This Privacy Policy applies to all personal data collected by HERO, whether through our website, mobile applications, ERP system, documents, emails, biometric systems, or any other communication channels. It covers individuals who interact with us, including:
-Employees and job applicants
-Clients and customers
-Suppliers and subcontractors
-Website visitors and mobile app users
Personal Data We Collect
The personal data we collect may include, but is not limited to:
Employees and Job Applicants
- Full name, birthdate, and contact details
- Government-issued IDs (SSS, TIN, PhilHealth, Pag-IBIG, PRC license, etc.)
- Employment history, educational background, and certifications
- Payroll and bank account details
- Health and medical records (for workplace safety compliance)
- Biometric data (fingerprint or facial recognition for attendance tracking)
- Background check records (NBI clearance, as required for employment)
Clients and Customers
- Full name and contact details
- Project details and requirements
- Billing and payment information
Suppliers and Subcontractors
- Business name, contact details, and TIN
- Payment and bank account information
- Contracts and agreements
Website and ERP System Users
- Login credentials and usage data
- IP addresses and browser information
- Any information voluntarily submitted through contact forms
Purpose of Data Collection
We collect and process your personal data for the following purposes:
For Employees and Job Applicants
- Recruitment and hiring process
- Payroll, benefits, and government compliance
- Training, performance evaluation, and career development
- Workplace safety and security
- Timekeeping and attendance tracking (using biometric data)
For Clients and Customers
- Project management and contract execution
- Billing and invoicing
- Customer service and inquiries
For Suppliers and Subcontractors
- Supplier accreditation and contract processing
- Payment and financial transactions
For Website and ERP System Users
- User authentication and access management
- System performance monitoring and improvement
Data Sharing and Disclosure
We do not sell, rent, or trade your personal data. However, we may share your information with:
- Government agencies (e.g., BIR, SSS, DOLE) for compliance purposes
- Financial institutions for payroll processing and payments
- IT service providers for system maintenance and security
- Third-party contractors or suppliers involved in our projects (only when necessary)
We do not share personal data with affiliated companies, as HERO operates independently.
Any sharing of data will be done in accordance with the Data Privacy Act of 2012 and only for legitimate business or legal purposes.
Data Protection Measures
HERO implements appropriate security measures to protect your personal data, including:
- Secure storage with access controls and encryption
- Regular system updates and security patches
- Internal policies on data access and handling
- Restricted access to biometric data to authorized personnel only
- Non-disclosure agreements with employees and third-party service providers
In the event of a data breach, we will notify affected individuals and the National Privacy Commission (NPC) as required by law.
Data Retention Policy
We retain personal data only as long as necessary for business, legal, or regulatory purposes. While we do not yet have a standard retention period, we follow these general guidelines:
- Employee records: Retained during employment and for a reasonable period after resignation/termination for legal compliance
- Client and supplier records: Retained for the duration of contracts and for legal or audit purposes
- Website and ERP data: Retained for system performance monitoring, unless requested for deletion
When no longer needed, data will be securely disposed of through deletion, shredding, or other secure means.
Your Rights Under the Data Privacy Act
Under the Data Privacy Act of 2012, you have the following rights:
- Right to Be Informed – You have the right to know how your data is collected and used.
- Right to Access – You can request a copy of the personal data we hold about you.
- Right to Object – You can opt out of data processing that is not necessary for our services.
- Right to Rectification – You may request corrections to any inaccurate or outdated data.
- Right to Erasure or Blocking – You can request deletion of your data under certain conditions.
- Right to Data Portability – You may obtain a copy of your data for use in another service.
- Right to File a Complaint – You may file a complaint with the National Privacy Commission if your data privacy rights are violated.
To exercise your rights, you may contact us at 032-417-2664 or email admin@hcdc.com.ph.
Contact Information
For any inquiries, concerns, or requests related to this Privacy Policy, you may reach us at:
Hero Construction and Development Corporation
Rm 304 Albulario Bldg 2
37 Gen Maxilom Ave
Camputhaw, Cebu City
6000
The General Manager serves as the Data Protection Officer (DPO) and is responsible for privacy-related concerns and compliance.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website and, when appropriate, notified to affected individuals.
By continuing to use our services, you acknowledge and agree to the terms of this Privacy Policy.