Effective Date: September 6, 2025
Last Updated: September 6, 2025
Workskout (“we,” “our,” or “us”) values your privacy and is committed to protecting the personal information of our Clients and Virtual Assistants (“VAs”). This Privacy Policy explains how we collect, use, store, and share your personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable international standards.
1. Information We Collect
We may collect and process the following categories of personal information:
From Clients
Full name, company name, position, and contact details
Billing and payment information
Job requirements, project details, and related business information
From Virtual Assistants (VAs)
Full name, contact information, resume, educational background, and work history
Skills assessments, test results, and personality assessments
Government-issued IDs and bank account/payment details (for payroll)
Internet speed test results and system specifications (for work readiness)
Automatically Collected Information
Device and browser information when using our website or systems
Usage logs, cookies, and IP addresses (for security and analytics)
2. Legal Basis for Processing
We process personal data based on the following lawful grounds:
Consent: When you voluntarily submit information (e.g., applications, inquiries).
Contractual Necessity: To perform obligations under service agreements with Clients and VAs.
Legal Obligation: To comply with applicable laws and regulations.
Legitimate Interests: To improve services, ensure system security, and prevent fraud.
3. How We Use Your Information
We use the collected information to:
Match VAs with Clients based on requirements
Facilitate recruitment, onboarding, and placement
Process payroll, billing, and payments
Maintain communication with Clients and VAs
Ensure compliance with contracts and agreements
Improve our services, systems, and recruitment processes
Comply with legal and regulatory requirements
4. Sharing and Disclosure of Information
With Clients: VA information is shared only with Clients who have an active engagement with Workskout.
With VAs: Client information is shared only with assigned VAs when necessary for work.
With Service Providers: We may share information with third-party service providers (e.g., payroll processors, communication platforms, cloud storage systems) under strict confidentiality and data protection agreements.
With Authorities: We may disclose information when required by law, regulation, or lawful order of government authorities.
No Sale of Data: We do not sell, rent, or trade personal information to third parties.
5. Data Retention and Disposal
Applicants: Information may be retained for up to two (2) years, unless earlier deletion is requested.
Clients: Records will be retained for as long as the engagement is active and up to five (5) years thereafter, in compliance with tax, audit, and legal requirements.
Disposal: Upon expiration of the retention period, personal data will be securely deleted, anonymized, or disposed of through secure means.
6. Your Rights as a Data Subject
In accordance with RA 10173, you have the right to:
Access your personal data held by us.
Rectify inaccurate, incomplete, or outdated information.
Object to processing or withdraw consent (subject to contractual obligations).
Request Deletion of personal data, unless retention is required by law.
Data Portability, where technically feasible.
File a Complaint with the National Privacy Commission (NPC) if you believe your rights are violated.
To exercise these rights, you may contact our Data Protection Officer (see Section 8).
7. Data Security
We implement organizational, physical, and technical measures to protect personal data, including but not limited to:
Secure cloud storage with access controls
Encrypted communication channels and multi-factor authentication
Restricted internal access based on job function
Regular system monitoring and audits of data processing activities
Employee training on data privacy and protection
8. Cross-Border Data Transfers
Some of our service providers may be located outside the Philippines. In such cases, we ensure that your data is transferred in compliance with the Data Privacy Act and international data protection standards, with appropriate safeguards in place.
9. Children’s Privacy
Our services are not directed to children under 18 years of age. We do not knowingly collect personal data from minors. If we discover that a minor has provided us with personal information, we will take steps to delete it promptly.
10. Contact Us
If you have questions, concerns, or wish to exercise your data privacy rights, please contact:
Workskout
📧 Email: marco@workskout.com
📞 Phone: +63956 445 3807