Click Global Talent | Talent Management Platform

This Data Privacy Policy describes how Click Global Talent (“Click”, “we”, “us”), together with Core Support Hub (“Core”) as Employer of Record (EoR) for talent in the Philippines, collects, uses, stores, and shares personal information in connection with the Click Global Talent Talent Management Platform (the “Platform” or “TMP”). It is designed to align with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), and the Philippines Data Privacy Act of 2012 (Republic Act 10173), as applicable to our operations.

1. Who is responsible for your data?

Click Global Talent (Melbourne, Australia) operates the Platform and coordinates talent sourcing for Australian business clients. Core Support Hub (Philippines) acts as EoR for engaged talent, handling employment compliance and salary disbursement. Depending on your relationship with us, one or both entities may process your data as joint or independent controllers for defined purposes. For privacy requests, you may contact us using the details in Section 12.

2. What personal data we collect

2.1 Job applicants and talent

Identity and contact: full name, email, mobile number, location (city/country or region).
Professional information: resume/CV (PDF, Word, or image), skills tags, experience summary, availability, employment history, education (as you provide or as extracted from documents).
Account and security: credentials (password stored only as a secure hash), session and audit metadata.
Payroll-related data (when placed and employed through Core): bank or e-wallet details, tax and statutory identifiers as required for lawful payroll (e.g. SSS, PhilHealth, Pag-IBIG, withholding), payslip delivery.
Pipeline and status tags assigned by authorised staff (e.g. Open for Opportunities, In Pipeline, Active).

2.2 Australian business clients

Business identity: business name, ABN or applicable identifier, registered address, industry, headcount.
Primary contact: name, email, phone.
Payment and billing data processed via EonX (and optionally Xero): we do not store raw card numbers on the Platform; payment credentials are tokenised and held by our payment partners in line with PCI-DSS.
Service agreements, invoicing history, and transaction records as required for operations and compliance.

2.3 Platform administrators and staff

Work contact details, role, access logs, and actions recorded in audit logs (timestamp, user ID, IP, action).

3. How we use your data

To register accounts, authenticate users, and enforce role-based access.
To operate recruitment pipelines, job postings, and talent–client workflows.
To present redacted candidate profiles to clients when staff explicitly shortlist or publish profiles—protecting identity and contact details unless admin rules allow otherwise.
To process payments: client invoicing, Click-to-Core transfers, and talent payroll via EonX.
To send notifications (email and in-platform) for events such as registration, approvals, pipeline moves, invoices, payments, and payslips.
To maintain security, prevent fraud, and comply with legal and tax obligations.
To support future AI-assisted matching via APIs exposed to authorised systems only (no change to lawful bases).

4. Legal bases and consent

We rely on contract performance, legitimate interests (operating a secure talent platform, fraud prevention, service improvement), and where required explicit consent—for example at registration to our terms and this policy, consent to processing for recruitment and (for talent) to sharing of redacted profile and resume views with clients as controlled by Click/Core staff. Clients consent to screening and background processes conducted on their behalf as described at onboarding.

5. Who we share data with

Clients receive only what staff publish: typically redacted profiles and redacted documents. They do not access the full talent database or raw contact details unless explicitly configured by admins.
Talent do not receive client-identifying business or contact data through the Platform; engagement is brokered by Click and Core.
EonX (and related payment/accounting integrations such as Xero if enabled) for invoicing, transfers, and payroll.
Cloud and infrastructure providers (e.g. hosting, object storage for resumes) under appropriate data processing terms.
E-signature providers (e.g. DocuSign, HelloSign) when client agreements are executed electronically.
Authorities when legally required.

International transfers (including Australia ↔ Philippines) are conducted with appropriate safeguards and contractual measures where required.

6. Security

Data in transit: TLS 1.2+.
Data at rest: encryption consistent with industry practice (e.g. AES-256 or equivalent).
Resumes in private object storage; access via signed, time-limited URLs for authorised roles only.
Passwords hashed with bcrypt (minimum cost factor 12).
Failed login lockout and monitoring; immutable audit logging for sensitive actions.

7. Retention

Candidate profiles and resumes: retained for at least two (2) years after last activity, unless a valid erasure request is approved or law requires otherwise.
Payment and payroll records: typically retained for at least seven (7) years for tax and employment law compliance.

8. Your rights

Subject to applicable law, you may request access, correction, or in certain cases deletion of your personal data. Talent may request right to erasure; deletion may be limited where we must retain records for legal, tax, or dispute purposes. We will respond within reasonable timelines required by the APPs or the Philippines DPA, as applicable.

9. Redaction and visibility

The Platform supports admin-controlled redaction of names, contact details, employers, education, and document masking before client viewing. Original files remain in secure storage for authorised staff. Your consent at registration includes understanding that clients may see redacted representations of your profile when shortlisted.

10. Children

The Platform is not intended for individuals under the age of 16 (or higher where local law requires).

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified via the Platform or email where appropriate. Continued use after the effective date constitutes notice of updates where permitted by law.

12. Contact

For privacy questions or requests: Core Support Hub · Click Global Talent — use the contact channel published on our website or your onboarding correspondence. Mark enquiries “Privacy – TMP”.