Privacy Policy

Personal Data We Collect

The personal data we collect may include, but is not limited to:

Employees and Job Applicants

1. Full name, birthdate, and contact details
2. Government-issued IDs (SSS, TIN, PhilHealth, Pag-IBIG, PRC license, etc.)
3. Employment history, educational background, and certifications
4. Payroll and bank account details
5. Health and medical records (for workplace safety compliance)
6. Biometric data (fingerprint or facial recognition for attendance tracking)
7. Background check records (NBI clearance, as required for employment)

Clients and Customers

1. Full name and contact details
2. Project details and requirements
3. Billing and payment information

Suppliers and Subcontractors

1. Business name, contact details, and TIN
2. Payment and bank account information
3. Contracts and agreements

Website and ERP System Users

1. Login credentials and usage data
2. IP addresses and browser information
3. Any information voluntarily submitted through contact forms

Purpose of Data Collection

We collect and process your personal data for the following purposes:

For Employees and Job Applicants

1. Recruitment and hiring process
2. Payroll, benefits, and government compliance
3. Training, performance evaluation, and career development
4. Workplace safety and security
5. Timekeeping and attendance tracking (using biometric data)

For Clients and Customers

1. Project management and contract execution
2. Billing and invoicing
3. Customer service and inquiries

For Suppliers and Subcontractors

1. Supplier accreditation and contract processing
2. Payment and financial transactions

For Website and ERP System Users

1. User authentication and access management
2. System performance monitoring and improvement

Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. However, we may share your information with:

1. Government agencies (e.g., BIR, SSS, DOLE) for compliance purposes
2. Financial institutions for payroll processing and payments
3. IT service providers for system maintenance and security
4. Third-party contractors or suppliers involved in our projects (only when necessary)

We do not share personal data with affiliated companies, as HERO operates independently.

Any sharing of data will be done in accordance with the Data Privacy Act of 2012 and only for legitimate business or legal purposes.

Data Protection Measures

HERO implements appropriate security measures to protect your personal data, including:

1. Secure storage with access controls and encryption
2. Regular system updates and security patches
3. Internal policies on data access and handling
4. Restricted access to biometric data to authorized personnel only
5. Non-disclosure agreements with employees and third-party service providers

In the event of a data breach, we will notify affected individuals and the National Privacy Commission (NPC) as required by law.

Data Retention Policy

We retain personal data only as long as necessary for business, legal, or regulatory purposes. While we do not yet have a standard retention period, we follow these general guidelines:

1. Employee records: Retained during employment and for a reasonable period after resignation/termination for legal compliance
2. Client and supplier records: Retained for the duration of contracts and for legal or audit purposes
3. Website and ERP data: Retained for system performance monitoring, unless requested for deletion

When no longer needed, data will be securely disposed of through deletion, shredding, or other secure means.

Your Rights Under the Data Privacy Act

Under the Data Privacy Act of 2012, you have the following rights:

1. Right to Be Informed – You have the right to know how your data is collected and used.
2. Right to Access – You can request a copy of the personal data we hold about you.
3. Right to Object – You can opt out of data processing that is not necessary for our services.
4. Right to Rectification – You may request corrections to any inaccurate or outdated data.
5. Right to Erasure or Blocking – You can request deletion of your data under certain conditions.
6. Right to Data Portability – You may obtain a copy of your data for use in another service.
7. Right to File a Complaint – You may file a complaint with the National Privacy Commission if your data privacy rights are violated.

To exercise your rights, you may contact us at 032-417-2664 or email [email protected].

Contact Information

For any inquiries, concerns, or requests related to this Privacy Policy, you may reach us at:

Hero Construction and Development Corporation

Rm 304 Albulario Bldg 2

37 Gen Maxilom Ave

Camputhaw, Cebu City

6000

The General Manager serves as the Data Protection Officer (DPO) and is responsible for privacy-related concerns and compliance.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website and, when appropriate, notified to affected individuals.

By continuing to use our services, you acknowledge and agree to the terms of this Privacy Policy.