Privacy Policy

This Privacy Policy applies to visitors, job seekers, workers, recruitment agencies and their representatives, agency team members, and other people who use or interact with LayagOFW. It covers the website, accounts, profiles, job listings, applications, messages, verification, billing, support, and related services.

The production policy must identify the LayagOFW operating entity responsible for deciding how and why personal information is processed, its registered address, and its Data Protection Officer. Those details have not yet been supplied and must be published before launch.

Depending on the features used and the recruitment stage, LayagOFW may handle:

• Account and contact details, verification status, and login-security records.
• Recruiter-facing profile details, including skills, history, education, certifications, languages, availability, preferences, and broad location.
• Private identity and readiness information, including birth and address details, government or passport information and images, selfie or identity evidence, PEOS evidence, and health information when lawfully required.
• Applications, screening answers, CVs, attachments, status updates, interviews, messages, support requests, consent records, and safety reports.

LayagOFW may handle information about an agency and the individuals acting for it, including:

• Agency name, license and sector information, offices, contacts, directory profile, verification state, principals, job pools, and vacancies.
• Representative names, work contacts, position, authority, verification evidence, roles, permissions, and account activity.
• Listings, applicant notes, messages, moderation records, billing details, credits, subscriptions, and transaction references.
• Information from DMW or other public records, agencies, principals, and lawful verification sources.

Systems may record IP address, browser and device type, operating system, timestamps, pages and features used, referral information, session identifiers, approximate location derived from IP, and error, notification, and security events. This supports delivery, security, troubleshooting, abuse prevention, and improvement.

Information may come directly from you, automatically from Platform use, from another authorized user, or from lawful third-party and public sources.

• Registration, profile, application, messaging, verification, payment, feedback, and support forms.
• Agencies, principals, workers, and team administrators creating or updating recruitment records.
• Public government directories used to populate or verify agency information.
• Infrastructure, identity, communications, payment, security, analytics, and support providers acting under appropriate terms.

LayagOFW processes personal information for specified and legitimate purposes, including to:

• Create, verify, secure, and administer accounts and permissions.
• Build worker profiles, enable job discovery and matching, submit authorized applications, and support agency review and communication.
• Publish and verify agency directory information, listings, principals, and job-pool details.
• Operate paid agency features, keep transaction records, and provide support.
• Detect fraud, impersonation, illegal recruitment, abuse, and security incidents.
• Diagnose errors, measure reliability and feature use, improve accessibility, and develop Platform functions.
• Meet legal obligations, respond to lawful requests, resolve disputes, and protect users and the public.

Depending on context, processing may be based on consent, requested pre-contract steps or performance of a contract, legal obligation, protection of lawful rights and interests, or another basis permitted by the Philippine Data Privacy Act of 2012 and its implementing rules.

Sensitive personal and privileged information receives additional protection. Identity, health, government-issued, or similar information should be collected only when necessary, proportionate, supported by an appropriate legal basis, and protected by access and retention controls. Consent may be withdrawn where it is the basis, without affecting earlier lawful processing.

Public agency directory information and worker information deliberately made recruiter-facing may be visible beyond the account owner. A worker’s visible profile should remain professional.

Legal identity, full addresses, emergency contacts, passport documents, health data, private screening answers, and security records are not intended for public profiles. Access is limited to authorized recipients and purposes, but workers should review each disclosure before submitting it.

Information may be disclosed only as reasonably necessary for the stated purposes, including to:

• The responsible recruitment agency when a worker applies, consents, or uses a feature that clearly requires sharing.
• Authorized agency team members and principals involved in a legitimate recruitment process.
• Vendors providing hosting, storage, communications, verification, security, support, analytics, or payments under contractual safeguards.
• Government bodies, regulators, courts, law enforcement, or other parties when required or permitted by law or necessary for rights, safety, and security.
• A lawful business successor, subject to notice and continuing privacy obligations where required.

After receiving applicant information, an agency may act as a separate personal information controller and is responsible for its own notice, lawful basis, security, retention, access management, transfers, and rights handling. LayagOFW does not authorize unrelated marketing, resale, surveillance, discrimination, or recruitment outside the disclosed purpose without another lawful basis.

Overseas recruitment involves other countries, and infrastructure providers may process data in other jurisdictions. Before a transfer, LayagOFW and participating agencies must use a lawful mechanism and reasonable contractual, organizational, and technical safeguards appropriate to the information and destination.

Information is kept only as long as reasonably necessary for its purpose, active accounts and recruitment, user instructions, legal records, fraud prevention, security, payments, disputes, and enforcement. The period depends on record type, sensitivity, law, risk, and whether data can be safely deleted or anonymized.

Account closure or removal of visible content may not immediately remove secure backups or legally required records. When retention ends, information should be securely deleted, anonymized, or rendered inaccessible under documented schedules.

Safeguards appropriate to risk should include role-based access, authentication, encryption in transit, secure storage, logging, backups, vendor review, confidentiality, and incident response. No online system is completely secure, so users must protect credentials, verification codes, devices, and documents.

Suspected breaches are assessed, contained, investigated, documented, and remediated. Affected people and the National Privacy Commission will be notified when and within the period required by law, with relevant risk and response information.

The Platform may use session cookies, local storage, and similar technology needed for authentication, security, preferences, forms, and core functions. Optional analytics, if enabled, should be identified in a cookie notice and controlled through an appropriate consent choice where required. Blocking core technology may prevent features from working.

Profile, preference, destination, category, and activity information may help rank, filter, or recommend opportunities and candidates. These tools support discovery and do not guarantee suitability or replace agency decisions. If solely automated decisions with legal or similarly significant effects are introduced, specific notice and legally required rights must be provided.

Subject to applicable law and appropriate identity verification, data subjects may exercise:

• Right to be informed about collection and processing.
• Right to object, including withdrawal of consent where relied upon.
• Right to access personal information and processing details.
• Right to rectify inaccurate or incomplete information.
• Right to erase or block information where the law provides.
• Right to data portability when legal requirements apply.
• Right to claim damages for violations of data-protection rights.
• Right to file a complaint with the National Privacy Commission.

The production policy must publish the Data Protection Officer contact. A request should identify the account or record, the right exercised, and enough information to verify identity without collecting unnecessary data. LayagOFW may seek clarification or decline a request where law permits and should explain the refusal and escalation route.

You may contact the National Privacy Commission through its official channels. Do not send passport images, passwords, verification codes, or unnecessary sensitive information in an initial complaint.

Worker accounts and overseas applications are intended for adults aged 18 or older. LayagOFW does not knowingly invite children to create worker accounts. Discovered child data should be restricted and deleted unless law requires retention.

Third-party sites and services have their own privacy practices. This Policy may be updated for legal, security, business, or product changes. Material changes will be communicated through the Platform or another suitable channel, will show an effective date, and earlier versions should be retained where needed.