Privacy Notice

Version 2026-10-13 · Effective October 13, 2026

This notice explains how MKS Workforce Management Services Inc. ("MKS", "we") collects, uses, shares and protects personal information in the MKS portal. It is written to meet the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission.

MKS is the personal information controller for the information described here: we decide what is collected and why.

1. Whose information this covers

• MKS employees, including workers deployed to our client companies, and MKS office staff.
• People at our client companies who are given access to the client portal, and other client contacts we keep on file.

2. What we collect

About employees and deployed workers

• Identity and contact details — name, date of birth, gender, address, phone number, email address and photo.
• Government-issued numbers — such as your Tax Identification Number, and the information needed for SSS, PhilHealth and Pag-IBIG contributions.
• Employment records — employee number, position, department or office, employment type, date hired, employment contract, and your deployments: which client and branch you are assigned to, in what role, and for what period.
• Pay records — salary or rate, allowances, deductions, statutory contributions, withholding tax and payslips.
• Attendance and timekeeping — clock-in and clock-out times, hours worked including overtime and night work, notes and timesheets you submit, approvals by your team leader, absences and leave requests.
• Emergency contact — the name, phone number and relationship of the person you give us.
• Documents you or MKS upload to your record.

About client contacts

• Name, position, company, work email and phone number, and the messages and documents exchanged through the portal.

About everyone who signs in

• Your account (email, password stored in hashed form, role), sign-in times, IP address, and a record of changes you make in the portal.

3. Why we use it, and on what basis

• To employ you and manage your deployment — to keep your employment record, assign you to client companies, and manage your attendance and leave. Necessary for your employment contract with us.
• To pay you and meet statutory obligations — to compute pay, withholding tax and SSS, PhilHealth and Pag-IBIG contributions, and to remit and report them. Required by law.
• To meet labour and tax requirements — to keep the employment, payroll and tax records the law requires, and to produce them to government agencies when lawfully asked.
• To serve our client companies — to bill them for the services of deployed workers and to give them the information they need about the people working at their sites. Necessary for our contracts with them, and our legitimate interest in running our business.
• To keep the portal secure — to control access and to detect and investigate misuse. Our legitimate interest, and yours.

We do not sell personal information, and we do not use it for advertising.

4. Who we share it with

• The client company you are deployed to — what it needs to work with you: your name, position, deployment details and attendance or hours at its site. Not your pay details, government numbers or emergency contact, unless the law or your deployment requires it.
• Government agencies — such as the BIR, SSS, PhilHealth, Pag-IBIG and DOLE, as the law requires.
• Banks and payment channels — to pay your salary.
• Service providers — who host and maintain the portal and deliver its email, bound by contract to process the information only on our instructions and to protect it.

We disclose information to other parties only where the law requires it or you have agreed.

5. How long we keep it

We keep employment, payroll, attendance and tax records for as long as you work with us and afterwards for the periods that labour, tax and social-insurance laws require. Client contact details are kept while we have a business relationship with that client and for as long as our records of it must be kept. When information is no longer needed, we delete it or make it anonymous.

6. Your rights

Under the Data Privacy Act you have the right to be informed, to object, to access your personal information, to have it corrected, to have it erased or blocked, to damages for a violation, to file a complaint with the National Privacy Commission, and to obtain a copy in a portable format. Some of these are limited where the law requires us to keep a record — payroll and tax records, for example, cannot be erased while that requirement lasts.

You can see much of your own information in the portal itself — your profile, payslips, attendance and leave. To exercise any right, contact our Data Protection Officer by writing to the Data Protection Officer at the address below.

7. How we protect it

Access to the portal requires an account, and each account sees only what its role allows: deployed workers see their own records, team leaders see the workers assigned to them, and client contacts see only their own company's information. Passwords are stored hashed and cannot be read, including by us. Traffic is encrypted in transit, and changes are logged so misuse can be detected and investigated.

8. If something goes wrong

If a personal data breach occurs that is likely to give rise to a real risk of serious harm, we will notify the National Privacy Commission and the people affected within 72 hours of knowing about it, as the law requires.

9. Changes to this notice

When this notice changes in substance, you will be asked in the portal to read the new version. The version and date at the top of this page show which one applies.

10. Contact

Data Protection Officer
MKS Workforce Management Services Inc.
4C Grand Emerald Tower, Ruby cor. Garnet Road, Ortigas Center, Pasig City 1605

You may also file a complaint with the National Privacy Commission, 5th Floor Delegation Building, PICC Complex, Pasay City.