Fil-Expat Placement Agency, Inc. (“Fil-Expat,” “we,” “us,” or “our”) is a Philippine recruitment agency, DMW licence number: DMW-129-LB-07032023-R), with its office at Rm. 403 FSE Bldg. 73 3671, Bautista St, Makati City, 1235 Metro Manila. We are committed to protecting your privacy and handling your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).
This Privacy Policy explains what personal data we collect through fepa-ph.com and in the course of our recruitment services, why we collect it, how we use and protect it, and what rights you have.
Personal information
For applicants, we may also collect:
Sensitive personal information
As part of the deployment process, we may collect sensitive personal information, such as medical examination results and government-issued ID numbers. We collect this only when it is needed for recruitment and deployment, and only with your consent or where otherwise permitted by law.
We process personal data only where we have a lawful basis under the Data Privacy Act, including your consent, the need to carry out a contract or take steps at your request before entering one, compliance with a legal obligation, and our legitimate interests, where these do not override your rights. Sensitive personal information is processed only with your consent or where otherwise allowed by law.
We do not sell your personal data. We share it only with parties who need it for the purposes described here.
Because our work involves employers abroad, your personal data may be transferred to and processed in other countries. When this happens, we take reasonable steps, including contractual safeguards, to keep your data protected.
We keep personal data only for as long as needed for the purposes above or as required by law, including record-keeping rules for licensed recruitment agencies. When data is no longer needed, we securely dispose of it.
We apply organizational, physical, and technical security measures to protect personal data from unauthorized access, disclosure, alteration, loss, and destruction. These include access controls, limiting data access to authorized personnel, and confidentiality obligations for staff and service providers. In the event of a personal data breach, we will respond and notify the NPC and affected individuals as required by law.
Under the Data Privacy Act, you have the right to:
If you are in the European Economic Area or the United Kingdom, you may have additional rights under the GDPR or UK GDPR.
To exercise your rights, email our Data Protection Officer using the details below. We may ask you to verify your identity first.
Our services are intended for adults and employers. We do not knowingly collect personal data from anyone under 18.
Name: [DPO NAME]
Email: [DPO EMAIL]
Address: [PHYSICAL ADDRESS]
Phone: [PHONE]
We may update this Privacy Policy from time to time. The latest version will always be posted here with the revised date.