Hier Payroll

Data Privacy Policy

COMPLIANCE TO R.A. 10173 (DATA PRIVACY ACT)

Hier Business Solutions, Inc. (HBSI) is committed to safeguard your personal data and uphold your privacy in compliance with the Republic Act No. 10173 or the (Data Privacy Act of 2012), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (“DPA”).

We have issued this Data Privacy Notice to assure you, our clients, suppliers, and providers how we value the personal information that you have entrusted to us. As a software payroll provider, we process personal information whether manually or by automated means, protect it through reasonable measures, and dispose it if necessary, by following a set of procedures and guidelines.

I. Personal Data Collection

To deliver our services, we collect personal data and process them according to the type of transaction or service availed: A. Personal details such as but not limited to personal name, company name, contact address, contact details, and job title; B. Valid government-issued identification such as but not limited to Tax Identification Number ID, Passport ID, Driver’s License, Passport, PRC Professional License ID, PAG-IBIG ID, UMID, PSA National ID (including ePhilID), SSS/GSIS ID, or Philhealth Card; C. Employee personal data such as but not limited to name, company/employer, address, position/job title, work schedule, salary rate, loans and payment schedule, contact details, and ID numbers of those listed in “B”; D. Any other information that a mutually approved third party may require most especially during loans processing and payment pursuant to the provisions of Republic Act No. 9160 or the Anti-Money Laundering Act of 2001 (as amended), its Implementing Rules and Regulations, and issuances of the Anti-Money Laundering Council (AMLAC).

II. Data Collection Method and Processing

HBSI collects personal data during introductory business meetings and product demonstrations. We also collect and/or process data during the following instances: A. Submission of application forms and proposals B. Contract signing and notarization C. Project implementation D. Data migration (manual to digital or system transfer) E. Software trainings and webinars F. Customer support and troubleshooting G. Availing of third-party products and services such as employee loans H. Credit and collection or account payment related services I. Account suspension, termination, or reinstatement J. Contract pre-termination or renewal K. Product promotion campaigns L. Sending of System Update notices M. Product development or enhancement N. Account records updating

III. Personal Information Controller

HBSI is the Personal Information Controller (PIC) under the DPA. It operates the Hier Payroll system. Third-party products and services may be offered on the system for the benefit and convenience of the registered subscribers. We will never sell, rent, share, trade, or disclose Personal Data to any unauthorized third party. As such, transactions with any authorized third party are covered with a data-sharing agreement which is also subject to the provisions of the DPA or lawful mandate in the case of government regulatory agencies.

IV. Data Retention

HBSI actively retains Personal Data during the following instances:

1. Subscription to the Hier Payroll ecosystem 2. Availing of third-party products and services such as employee loans

V. Personal Data Disposal

HBSI as the PIC shall delete personal data from the system provided the following conditions are met:

1. Termination of subscription to Hier Payroll system with full settlement of obligations 2. Termination of subscription to third-party products and services with full settlement of obligations 3. Termination of suspended accounts after two (2) months with due notice.

VI. Data Protection Measures

HBSI assures you that manual, electronic, and encryption procedures are in place to safeguard Personal Data within reasonable industry standards. In the event of a breach, you will be immediately notified and updated as regards to repair and recovery efforts.

VII. Data Subject Rights

Under the DPA, you are free to exercise the following rights:

1. Right to be informed prior to data entry and processing 2. Right to be updated after personal information has been processed 3. Right to reasonably access personal information 4. Right to dispute or correct inaccurate or erroneous personal information 5. Right to suspend, withdrew, or order the blocking, removal, or destruction of personal information if found to be incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes, or no longer necessary for their originally intended purpose 6. Right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information 7. Right to data portability 8. Right to lodge a complaint before the National Privacy Commission

VIII. Amendments

HBSI shall amend this Data Privacy Notice as needed. Online copy and updated version can be found at www.hierpayroll.com.

IX. Concerns and Inquiries

If you have concerns, corrections, or questions regarding the handling of your Personal Data or wish you exercise your rights as defined in Chapter VII, please course all your communications to:

Data Protection Officer Hier Business Solutions Inc. [email protected]