Privacy policy
Plain-language summary
We collect only what we need to run a search and to employ people compliantly. We do not sell your personal information. We share it only with the parties needed to deliver the service, or where the law requires it. You can ask us what we hold about you, correct it, or have it deleted. Everything below sets out the detail, including your rights and how to reach us.
This Privacy Policy explains how APAC Talent Hub (“we”, “us”, or “our”) collects, uses, discloses, transfers, retains, and protects personal information. APAC Talent Hub provides talent search and compliant employment services from the Philippines to client companies internationally. We are committed to handling personal information lawfully, fairly, and transparently, in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (the “NPC”), and, where they apply to our processing, the data protection laws of the markets we serve.
Who this policy covers
This policy applies to all personal information we process about individuals whose data we handle in the course of our business, including: visitors to and users of this website; representatives of our client companies and prospective clients; candidates and applicants we consider for roles; individuals we help hire and employ; and referees and other third parties who provide information in connection with a search. Our services and this website are directed at businesses and professionals.
Who is responsible
For the personal information described in this policy, APAC Talent Hub acts as a Personal Information Controller under the Data Privacy Act, meaning we determine the purposes and means of processing. Where we process personal information on behalf of a client under a services agreement, we act as a Personal Information Processor for that client, and the client’s own privacy notice governs that processing. Our employment and payroll partners, who enable compliant local employment in the Philippines, process certain information as separate controllers or as our processors, as set out in the relevant agreement.
You can reach our Data Protection Officer using the contact details at the end of this policy.
Information we collect
We collect the following categories of personal information, depending on your relationship with us.
From clients and prospects
Name, work email address, telephone number, company, role, and the hiring requirements and related information you share with us in the course of a discovery call or engagement.
From candidates and applicants
Name and contact details, résumé or CV, work history, skills, qualifications and certifications, salary expectations, right-to-work information, and any additional information you or your referees provide during a search. You provide this information voluntarily when you apply or when we consider you for a role.
From individuals we hire and employ
The additional information required to employ you compliantly in the Philippines, which may include government-issued identifiers (such as SSS, PhilHealth, Pag-IBIG, and TIN numbers), bank account details for payroll, date of birth, home address, emergency contacts, and dependents or beneficiaries where relevant to statutory benefits.
Automatically from this website
Basic technical and usage information such as IP address, approximate location, device and browser type, and pages viewed, recorded in standard server logs as described under Cookies and analytics below.
Sensitive information
Some information we handle may constitute sensitive personal information under the Data Privacy Act (for example, government identifiers, or health information relevant to statutory benefits). We collect sensitive personal information only where it is necessary for a lawful purpose, and we process it in accordance with the heightened requirements of the Act, including obtaining consent where the Act requires it. We do not request sensitive information that we do not need.
How we use it, and our lawful bases
We use personal information only for the purposes for which it was collected, or for compatible purposes. Under the Data Privacy Act we rely on one or more lawful criteria for processing (including consent, the performance of a contract, compliance with a legal obligation, and legitimate interests that are not overridden by your fundamental rights). Where the data protection law of another market applies, we rely on the equivalent lawful basis under that law.
- To provide our services, including running searches, presenting candidates, and arranging compliant employment. Basis: performance of a contract, and our legitimate interest in operating and delivering our business.
- To administer employment, payroll, and statutory benefits, and to meet related obligations. Basis: performance of a contract, compliance with a legal obligation, and, where required, your consent.
- To communicate with you, respond to enquiries, and send resources you request. Basis: legitimate interest, or your consent.
- To operate, secure, and improve this website. Basis: legitimate interest.
- To comply with applicable law and to establish, exercise, or defend legal claims. Basis: compliance with a legal obligation, and legitimate interest.
We do not sell your personal information, and we do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects concerning you.
Who we share it with
We disclose personal information only in the following circumstances, and only to the extent necessary.
- Client companies, when we share candidate profiles for a role you are being considered for, with an appropriate basis for doing so.
- Our employment and payroll partners, who enable compliant local employment of team members in the Philippines.
- Government agencies and regulators, where required for statutory contributions, taxation, employment compliance, or in response to a lawful request.
- Trusted service providers who process personal information on our behalf under written terms, such as hosting, analytics, scheduling, and communication tools.
- Professional advisers, and prospective or actual parties to a corporate transaction, where lawfully permitted and subject to appropriate confidentiality obligations.
We require our processors to protect personal information under terms consistent with this policy and applicable law, and to use it only for the purposes we specify.
International transfers
We serve companies in the United States, the United Kingdom, Australia, New Zealand, Singapore, and Hong Kong, and we use service providers that may operate outside the Philippines. As a result, personal information may be transferred to, stored in, or accessed from countries other than the one in which it was collected. Where we transfer personal information across borders, we take reasonable steps to ensure it is protected in accordance with the Data Privacy Act and other applicable law, including through contractual safeguards with the recipients, and we remain accountable for information transferred to third parties for processing.
How long we keep it
We retain personal information only for as long as necessary to fulfil the purposes described in this policy, to comply with our legal, tax, and regulatory obligations, and to establish, exercise, or defend legal claims. Employment and payroll records are retained for the minimum periods required by Philippine law. When personal information is no longer required and is no longer subject to a retention obligation, we securely delete, anonymize, or de-identify it.
How we protect it
We implement organizational, physical, and technical security measures appropriate to the nature and sensitivity of the personal information we hold, including access controls, encryption of data in transit, confidentiality obligations on our personnel, and due diligence over our service providers. No method of transmission or storage is completely secure; however, we work to protect personal information and to respond promptly and appropriately to any security incident.
Data breaches
We maintain procedures to detect, assess, and respond to personal data breaches. Where a breach occurs that meets the notification thresholds under the Data Privacy Act or other applicable law, we will notify the National Privacy Commission and affected individuals within the timeframes and in the manner required, and we will take reasonable steps to mitigate the effects of the breach.
Your rights
Subject to applicable law and any lawful limitations, you have rights in relation to your personal information. Under the Data Privacy Act these include the rights to be informed, to access, to object, to rectification, to erasure or blocking, to data portability, to damages, and to lodge a complaint. Where the data protection law of another market applies to our processing, you may have equivalent or additional rights under that law, including the right to withdraw consent where processing is based on consent.
To exercise any right, contact us using the details below. We will verify your identity and respond within the timeframes set by applicable law. You also have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph), or with the data protection authority in your own jurisdiction.
Cookies and analytics
We do not use cookies to track you, and we do not run analytics or advertising software on this website. No cookie is set for marketing, profiling or measurement purposes. Our hosting provider processes standard server request information, such as your IP address and browser type, to deliver the site securely and reliably. You can control cookies through your browser settings at any time. If we introduce analytics in future, we will update this policy and ask for your consent first.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make a material change, we will update the “last updated” date at the top of this page and, where appropriate, provide a more prominent notice. We encourage you to review this policy periodically.
Contact and complaints
For any privacy question or request, or to contact our Data Protection Officer, email privacy@apactalenthub.com. If you have a complaint about how we have handled your personal information, please contact us first so we can try to resolve it. If you remain dissatisfied, you may refer the matter to the National Privacy Commission of the Philippines, or to your local data protection authority.
This policy is provided in good faith as a clear statement of our practices. It is not legal advice and does not create rights beyond those provided by applicable law. It is reviewed with qualified counsel before it is relied upon in a client engagement.