR)

If you are located in the EU, in accordance with applicable privacy law you have the following rights in respect of the Personal Information we hold:

Right of access. The right to obtain access to your Personal Information.
Right to rectification. The right to obtain rectification of your Personal Information without undue delay where it is inaccurate or incomplete.
Right to erasure. The right to obtain erasure of your Personal Information in certain circumstances — for example, where it is no longer necessary in relation to the purposes for which it was collected.
Right to restriction of processing. The right to obtain restriction of the processing in certain circumstances — for example, where the accuracy of the data is contested.
Right to data portability. The right to receive Personal Information concerning you in a structured, common, machine-readable format, or request transmission to a third party, if the conditions in Art. 20 GDPR are met.
Right to object. The right to object to processing based on our legitimate interests at any time. You also have the right to object at any time to the use of your Personal Information for direct marketing.
Right to withdraw consent. If we are processing your Personal Information based on your consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details at the end of this policy. You can also review and edit your information by logging into your account on OneForma. You have the right to lodge a complaint with the Supervisory Authority in your jurisdiction.

Notice — California & Nevada residents

California law requires us to disclose the categories of personal information we have collected about California consumers (as defined in the CCPA), the categories of sources, the business or commercial purposes for collection, and the categories of parties with whom we share personal information. We may collect Personal Information for the following purposes:

Provide, maintain, analyse, and improve our website.
Communicate with you (including providing information of interest, conducting surveys, and responding to comments, questions, and requests).
Detect, prevent, and respond to fraud, abuse, and security issues.
Audit consumer interactions on our site (e.g. measuring ad impressions).
Bug detection, error reporting, and activities to maintain the quality or safety of our Service.
Investigate compliance with, enforce, and comply with the law.
Short-term, transient use such as customizing content displayed on the Service.
Improving our existing Service and developing new services.
Any other purpose described to you at the time of collection.

We may aggregate or de-identify information such that it is no longer linked to you. Please refer to Annex 1 and Annex 2 for details. If you are a California resident, you have the following rights under the CCPA and CPRA:

Right to access and data portability. You have the right to request that we disclose (1) the categories of Personal Information collected, sold, or shared; (2) the categories of sources from which it is collected; (3) the business or commercial purpose for collecting, selling, or sharing it; and (4) the categories of third parties with whom we share, disclose, or sell it.
Right to correct. You have the right to have your Personal Information corrected if it is inaccurate or incomplete.
Right to delete. You have the right to have your Personal Information deleted, subject to certain exceptions.
Right to limit use and disclosure of Sensitive Personal Information. You have the right to direct us to limit our use of your Sensitive Personal Information to that which is necessary to perform the Services.
Right to object to treatment — for example, where the treatment is based on our legitimate interests.
Right to be free from discrimination and retaliation imposed by us due to your exercise of any of the CCPA and CPRA rights.

To exercise your CCPA and CPRA rights, please contact us using the details at the end of this policy. Once we receive your request, we may verify it by requesting information sufficient to confirm your identity. We will respond within 45 days of receiving a verifiable request, or provide a notice of extension for an additional 45 days when reasonably necessary. We reserve the right to deny requests in certain circumstances permitted by applicable laws, and we will not discriminate or retaliate against you for exercising your rights.

If you are a Nevada resident, you may opt out of the sale of "Personally Identifiable Information" for monetary consideration. We do not engage in such activity, but you may submit a request to opt out of any potential future sales using the contact details at the end of this policy.

4. Cookies and similar technologies

Our Website uses cookies to distinguish you from other users. This helps us provide you with a good experience when you browse our Website, and also allows us to improve it. You can read our Cookie Policy for full details on the cookies we use and how to manage them.

5. Links to third-party sites

Our Website may, from time to time, contain links to and from third-party websites. If you follow a link to any of these websites, please note that they have their own privacy policies, and we do not accept any responsibility or liability for them. Please check the individual policies before you submit any information.

6. Our policy toward children

Our Service is not directed at persons under 18 and we do not knowingly collect Personal Information from children. If you become aware that your child has provided us with Personal Information without your consent, please contact us using the details below so we can take steps to remove it.

Transfer of information to the U.S. and other countries

CENTIFIC is a global company with affiliated companies across the world. Your Personal Information may be transferred to our affiliated companies or third-party service providers in other countries. We transfer information to operate efficiently, improve performance, and create redundancies to protect information in the event of an outage or other problem. We will process your information in a way that meets the commitments of this policy and complies with the law wherever we transfer it.

7. Changes to this policy

We may update this privacy policy from time to time, so you should review this page periodically. When we change this policy in a material way, we will update the "last modified" date at the end. Changes are effective when they are posted on this page.

8. Contacting us

Questions, comments, and requests regarding this privacy policy are welcome and should be addressed to the Data Protection Officer at:

Email: [email protected]
Mail: 14980 NE 31st Way, Suite 100, Redmond, WA 98052, USA
Phone: +1.425.233.8578

This privacy policy was last modified on 16 June 2025.

Annex 1 — Personal information we collect

Categories of Personal Information we collect, how we use it, the legal basis, recipients, and retention periods.

Category of data: Contact, identification, and personal characteristics (name, email, country of residence, native language, phone number).
Purpose: Registration; operate and provide the features and functionality of OneForma; communicate to deal with your queries and, where you have subscribed, send updates on work opportunities; prevent fraud.
Legal basis: Processing is necessary for the performance of a contract to which the data subject is party, or to take steps at the request of the data subject prior to entering into a contract.
Recipients: Law enforcement, regulators, and other parties for legal reasons; third parties as required by law or to comply with the law, enforce our Terms, protect the security or integrity of our Website, or protect the rights, property, or safety of CENTIFIC, our customers, or others; purchasers and third parties in connection with a business transaction (such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or part of our business).
Retention: No longer than necessary, in line with our legal obligations and retention schedule. Up to 5 years after contract termination, according to applicable laws.

Payment

Category of data: Economic and tax data (such as bank name and account number or PayPal account and related information).
Purpose: Payment for the provision of resources via OneForma; prevent fraud.
Legal basis: Performance of a contract to which the data subject is party; and the legitimate interests pursued by the controller.
Recipients: Law enforcement, regulators, and other parties for legal reasons; third parties as required by law or to comply with the law, enforce our Terms, protect the security or integrity of our Website, or protect the rights, property, or safety of CENTIFIC, our customers, or others; purchasers and third parties in connection with a business transaction (such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or part of our business).
Retention: No longer than necessary, in line with our legal obligations and retention schedule. Up to 10 years after contract termination, according to applicable laws.

Correspondence & comments

Category of data: Contact and identification data (such as name, email, phone number).
Purpose: Address your questions, issues, and concerns, deal with your queries, and improve OneForma where you have provided feedback.
Legal basis: The data subject has given unequivocal consent to the processing of their personal data for one or more specific purposes.
Recipients: Law enforcement, regulators, and other parties for legal reasons; third parties as required by law or to comply with the law, enforce our Terms, protect the security or integrity of our Website, or protect the rights, property, or safety of CENTIFIC, our customers, or others; purchasers and third parties in connection with a business transaction (such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or part of our business).
Retention: No longer than necessary, in line with our legal obligations and retention schedule. Up to 5 years after contract termination, according to applicable laws.

Profiling

Category of data: Contact, identification, and personal characteristics, plus education and professional data: basic details (gender, nationality, alternative email and phone, PO box), language skills, completed tests, education and work experience (CV, weekly availability), and technical skills and setup (typing speed, operating system used).
Purpose: Operate and provide the features and functionality of OneForma.
Legal basis: Processing is necessary for the performance of a contract to which the data subject is party, or to take steps at the request of the data subject prior to entering into a contract.
Recipients: Law enforcement, regulators, and other parties for legal reasons; third parties as required by law or to comply with the law, enforce our Terms, protect the security or integrity of our Website, or protect the rights, property, or safety of CENTIFIC, our customers, or others; purchasers and third parties in connection with a business transaction (such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or part of our business).
Retention: No longer than necessary, in line with our legal obligations and retention schedule. Up to 5 years after contract termination, according to applicable laws.

Location

Category of data: General information about your location, including IP address.
Purpose: Operate and provide targeted job advertisement and the functionality of OneForma.
Legal basis: Processing is necessary for the performance of a contract to which the data subject is party, or to take steps at the request of the data subject prior to entering into a contract.
Recipients: Law enforcement, regulators, and other parties for legal reasons; third parties as required by law or to comply with the law, enforce our Terms, protect the security or integrity of our Website, or protect the rights, property, or safety of CENTIFIC, our customers, or others; purchasers and third parties in connection with a business transaction (such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or part of our business).
Retention: No longer than necessary, in line with our legal obligations and retention schedule. Up to 5 years after contract termination, according to applicable laws.

Commercial communications

Category of data: Contact and identification data (such as name, email, phone number).
Purpose: Send you commercial information of interest related to similar or new services from our company.
Legal basis: The data subject has given consent to the processing for one or more specific purposes; and the legitimate interests pursued by the controller.
Recipients: Law enforcement, regulators, and other parties for legal reasons; third parties as required by law or to comply with the law, enforce our Terms, protect the security or integrity of our Website, or protect the rights, property, or safety of CENTIFIC, our customers, or others; purchasers and third parties in connection with a business transaction (such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or part of our business).
Retention: No longer than necessary, in line with our legal obligations and retention schedule. Up to 1 year, according to applicable laws, or until the user withdraws consent.

Annex 2 — Personal information collected automatically

Data collected automatically as you access and use OneForma.

Web access, user navigation & device

Category of data: Information about the website you came from and the website you go to when you leave ours, how frequently and when you access our Website and for how long, whether you open emails or click their links, whether you access from multiple devices, and other actions you take; information about the device you use to access our Website.
Purpose: Present our Website to you on your device, and monitor and improve our Website.
Legal basis: The data subject has given consent to the processing for one or more specific purposes.
Recipients: Law enforcement, regulators, and other parties for legal reasons; third parties as required by law or to comply with the law, enforce our Terms, protect the security or integrity of our Website, or protect the rights, property, or safety of CENTIFIC, our customers, or others; purchasers and third parties in connection with a business transaction (such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or part of our business).
Retention: No longer than necessary, in line with our legal obligations, legitimate business interests, retention schedule, and Cookie Policy.