Applicant Data Privacy Notice

This Applicant Data Protection Notice is issued in compliance with the Data Privacy Act of 2012 and other applicable laws. The Company is committed to processing applicant personal data in a lawful, fair, and transparent manner and to upholding the highest standards of confidentiality, integrity, and accountability during recruitment and hiring.

1. What Personal Data We Collect

The Company values and respects the privacy rights of all applicants. In the course of recruitment and hiring, we collect and process personal information necessary for legitimate business purposes, such as:

• Evaluating suitability for Call Center, Field, and Back-End positions across our 18 branches

• Scheduling and conducting assessments, interviews, and onboarding activities

• Communicating application status and next steps

• Maintaining accurate recruitment records and analytics

• Compliance with legal obligations and pre-employment verification

2. How We Use Your Data

Personal data is processed using secure systems and may be maintained in both electronic and physical formats, subject to strict access controls.

Applicant personal data is processed primarily to:

• Assess qualifications and skills for current vacancies

• Administer recruitment assessments and interviews

• Maintain accurate recruitment records and applicant databases

• Ensure compliance with statutory and regulatory obligations

• Protect the legitimate interests of both the applicant and the Company

All personal data is processed lawfully, fairly, and transparently, and retained only as long as necessary to fulfill recruitment purposes or as required by law.

3. Data Sharing

The Company may share applicant personal data only in accordance with the Data Privacy Act of 2012, its Implementing Rules, and other applicable laws. Sharing is limited to legitimate purposes, including:

• Government agencies for verification or compliance purposes

• Third-party service providers supporting recruitment, assessments, or background checks

• Auditors, consultants, and legal advisers for compliance and legal matters

• Authorized business partners assisting in recruitment campaigns, sourcing, or onboarding

All third parties are bound by confidentiality and data protection agreements. Applicants will be informed of such arrangements and may provide or withdraw consent where applicable.

4. Applicant Rights

Applicants have the right to:

• Right to be informed: Be informed about how their personal data is processed

• Right of access: Access and request copies of their personal data

• Right to rectification: Rectify inaccurate or outdated information

• Right to erasure (or "right to be forgotten"): Withdraw consent, when applicable

• Right to restrict processing: Object to processing personal data

• Right to data portability: Request a copy of your personal data or have it transferred to another PIC in a structured, commonly used format.

• Right to damages: Seek compensation if your personal data is mishandled, unlawfully used, or causes you harm.

5. Data Security and Retention

The Company enforces organizational, technical, and physical safeguards to protect applicant personal data against unauthorized access, alteration, disclosure, or destruction.

Applicant data will be retained for 3 years, or as required by law, to support recruitment records, analytics, and potential future job opportunities. After this period, records will be securely disposed of or anonymized.

6. Data Breach Escalation

All personnel handling applicant data must report any actual, suspected, or potential data breach immediately to the Data Protection Officer (DPO), HR Department, or Information Security Officers.

Failure to report or unauthorized disclosure may result in disciplinary action and legal consequences under applicable laws.

7. Contact Information

For concerns or inquiries regarding this Privacy Notice or collection and processing of personal data, you may contact:

Data Protection Officer (DPO)

S.P. Madrid & Associates

Contact#: +639190616514

Email: privacy@spmadridlaw.com

S.P. Madrid Corporation

Contact#: +639190616514

Email: dpo@spmadridlaw.com

Statement of Commitment

This Privacy Notice affirms the Company’s commitment to process personal data in a lawful, fair, and transparent manner while upholding the highest standards of confidentiality, integrity, and accountability.