Privacy Policy

Next Right Move (NRM)

Effective Date: October 27, 2026
Last Updated: October 27, 2026

Website: https://nrmblueprint.com
Business Name: Next Right Move (NRM)
Legal Service Provider: Jerry Glenn Malig-on
Business Structure: Sole Proprietorship
Business Registration: DTI business name registration pending
Business Location: Tagum City, Davao del Norte, 8100, Philippines
Privacy Contact: admin@nrmblueprint.com

1. Introduction

Next Right Move ("NRM," "we," "us," or "our") respects your privacy and recognizes the importance of protecting personal information.

This Privacy Policy explains how we collect, use, process, store, share, and protect personal information when you interact with our website, submit applications, use our services, access our platforms, or communicate with our team.

NRM provides business diagnostic services, strategic advisory, execution support, managed remote talent, and related business solutions. These include the JGM Strategic Blueprint™, Work With NRM engagements, client management systems, and the NRM Inner Circle.

We seek to process personal information responsibly and in accordance with applicable data protection laws, including:

• The Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing regulations.
• The European Union General Data Protection Regulation (EU GDPR), where applicable.
• The United Kingdom General Data Protection Regulation (UK GDPR), where applicable.
• Other applicable privacy and data protection requirements.

By accessing our website or using our services, you acknowledge that you have been provided with this Privacy Policy. This acknowledgement does not replace consent where consent is legally required.

2. Who We Are

Jerry Glenn Malig-on is the legal service provider operating as Next Right Move (NRM), a sole proprietorship based in Tagum City, Davao del Norte, 8100, Philippines. DTI business name registration is pending. NRM provides services to clients, prospects, professionals, and organizations across different markets.

Business Details

• Business Name: Next Right Move (NRM)
• Legal Service Provider: Jerry Glenn Malig-on
• Business Structure: Sole Proprietorship
• Business Registration: DTI business name registration pending
• Business Location: Tagum City, Davao del Norte, 8100, Philippines
• Website: https://nrmblueprint.com
• Privacy Contact: admin@nrmblueprint.com

Our role in processing personal information

Depending on the nature of our activities, NRM may act as:

Data Controller / Personal Information Controller

For processing where NRM determines why and how personal information is collected and processed, the responsible personal information controller is Jerry Glenn Malig-on operating under the Next Right Move (NRM) brand. This includes information submitted through our website, applications, business diagnostics, recruitment activities, and account registration.

Data Processor / Personal Information Processor

When NRM processes personal information on behalf of a client under that client's instructions, such as during certain managed talent, administrative support, marketing, operational, or execution activities.

Where NRM acts as a processor, the relevant client generally determines the purposes and lawful basis of the processing. The applicable client agreement and data processing terms govern our responsibilities.

The Terms of Service govern applicable website and service use and are available at https://nrmblueprint.com/terms-of-service. This Privacy Policy remains a separate notice about personal data processing.

3. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed through:

• The NRM website and related online pages.
• Work With NRM applications and intake forms.
• JGM Strategic Blueprint™ diagnostic intake forms and assessments.
• Prospect and client dashboards.
• Account registration, login, and authentication processes.
• Strategic review discussions and client communications.
• Contracts, invoices, payment administration, and onboarding processes.
• NRM Inner Circle applications, profiles, recruitment, and talent matching.
• Business development and professional communications.
• Services delivered by NRM personnel or authorized specialists.
• Other interactions where this Privacy Policy is presented or referenced.

This policy does not automatically apply to independent third-party websites, applications, or services that have their own privacy practices.

4. Personal Information We Collect

The information we collect depends on how you interact with NRM.

4.1 Identity and contact information

We may collect:

• First and last name.
• Business or organization name.
• Job title or professional role.
• Email address.
• Telephone number, if provided.
• Country, city, or business location.
• Business website.
• Professional profile information, including LinkedIn profiles where relevant.

4.2 Business and diagnostic information

When you apply to work with NRM or use the JGM Strategic Blueprint™, we may collect information concerning:

• Business objectives and priorities.
• Business operations and internal workflows.
• Sales, marketing, and customer acquisition processes.
• Revenue, expenses, financial performance, and commercial targets.
• Conversion performance and sales pipeline information.
• Business capacity and resource allocation.
• Current team structure and responsibilities.
• Operational constraints and execution challenges.
• Customer segments and target markets.
• Business systems, tools, and processes.
• Performance indicators, historical results, and supporting documents.
• Information submitted through diagnostic questionnaires or strategic discussions.

Business information may contain personal data where it identifies individuals, employees, customers, contacts, or other natural persons.

4.3 Client account and service information

We may process:

• Account registration details.
• Authentication identifiers and account security information.
• Client and prospect records.
• Submitted forms and intake responses.
• Diagnostic reports and recommendations.
• Project and task information.
• Communication histories.
• Contractual and engagement details.
• Documents and information necessary for onboarding, service delivery, and support.

Passwords should be handled through secure authentication mechanisms. We do not require users to disclose their passwords to NRM personnel.

4.4 NRM Inner Circle and recruitment information

When individuals apply to join our professional network or talent pool, we may collect:

• Full name and contact information.
• Resume or curriculum vitae.
• Employment history.
• Professional experience.
• Skills and technical competencies.
• Industry experience.
• Education and qualifications.
• Work samples and portfolio links.
• Professional references, where provided or lawfully obtained.
• Availability and preferred working arrangements.
• Expected compensation or professional rates.
• Interview, assessment, and application information.

We may also create internal records concerning demonstrated capabilities, relevant experience, and suitability for specific execution requirements.

4.5 Transaction and payment information

Where relevant to an engagement, we may process:

• Billing name and contact details.
• Invoice and receipt records.
• Payment amounts and currency.
• Transaction dates and references.
• Payment status.
• Contractual and financial administration records.

Payment processing may involve authorized third-party providers. We do not intend to collect or store complete payment card information unless required and supported by an appropriately secured payment system.

4.6 Technical and usage information

When you access our website or online systems, technical information may be collected through our infrastructure or applicable technology providers, including:

• Internet Protocol (IP) address.
• Browser type and version.
• Device and operating system information.
• Website access timestamps.
• Pages visited and navigation activity.
• Referring websites.
• Login and security events.
• Cookies or similar identifiers, where used.
• Error reports and diagnostic logs.

Such information may be used for security, service operation, troubleshooting, and website improvement.

4.7 Sensitive personal information

NRM does not generally require sensitive personal information for ordinary business inquiries or strategic assessments.

Please avoid submitting unnecessary information concerning health, religious beliefs, political opinions, government identification numbers, or other sensitive categories.

If sensitive personal information must be processed for a legitimate and lawful purpose, we will apply the additional protections and legal conditions required by applicable law.

5. How We Collect Information

We may collect personal information:

Directly from you, when you submit forms, register accounts, apply for services, join the NRM Inner Circle, contact our team, or participate in discussions.

Through business engagements, when you or an authorized representative provide information required for diagnostics, onboarding, strategic planning, execution, or ongoing service delivery.

From professional or publicly accessible sources, such as business websites, publicly available professional profiles, and legitimate business directories, where collection is lawful.

From referrals and business introductions, where another person or organization lawfully shares your professional contact details.

From service providers and technology systems, where technical, security, authentication, or transaction information is generated in connection with your use of our services.

Where personal information is not obtained directly from you, we will provide any additional notice required by applicable law, subject to lawful exceptions.

6. Why We Process Personal Information

We process personal information only where there is an appropriate purpose and lawful basis.

Where the GDPR applies, the relevant lawful basis depends on the circumstances.

Where we rely on legitimate interests, we consider the purpose, necessity, and potential impact on the rights and freedoms of affected individuals.

Where processing depends on consent, you may withdraw that consent as permitted by law.

For processing governed by Philippine law, NRM will also identify and apply an appropriate lawful basis under the Data Privacy Act of 2012 and relevant regulations.

7. JGM Strategic Blueprint™ and AI-Assisted Processing

NRM may use software systems, analytical frameworks, and artificial intelligence-assisted tools in delivering certain services.

These activities may include:

• Reviewing submitted business information.
• Organizing diagnostic responses.
• Identifying possible operational or commercial constraints.
• Supporting business performance analysis.
• Preparing draft findings and strategic recommendations.
• Developing execution priorities and suggested next steps.
• Supporting capability requirements and talent matching.
• Improving the consistency and efficiency of internal workflows.

Human oversight

AI-generated outputs may be incomplete, inaccurate, or unsuitable for a particular business context.

NRM's diagnostic framework is intended to support informed business decisions, not replace appropriate professional judgment.

Where decisions have material consequences for individuals, including recruitment or access to opportunities, NRM will assess whether applicable laws require human intervention, additional safeguards, or restrictions on solely automated decision-making.

Automated decision-making and profiling

NRM may use structured scoring, classification, or analytical processes to support internal review.

Such analysis may consider business constraints, operational readiness, professional competencies, or other relevant information.

NRM does not intend to rely on solely automated decisions that produce legal or similarly significant effects on individuals without satisfying applicable legal requirements.

Where applicable, individuals may request information about relevant automated processing and exercise the rights available to them under law.

AI service providers

Where external AI or technology providers process personal information on NRM's behalf, their involvement must be subject to appropriate contractual, confidentiality, security, and data protection safeguards.

NRM seeks to limit information submitted to external systems to what is reasonably necessary for the relevant task.

Users and clients should avoid including unnecessary personal or sensitive information in diagnostic submissions.

8. How We Share Personal Information

NRM does not sell personal information to data brokers or advertisers.

We may disclose information to appropriate recipients where necessary and lawful.

8.1 Authorized NRM personnel

Information may be accessed by authorized individuals performing functions such as:

• Strategic analysis.
• Account management.
• Administrative support.
• Client onboarding.
• Service delivery.
• Talent assessment.
• Technical operations.
• Billing and compliance.

Access should be limited according to legitimate business requirements and assigned responsibilities.

8.2 Technology and service providers

Information may be processed by third-party providers supporting functions such as:

• Website hosting and infrastructure.
• Cloud storage and databases.
• Business communications and email.
• Customer and prospect relationship management.
• AI-assisted analysis.
• Authentication and account security.
• Payment processing.
• Analytics and technical monitoring.
• Document management and electronic signatures.

The specific providers involved may change as NRM's systems develop.

Where required, NRM will maintain appropriate arrangements governing confidentiality, processing instructions, security, and other data protection responsibilities.

8.3 Clients and authorized business representatives

Information may be shared with clients or their authorized representatives when necessary to deliver services, coordinate work, administer an engagement, or assess talent suitability.

Talent profiles and application information will be shared only for legitimate, relevant purposes and in accordance with an appropriate legal basis.

8.4 Legal and regulatory disclosures

We may disclose information where reasonably necessary to:

• Comply with applicable laws.
• Respond to valid legal processes.
• Cooperate with authorized regulators.
• Protect the rights, safety, or property of relevant parties.
• Investigate suspected fraud, security incidents, or unlawful activity.

9. International Data Transfers

NRM operates from the Philippines and may work with clients, personnel, and technology providers in other countries.

Consequently, personal information may be processed or accessed outside the country where it was originally collected.

Where international transfers are subject to the GDPR or UK GDPR, NRM will assess the applicable transfer restrictions and establish an appropriate lawful transfer mechanism where required.

Depending on the circumstances, these mechanisms may include:

• An applicable adequacy decision.
• European Commission-approved Standard Contractual Clauses.
• Relevant UK international data transfer safeguards.
• Supplementary technical or organizational measures where necessary.
• Another legally permitted transfer mechanism.

NRM will not represent that a transfer is protected by a particular safeguard unless that safeguard has actually been implemented.

Individuals may contact admin@nrmblueprint.com for information about relevant international transfer arrangements and available safeguards, subject to legal and confidentiality restrictions.

10. Information Security

NRM recognizes the importance of protecting personal and business information against unauthorized access, loss, misuse, disclosure, alteration, and destruction.

We aim to implement security measures appropriate to the nature of the information, the processing activity, and the associated risks.

Depending on the system and service, measures may include:

• Role-based access permissions.
• Authentication and account security controls.
• Restricted administrative privileges.
• Secure storage and transmission mechanisms.
• Access management and account removal procedures.
• Confidentiality obligations.
• Data minimization.
• Software maintenance and security updates.
• Monitoring and incident response procedures.
• Appropriate vendor security assessments.

No online system or transmission method can be guaranteed to be completely secure.

Where a personal data breach occurs, NRM will assess the incident and comply with applicable notification, response, and remediation obligations.

Users are responsible for taking reasonable precautions to protect their account credentials and notify NRM of suspected unauthorized account activity.

11. Data Retention

NRM retains personal information only for as long as reasonably necessary for the relevant purpose, subject to applicable laws, contractual requirements, legitimate interests, and recordkeeping obligations.

Retention decisions may consider:

• The duration of an active business relationship.
• The purpose for which information was collected.
• Applicable tax, accounting, and legal requirements.
• Contractual obligations.
• Security and dispute-resolution needs.
• Whether the individual requests deletion or withdraws consent.
• Whether information can be anonymized or securely removed.

Typical retention considerations

Prospect and inquiry information: Retained while an inquiry or commercial opportunity remains relevant, and for a limited subsequent period where justified.

Client and engagement records: Retained during service delivery and for an appropriate period afterward to support contractual, accounting, legal, and operational requirements.

Diagnostic submissions and results: Retained for the duration necessary to provide access, support engagement continuity, and meet legitimate recordkeeping obligations.

Inner Circle and recruitment records: Retained while relevant to an application or ongoing professional relationship, and only for an additional justified period where lawful.

Financial and contractual records: Retained for periods required by applicable laws and legitimate legal or accounting obligations.

Technical and security logs: Retained for periods proportionate to operational and security needs.

NRM will establish and apply appropriate documented retention schedules for relevant record categories.

Where information is no longer required, it should be securely deleted, anonymized, or otherwise handled in accordance with applicable law.

Deletion from active systems may not immediately remove data from backups where temporary backup retention is technically necessary and legally justified.

12. Your Privacy Rights

Depending on your jurisdiction and the applicable law, you may have rights concerning your personal information.

These may include:

Right to be informed

You may request information about the processing of your personal data.

Right of access

You may request access to personal information NRM holds about you, subject to applicable restrictions.

Right to rectification

You may request correction of inaccurate or incomplete information.

Right to erasure or blocking

You may request deletion, erasure, or blocking of personal information where the relevant legal conditions are met.

Right to object

You may object to certain types of processing, including direct marketing.

Right to restrict processing

Where the GDPR applies, you may request restrictions on certain processing activities.

Right to data portability

Where legally applicable, you may request certain personal information in a structured, commonly used, machine-readable format or request its transfer to another organization.

Right to withdraw consent

Where processing relies on consent, you may withdraw that consent at any time.

Withdrawal does not invalidate processing lawfully carried out before withdrawal.

Rights relating to automated decision-making

Where applicable, you may exercise rights concerning qualifying solely automated decisions, including requesting human intervention or contesting a decision.

Right to complain

You may submit a complaint to an appropriate data protection authority.

How to exercise your rights

Send your request to:

admin@nrmblueprint.com

Include sufficient information to identify the relevant account, application, engagement, or processing activity.

NRM may request reasonable verification of identity before disclosing, modifying, or deleting personal information.

We will assess and respond to requests within the periods required by applicable law.

Some requests may be subject to lawful exemptions or limitations, including legal retention requirements and the rights of other individuals.

Where NRM processes information solely on behalf of a client, we may direct the request to the appropriate data controller or assist that controller in responding.

13. Cookies and Similar Technologies

NRM's website and related platforms may use cookies or similar technologies for functions such as:

• Maintaining authenticated sessions.
• Supporting essential website functionality.
• Protecting accounts and systems.
• Remembering appropriate preferences.
• Measuring website performance, where analytics are implemented.
• Supporting marketing activities, where applicable.

Cookies may be categorized as:

Strictly necessary cookies: Required for essential website functions and security.

Functional cookies: Used to remember preferences or improve functionality.

Analytics cookies: Used to understand website usage and performance.

Marketing cookies: Used for advertising measurement or related promotional purposes, if implemented.

Where applicable law requires consent for non-essential cookies or tracking, NRM will request valid consent before activating those technologies.

Users should be able to withdraw or change applicable consent preferences.

You may also manage certain cookies through your browser settings, although disabling necessary cookies may affect website functionality.

NRM's actual cookie practices and consent controls must reflect the technologies deployed on its website.

14. Marketing and Business Communications

NRM may communicate with clients, prospects, and professional contacts concerning:

• Requested information and inquiries.
• Business opportunities.
• Service updates.
• Strategic discussions.
• Relevant NRM services and resources.
• Professional relationship management.
• Events or content that may be relevant to a legitimate business interest.

Where required, marketing communications will be sent only with appropriate consent.

Where legitimate interests or another lawful basis permit business communications, NRM will respect applicable objection and opt-out requirements.

You may request that promotional communications stop by using an available unsubscribe mechanism or contacting:

admin@nrmblueprint.com

Opting out of marketing does not necessarily prevent essential service, contractual, security, or administrative communications.

15. Client Confidentiality and Data Processing

NRM may receive confidential business information and personal information while delivering diagnostic, advisory, operational, or managed talent services.

We recognize that clients may share information relating to their employees, customers, suppliers, prospects, and internal operations.

Where NRM processes personal information on behalf of a client:

• Processing should follow the client's documented lawful instructions.
• Access should be limited to authorized personnel.
• Personnel should be subject to appropriate confidentiality obligations.
• Appropriate security measures should be applied.
• Subprocessors should be engaged in accordance with applicable contractual and legal requirements.
• NRM should assist with relevant privacy obligations where legally and contractually required.
• Information should be returned, retained, or deleted in accordance with applicable agreements and legal requirements.

Where required, NRM and the client will establish a Data Processing Agreement or equivalent contractual protections.

Clients are responsible for establishing their own lawful authority to collect and disclose personal information to NRM.

Clients should not provide unnecessary sensitive personal information or information they are not authorized to share.

16. NRM Inner Circle and Talent Applications

NRM maintains processes for evaluating and coordinating professionals who may be suitable for client requirements and internal execution opportunities.

When individuals submit applications, resumes, work histories, or professional information, NRM may use this information to:

• Review professional backgrounds.
• Assess relevant competencies and experience.
• Identify capability requirements.
• Consider suitability for particular opportunities.
• Contact applicants regarding relevant work.
• Coordinate interviews or selection discussions.
• Maintain application and professional relationship records.
• Support appropriate talent matching and deployment decisions.

NRM may use evidence-supported assessments and structured capability classifications as part of this process.

Submitting an application does not guarantee acceptance, employment, engagement, placement, or assignment to a client.

Personal information will be shared with prospective clients or authorized reviewers only where lawful and relevant to a legitimate opportunity.

Applicants may contact admin@nrmblueprint.com to exercise applicable privacy rights or request information about their records.

17. Children's Privacy

NRM's website and services are designed primarily for businesses, professionals, and individuals legally capable of entering relevant commercial or professional arrangements.

Our services are not directed toward children.

NRM does not knowingly seek to collect personal information from children where doing so would be unlawful or inappropriate.

If we become aware that personal information relating to a child has been collected without an appropriate legal basis or required authorization, we will take appropriate steps to address the situation, including deletion where required.

A parent or legal guardian may contact admin@nrmblueprint.com concerning relevant information.

18. External Websites and Third-Party Services

Our website or communications may contain links to external websites, platforms, payment providers, professional networks, scheduling tools, or other third-party services.

These services may operate independently and maintain their own privacy policies.

NRM is not responsible for the independent privacy practices of third parties that are not acting as our processors or under our control.

We encourage users to review the applicable privacy information before providing personal information to external services.

19. Changes to This Privacy Policy

NRM may update this Privacy Policy to reflect:

• Changes in applicable privacy laws.
• Developments in our business services.
• Changes to our website or technology infrastructure.
• New processing activities.
• Updated security or governance practices.
• Changes to relevant service providers.
• Operational or regulatory requirements.

The latest version will be made available at:

https://nrmblueprint.com/privacy-policy

We will update the "Last Updated" date when material revisions are made.

Where applicable law requires additional notice or consent for a change, NRM will take the necessary steps before relying on the revised processing arrangements.

20. Contact Information and Privacy Complaints

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to raise a concern about our handling of personal information, please contact:

Next Right Move (NRM)

Business Location: Tagum City, Davao del Norte, 8100, Philippines
Email: admin@nrmblueprint.com
Website: https://nrmblueprint.com

Please use the subject line Privacy Request where practical so your inquiry can be identified and routed appropriately.

We encourage individuals to contact NRM directly so that we have an opportunity to investigate and address privacy concerns.

You also have the right, where applicable, to submit a complaint to the relevant supervisory authority.

Philippines

National Privacy Commission (NPC)
Website: https://privacy.gov.ph

European Union / European Economic Area

Where the EU GDPR applies, individuals may lodge complaints with an appropriate supervisory authority, including the authority in the EU member state of their habitual residence, place of work, or location of an alleged infringement.

United Kingdom

Where the UK GDPR applies, individuals may contact the Information Commissioner's Office (ICO).
Website: https://ico.org.uk

Next Right Move (NRM)

Strategic Clarity. Right Execution. Sustainable Growth.

Effective Date: October 27, 2026
Last Updated: October 27, 2026

Official Privacy Policy: https://nrmblueprint.com/privacy-policy