Organization: GNB Manpower Services

Update: July 2025

Purpose

We value your privacy. This notice explains what personal data we collect, why we collect it, how we use and protect it, when we may share it, how long we keep it, and how you can exercise your rights primarily under the Philippine Data Privacy Act of 2012 (RA 10173) and its IRR, and, where relevant, comparable Asian data-protection regimes.

Scope & Legal Basis

This notice covers applicants, employees, contract/temporary workers, and referees whose data we process for recruitment, placement, payroll, compliance, and client servicing in the Philippines and, where needed, across Asia.

Processing is based on your consent or on permissible bases under RA 10173 (e.g., contract performance, legal obligations, legitimate interests, protection of vitally important interests).

Personal Data We Collect

Collected directly from you or via clients/representatives, verbally or in writing, only as necessary for safe, lawful, and efficient operations:

Identity & Contact: full name, current/permanent address, email, mobile/phone, emergency contact.

Employment & Qualifications: work history, pay history, skills/certifications, education/training records, language preference, shift/availability.

Government/Compliance IDs (PH-specific): SSS, PhilHealth, Pag-IBIG/HDMF, TIN, UMID, driver’s license or other government-issued photo ID; NBI/Police/Barangay clearances where required.

Financial (for payroll): bank name/branch, account number, pay instructions.

For foreign nationals working in PH (as applicable): AEP (DOLE) details, ACR I-Card, 9(g) work visa or other immigration identifiers.

Sensitive Personal Information (only if necessary and with added safeguards/consent): health/fit-to-work results, union membership (if volunteered), information issued by government unique to you (e.g., ID numbers), and records relevant to statutory claims or proceedings.

How We Use Your Data

Recruit, assess, and place you into roles (temporary, project-based, or permanent).

Verify credentials, conduct background/reference checks where lawful and necessary.

Administer payroll, benefits, taxes, timekeeping, and statutory remittances.

Meet legal/regulatory duties (labor, tax, immigration, OSH).

Manage site access, safety, incident reporting, and workforce scheduling.

Maintain business records, analytics, audit trails, and service quality.

Communicate job opportunities, assignment updates, and service feedback.

Sharing & Disclosures

We do not sell personal data. We may share data only as needed and lawful with:

Government & Regulators (PH): DOLE, BIR, SSS, PhilHealth, Pag-IBIG, Bureau of Immigration, NBI, law enforcement, courts, and relevant LGUs.

Clients & Prospective Clients (local/regional): for job matching, onboarding, site access/safety, and compliance.

Service Providers: banks (payroll), insurers/HMOs, background screening, occupational health clinics, payroll/HRIS platforms, IT/security, document storage, and audit/compliance partners.

Legal/Audit: external counsel, auditors, risk and claims administrators only when necessary and under confidentiality.

Cross-Border Data Transfers (Asia & Beyond)

When we transfer data outside the Philippines (e.g., to regional clients or cloud providers), we do so with your consent and/or appropriate safeguards (data-sharing agreements, contractual clauses, access controls). Other countries may have different data-protection laws; we apply comparable protections and limit access to a need-to-know basis.

Retention

We keep data only as long as necessary for the purposes above or as required by law:

Employment/tax records: up to 10 years (to align with Philippine tax record retention practices).

Payroll/timekeeping & labor claims: generally at least 3 years from separation/end of engagement.

Recruitment files (unsuccessful applicants): typically up to 2 years or as permitted by consent/legitimate interest.
When no longer needed, data are securely disposed of (secure deletion for electronic files; cross-cut shredding for paper).

Security Measures

We implement organizational, physical, and technical safeguards consistent with RA 10173/NPC guidance, including: role-based access, confidentiality undertakings, encryption in transit/at rest (where applicable), MFA on critical systems, audit logs, secure storage, retention controls, vendor due diligence, and breach response procedures.

Your Data Subject Rights (RA 10173)

You have the right to: be informed, object, access, rectify/correct, erase/block (as legally allowable), data portability (where feasible), and file a complaint with the National Privacy Commission (NPC).

To exercise your rights or ask questions, contact us (details below). We will verify your identity and respond within reasonable timeframes.

Limiting Use or Withdrawing Consent

If you wish to limit, object to, or withdraw consent for certain processing, contact us. We will explain any impacts on services (e.g., payroll/statutory processing that we must continue under law).

Children’s Data

We do not intentionally recruit or process data of individuals below the legal working age. If you believe a minor’s data was provided, contact us to remove or remedy it.

Contact Us (Data Privacy Concerns/Requests)

If you have questions, concerns, or requests regarding the collection and use of your personal information, please contact us at the following address:

– Raphael Perreault-Touzin, Vice President of Finance & Administration
– [email protected]

By using our platform, you accept the collection and use of your personal information in accordance with this policy.

We reserve the right to update this policy from time to time to reflect changes in our data collection and usage practices.

Any updates will be posted on this page with an updated revision date.