Applicant Privacy Notice PH

Last Updated: June 9, 2026

1. WHO WE ARE

Enshored, Inc. (“Enshored”, “we”, “us” or “our”) is a business process outsourcing (BPO) company providing customer experience, content moderation, sales support, and back-office solutions to clients across multiple industries worldwide.

At our core, we believe in responsible and ethical business practices. We achieve our goals and deliver our services by ensuring the personal data we process is secure and individual privacy rights are protected. We place the highest regard on the data privacy and security of our stakeholders, embedding principles from the Data Privacy Act of 2012 (DPA) and other relevant laws into every process.

2. WHAT IS IN THIS DATA PRIVACY NOTICE

This Data Privacy Notice (“Privacy Notice”) describes how we collect, handle and protect your personal data in connection with our processes and programs and your application.

The words “personal data”, “personal information”, “sensitive personal information”, “processing of personal data”, and other related terminologies in this Privacy Notice are used in the same context as they are found in the applicable Data Privacy Laws.

As such, please refer to the following definitions:

• Personal data pertains to all kinds of information – personal, sensitive personal, and even privileged or confidential information.
• Personal information is information or set of information that can be used to identify an individual such as name, mailing address, email address, telephone number, mobile number, a photo or a video image of a person and other personal details.
• Sensitive Personal Information is any information about individual’s race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations; individual’s health or education; about any criminal, civil or administrative proceeding of an individual; unique government issued identifiers; and those established by law as classified.
• Processing of Personal Data refers to any operation or any set of operations performed upon personal information including, but not limited to, the collection, use, storage, disclosure or disposal.

3. OUR BASIS FOR PROCESSING YOUR PERSONAL DATA

As we conduct our recruitment and talent acquisition activities, we may process your Personal Data in accordance with the following lawful basis:

• Consent. Your consent, which you may withdraw anytime unless there is other basis for processing.
• Contract. To allow us to fulfill our obligations and exercise our rights under relevant contracts.
• Lawful Rights. To protect our lawful rights and interests in court proceedings or to establish, exercise or defend legal claims.
• Legitimate Interest. For our legitimate business interests such as to determine your qualification and fitness for the position applied.
• Legal Obligation. To comply with our legal obligations or as may be required by labor, tax, social security and other applicable laws.

4. WHAT WE COLLECT

During our employee sourcing and recruitment process, we may collect personal and sensitive personal information such as but not limited to:

Identifiers

• Full name, photo, signature
• Position applied, site location
• CCTV footage
• Licences, certificates, memberships and accreditations
• Career and work history: job title, company, tenure, responsibilities, skills, and language
• Screening question answers: expected salary, educational attainment level, system and software experience, years of BPO experience, English language proficiency level
• Assessment results (language proficiency, typing, and skills assessments), interview notes and evaluation results
• Character references (name, email address, phone numbers)

Contact Information

• Email address, phone/mobile number
• City or home address (residence / location)

Sensitive Personal Information

• Date of birth, age, gender (optional, for diversity and inclusion purposes only)
• Educational background: course, institution, year finished, highest educational attainment

5. HOW WE COLLECT YOUR PERSONAL DATA

Most of the personal data we process is provided to us directly by you when you submitted your application/resume through:

• Job boards (Jobstreet, LinkedIn, Indeed) – through screening questions and resume submission;
• Our careers website at https://www.enshored.com/careers/ – through the application form or attached resume;
• Job fairs and recruitment events in partnership with third parties; and
• Online assessment forms and third-party language proficiency and skills assessment platforms.

We may also collect your personal data from other sources such as:

• Headhunters and recruitment agencies;
• Employee referrals – current Enshored employees who refer you through our Employee Referral Program;
• Online job placement agencies or job boards where your profile is publicly available;
• Your performance assessment and other personal data from former managers, colleagues, and other authorized sources.

6. WHAT WE DO WITH YOUR DATA

Enshored uses your personal data to process and evaluate your application and determine your qualifications for the position applied for.

We collect and use your personal data for the following purposes:

• To identify you and verify your identity as a job applicant;
• To determine whether your location is suitable for the onsite work arrangement;
• To evaluate your qualifications, skills, experience, and suitability for the position applied for;
• To communicate with you throughout the recruitment process, including scheduling interviews and issuing results;
• To conduct applicant assessments, including language proficiency, typing, and skills tests;
• To facilitate the Employee Referral Program, including verification of the referral relationship and processing of referral incentives;
• To coordinate with authorized headhunters and recruitment agencies for candidate endorsement and billing purposes;
• To comply with diversity and inclusion reporting requirements (for optional gender data only);
• To comply with applicable labor, employment, and data privacy laws;
• To maintain records of the recruitment process for audit and compliance purposes;
• To conduct background verification where consented to.

To comply with our legal obligations, regulatory requirements and for other legal purposes:

• To process any complaints, implement preventive measures and to investigate act, omission, or misconduct that would constitute a violation of our contracts or the applicable laws.
• To verify your identity or conduct internal audits or reviews.
• To enforce our contractual obligations with clients/customers and fulfill our contractual and legal obligations arising from your intended employment with Enshored.
• To gather the necessary information required by law, record keeping and good business practices.
• To comply with our legal obligations and other regulatory requirements.
• To protect our lawful rights and interests in court proceedings and to establish, exercise or as defense from legal claims.

7. HOW LONG WE KEEP YOUR DATA

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including managing talent acquisition and supporting our legitimate business interests.

If your current application is unsuccessful, we will retain your data for two (2) years following the end of the recruitment process. This allows us to consider and match you with other suitable career opportunities that align with your qualifications.

Once this retention period expires, or if you choose to withdraw your consent (where applicable), your personal information will be permanently and securely destroyed. In line with our Record Retention Schedule and relevant regulations, this includes shredding physical documents and deleting or anonymizing electronic data.

8. HOW WE SECURE YOUR DATA

Enshored ensures that appropriate and necessary physical, administrative, technical and organizational safety measures and safety nets are in place to secure and protect against any unauthorized access, use, disclosure or unlawful processing of your personal data, accidental loss and destruction of the same.

Access to your personal data is limited to our authorized personnel and the authorized personnel of our third-party service providers, if any. These authorized personnel and third-party service providers are required to treat this information as confidential and must comply with the requirements of the Data Privacy Laws.

9. WHAT ARE THE RISKS INVOLVED

Data processing, despite the existence of even the best security features, always comes with risks. Security threats and incidents are now a question of when rather than an “if”. A data breach may happen when there is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.

10. WHEN DO WE SHARE YOUR DATA

We may share your personal data with the following parties, strictly on a need-to-know basis, to ensure efficient recruitment and business operations:

• Regulatory Bodies: Government authorities and regulators as required by law or to fulfill our legal obligations.
• Authorized Third-Party Service Providers: External partners who support our hiring infrastructure, such as headhunters, recruitment platforms, and IT system vendors.
• Internal Business Units: Other departments within Enshored for administrative purposes and internal shared services.
• Clients and Customers: Prospective or active clients who require candidate assessments as part of the pre-hiring process.
• Subsidiaries and Affiliates: Enshored-affiliated companies for corporate oversight and administrative management.

We do not share your personal data with any other third parties unless it is strictly necessary to deliver our services, or you have provided explicit consent. If your data is transferred or shared in these scenarios, it will be done in strict compliance with applicable Data Privacy Laws. You will be notified of the transfer, and Enshored will implement appropriate safeguards to guarantee the protection and integrity of your information.

11. WHAT ARE YOUR RIGHTS

Under the DPA, you have the following rights:

• Right to be informed. You have the right to be informed of how your data is collected, used, stored, shared and disposed and be furnished with such information before you disclose your information.
• Right to object. You have the right to object from giving consent to the processing of your personal data or withdrawing the same thereafter.
• Right of access. You have the right to ask us for information regarding the activities conducted on your personal information.
• Right to rectification. You have the right to ask us to modify or correct your personal data when the same is inaccurate, outdated or false.
• Right to erasure or blocking. You have the right to ask us to delete your personal information in certain circumstances or have us stop using your data for specific purpose/s.
• Right to data portability. You have the right to ask that we transfer the personal information you gave us to another organization, or to you, in certain circumstances.
• Right to damages. If you think that your rights as a data subject has been violated, or if you sustained damages due to any inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your personal information.

12. HOW TO EXERCISE YOUR DATA PRIVACY RIGHTS

If you would like to exercise any of the mentioned rights, if you have privacy concerns, if you believe that your personal information has been breached or your rights as a data subject have been violated, you may contact our Data Protection Office through:

Data Protection Officer
Enshored, Inc.
Contact: [email protected]
Address: 16th Floor, JMT Building, ADB Avenue, Ortigas Center, Pasig City 1605, Metro Manila

In addition, and where granted by applicable law, you may have the right to lodge a complaint with the National Privacy Commission (NPC).

13. CHANGES TO THIS PRIVACY NOTICE

This privacy notice is under regular review to make sure it is up to date and accurate. We will notify you of any changes to this privacy notice as long as we are storing your personal data.

Version 1 | Effective Date: June 9, 2026