Effective Date: April 1, 2026
WorkNow.ph is a jobs portal built to connect Filipino talent with employers. This policy explains what personal data we collect when you use the platform, why we need it, and what choices you have. We only handle your data when we have a proper legal reason to do so - and where the law requires it, we will ask for your consent first.
If you gave consent and later change your mind, you can withdraw it at any time through the "Cookie Preferences" link in our website footer. Withdrawing consent does not affect anything we processed before that point.
The platform is run by WorkNow, s.r.o., a Czech limited liability company (IČO: [IČO number]) with its registered seat at [Registered Address], Czech Republic. Because we are based in an EU member state, the GDPR applies to everything we do with personal data - for all users, not just those in the EU. We also follow the standards set by the Philippine Data Privacy Act (RA 10173) for our Filipino users.
| FRAMEWORK | WHERE | WHY IT APPLIES |
|---|---|---|
| General Data Protection Regulation (GDPR) | EU | Our company is incorporated in the Czech Republic, making us an EU-based controller for all users. |
| Czech Act No. 110/2019 Coll. | CZ | Domestic legislation that supplements the GDPR in the Czech Republic. |
| Philippine Data Privacy Act 2012 (RA 10173) | PH | Applies because we actively process data of users located in the Philippines. |
| NPC Circulars and Advisories | PH | Guidance from the National Privacy Commission that shapes how we handle Philippine user data. |
When standards differ, we follow whichever rule gives you the stronger protection.
Depending on where you are located, you may have all or some of the following rights:
| RIGHT | WHAT IT MEANS IN PRACTICE |
|---|---|
| Access | Ask for a copy of all personal data we hold about you, along with an explanation of how and why we use it. |
| Correction | Tell us if something we hold is wrong or out of date, and ask us to fix it. |
| Deletion | Request that we erase your data when we no longer have a valid reason to keep it. |
| Objection | Push back on processing we base on legitimate interests, or stop us from using your data for direct marketing entirely. |
| Restriction | Ask us to put a hold on processing while a dispute about accuracy or legality is sorted out. |
| Portability | Get a copy of your data in a standard, machine-readable file you can take elsewhere. |
| Withdraw consent | Pull back any consent you gave at any time - this does not undo processing that already happened. |
| Human review of automated decisions | Request that a human reviews any decision made about you solely by our automated matching or ranking systems. See Section 6 for details. |
| Damages (Philippine DPA) | Filipino users have the right to claim compensation for any harm suffered as a direct result of a violation of RA 10173 in relation to their personal data. |
| Complain | Take your concern to the ÚOOÚ (Czech Republic) or the Philippine NPC if you are not happy with our response. |
Send requests to privacy@worknow.ph. We aim to respond within 30 days (15 days for requests under the Philippine DPA). We may ask you to verify your identity first. Most requests are free of charge.
We collect the following categories of personal data directly from you or from third-party sources. Some fields are required to use the platform - for example, you cannot create an account without a name and email address, and you cannot apply for jobs without a CV or profile. Fields that are optional are there to improve your experience and the quality of your job matches, but you can skip them. Where a specific feature requires particular data, we will make that clear at the point of collection.
| CATEGORY | EXAMPLES |
|---|---|
| Identity | Full name, username, date of birth, gender, photo, government-issued ID (where required for verification), password. |
| Contact details | Email address, phone number, home or work address. |
| Career information | Work history, educational background, skills, salary expectations, job preferences, resume/CV, application records, interview notes, and hiring outcomes. |
| Public profiles | LinkedIn URL, personal website, or portfolio links you add to your profile. |
| Payment data | Card or bank details captured only when you purchase a subscription - handled by our payment processor. |
| Transaction records | History of payments, invoices, and active subscription details. |
| Platform content | Job listings, messages, comments, and anything else you post on the platform. |
| Usage patterns | How you navigate the site, features you use, and inferred interests based on that activity. |
| Technical identifiers | IP address, browser and device details, cookies, session data, and time zone. |
| Comms preferences | Whether you want marketing emails and which types of notifications you have turned on. |
We may also receive data about you from third-party sources, including LinkedIn and other professional networks you connect to the platform, CV aggregators, analytics providers (such as Google Analytics), and identity verification services. We do not set out to collect sensitive data - things like health information, ethnicity, religion, or political views. If a specific feature ever requires it, we will ask for your explicit consent at that point. We do not knowingly collect data from anyone under 18.
| WHAT WE DO WITH IT | OUR LEGAL GROUND | OUR LEGITIMATE INTEREST (WHERE APPLICABLE) |
|---|---|---|
| Creating and managing your account | Contract performance; consent | - |
| Surfacing relevant jobs and matching candidates to employers | Contract performance; legitimate interest | Providing an effective and useful recruitment service that benefits both job seekers and employers. |
| Handling subscription payments | Contract performance; legal obligation | - |
| Sending service-related messages and updates | Contract performance; legitimate interest | Keeping users informed about activity directly relevant to their account and applications. |
| Sending promotional content (opt-out available) | Consent | - |
| Improving the platform through analytics and research | Legitimate interest | Understanding how the platform is used so we can fix problems and build better features. |
| Detecting fraud and keeping the platform secure | Legitimate interest; legal obligation | Protecting users and the integrity of the platform from misuse, fake accounts, and malicious activity. |
| Verifying employer accounts or issuing verified badges | Consent; legal obligation | - |
| Meeting tax, audit, and regulatory requirements | Legal obligation | - |
WorkNow.ph uses algorithms to match job seekers with relevant job listings and to surface candidate profiles to employers. This means that automated processing of your personal data - including your career history, skills, location, and stated preferences - influences which jobs you see and whether your profile appears in employer searches.
This is profiling under GDPR Article 22. While our automated systems rank and recommend, no decision that produces a legal or similarly significant effect on you (such as being formally rejected from a role) is made by the algorithm alone - a human is always involved in the final hiring decision.
You have the right to:
If you object to profiling, you can still use the platform - you will simply need to browse and apply for jobs manually rather than through personalised recommendations.
Our servers and primary operations are within the European Economic Area. Because WorkNow.ph serves users in the Philippines - a country without an EU adequacy decision - transferring data there counts as an international transfer under the GDPR. We cover this through Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by additional technical safeguards where needed.
Filipino users should be aware that their data is controlled by an EU-based entity and stored on EEA infrastructure, which means it benefits from EU-level protections.
We hold data for as long as it is needed for the purpose it was collected, and no longer. The table below gives indicative timeframes:
| DATA TYPE | RETENTION PERIOD | REASON |
|---|---|---|
| Account and profile data | Duration of your account, plus 12 months after deletion | To handle any post-closure queries or disputes. |
| Job application records | 2 years after the position closes | Legitimate interest in defending against potential employment-related claims. |
| Payment and invoice records | 10 years | Czech and EU tax and accounting law. |
| Security and access logs | 12 months | Fraud detection and incident investigation. |
| Marketing consent records | Until consent is withdrawn, plus 3 years | Demonstrating compliance with consent obligations. |
Once these periods are up, data is deleted or irreversibly anonymized. If you ask us to delete your account, we will action that promptly and remove data we are not legally required to keep.
We take a layered approach to protecting your data:
If a breach is likely to affect your rights, we will notify the ÚOOÚ within 72 hours (GDPR Art. 33) and contact affected users without undue delay. We will also inform the Philippine NPC where required for Filipino data subjects.
We send job alerts, platform news, and occasional promotional content only to users who have opted in. You can unsubscribe from any of these at any time - either through the link in the email itself, through your notification settings at worknow.ph/settings/notifications, or by emailing privacy@worknow.ph. Unsubscribing from marketing does not stop transactional messages about your account or active applications.
WorkNow.ph is a professional platform intended for adults. We do not knowingly collect data from anyone under 18. If a parent or guardian suspects their child has created an account or submitted personal data, please get in touch at privacy@worknow.ph and we will remove it promptly.
The platform may link to employer websites, job boards, or other third-party services. Once you leave WorkNow.ph, this policy no longer applies - those sites have their own rules, and we have no control over how they handle your data. Check their privacy policies before sharing information with them.
We will update this policy when our practices change or when the law requires it. Minor clarifications are made without notice; material changes will be flagged on the platform and, where appropriate, emailed to you. The effective date at the top always shows when the current version came into force.
WorkNow.ph is registered with the Philippine National Privacy Commission (NPC) under NPC Circular No. 2022-04, which requires organizations processing personal data of Filipino users at scale to register their Data Protection Officer and Data Processing Systems via the NPC Registration System (NPCRS). Our registration is renewed annually, and we submit the required Annual Security Incident Report (ASIR) to the NPC by the prescribed deadline each year.
If you are not satisfied with how we have handled your personal data, you can escalate to a regulator:
| REGULATOR | COVERS | WEBSITE |
|---|---|---|
| Český úřad pro ochranu osobních údajů (ÚOOÚ) | CZ Lead supervisory authority under GDPR | uoou.cz |
| National Privacy Commission (NPC) | PH Philippine users | privacy.gov.ph |
| Your local EU data protection authority | EU Country of habitual residence | edpb.europa.eu |
We would always prefer to sort things out directly first - email us at privacy@worknow.ph before filing a formal complaint and we will do our best to resolve it quickly.