Privacy Policy

Draft - reviewed by legal, pending Ran's details.

Effective date: [date to be set at publication]

Who we are

ExTeam BPO ("we", "us") is an outsourcing company at Brgy. San Miguel, Dulag, Leyte 6505, Philippines. We decide how the personal information collected through exteambpo.com is used. You can reach our Data Protection Officer at dpo@exteambpo.com.

What we collect

  • Contact Us form: your name, email address and message, and, if you choose to give them, your phone number and company website. A hidden field helps us filter out spam.
  • Join Us applications: the details you enter and the CV or other file you upload. Please don't include sensitive information such as your age, marital status, health, religion or government ID numbers unless the role asks for it.
  • Email: your email address and whatever you include in your message.
  • Technical data: our website host, Cloudflare, logs basic data such as your IP address, browser type, the pages you visit and the time, to keep the site secure and working.

Why we use it, and our legal basis

  • Inquiries: to reply to you and discuss our services. These are steps you asked for before a possible contract, and our legitimate interest in answering business inquiries (Data Privacy Act, Sec. 12(b) and (f)).
  • Applications: to assess you for roles at ExTeam BPO and, where relevant, to present your profile to the client the role is for. These are steps you asked for before a possible engagement. We rely on your consent for any sensitive information you include, which you give when you submit the form.
  • Technical data: to keep the website secure and running, which is our legitimate interest.

We don't sell your personal information, and we don't use it for automated decisions about you.

Who we share it with

  • Service providers that store or process data for us only on our instructions: Google Workspace (email, form records, job applications and resume files) and Cloudflare (website hosting).
  • Clients: if you apply for a role serving a specific client, we may share your CV and relevant application details with that client to assess you for the role.
  • Government authorities, when the law requires it.

Data stored outside the Philippines

Our service providers and some clients are located outside the Philippines, including [Australia, New Zealand, the United States and Canada]. When your data is stored or shared abroad, we remain responsible for it and use contracts that protect it to a standard comparable to Philippine law.

How long we keep it

  • Inquiries: 2 years after our last contact with you.
  • Applications not taken forward: 6 months after the role is filled. With your consent, we keep your profile in our talent pool for 12 months so we can consider you for future roles.
  • Successful applicants: your details become part of your engagement records under our employee or contractor privacy notice.
  • Website technical logs: as long as Cloudflare's standard retention.

After that, we delete the data or make it anonymous.

How we protect it

We limit access to people who need it, use accounts protected by strong passwords and two-step sign-in, and rely on our providers' encryption. If a breach affects your data, we will notify you and the National Privacy Commission as the law requires.

Your rights

Under the Data Privacy Act of 2012, you have the right to:

  • be informed about how we use your data
  • access it
  • object to its use
  • have it corrected
  • have it erased or blocked
  • receive a copy in a portable format
  • claim damages
  • file a complaint with the National Privacy Commission (privacy.gov.ph)

To use any of these rights, email dpo@exteambpo.com. We will reply within 15 working days. You can withdraw your consent at any time. Withdrawing doesn't affect what we did before.

Cookies and tracking

We don't use analytics, tracking or advertising cookies on this website. If that changes, we will update this policy before we start.

Children

This website is not intended for anyone under 18.

Changes to this policy

We may update this policy. The effective date above shows when it last changed, and we will highlight significant changes on this page.

Contact us

You can reach our Data Protection Officer at dpo@exteambpo.com, or write to ExTeam BPO, Brgy. San Miguel, Dulag, Leyte 6505, Philippines. For general questions, email contactus@exteambpo.com.