Legal

Privacy Policy

Last updated: 31 October 2026 MaidProvider.ph Corp. · DOLE PEA License M-24-04-034
National Privacy Commission DPO and DPS Registered seal for MaidProvider.ph Corp
Public Registration Record

Registered with the National Privacy Commission

MaidProvider.ph Corp is registered as a Personal Information Controller, with its Data Protection Officer and Data Processing Systems on record. NPC Registration No. PIC-009-448-2026 · Valid through 21 July 2027

View official seal
Privacy is not a formality. It is a responsibility.

At MaidProvider.ph, we handle personal data with the same care we expect inside every home we serve. This Privacy Policy explains how we collect, use, store, protect, and share information when you interact with our website and services — whether you are a client entrusting us with your household, or a kasambahay entrusting us with your career.

We process personal data in accordance with Republic Act No. 10173 (Data Privacy Act of 2012), its implementing rules, and applicable issuances of the National Privacy Commission. MaidProvider.ph Corp acts as the Personal Information Controller for personal data processed through its services. Where consent is required, we obtain it through an appropriate consent request or collection notice. Other processing may be based on contract, legal obligation, legitimate interests, or another lawful basis recognized under Philippine law.

01

Lawful Basis for Processing

We collect and process personal data only when we have a lawful basis to do so. Depending on the context, this may include: your explicit consent; the performance of a contract (such as a service agreement); compliance with a legal obligation under Philippine law; or our legitimate interests in operating and improving our services, provided these do not override your rights.

02

Collection of Client Information

We collect client information through various channels — phone calls, online forms, emails, messaging platforms (Viber, WhatsApp, iMessage), and in-person meetings — when clients inquire about our household staffing services. This information may include your name, contact numbers, home address, household composition, and service preferences.

When you hire a household professional through MaidProvider.ph, we may collect additional information required for the hiring process, including employment terms and scheduling details. All client information is stored securely in our systems.

03

Collection of Applicant Information

Kasambahay and household professional applicants who apply through our website, our May Trabaho recruitment platform, or walk-in channels are required to provide relevant information — including their name, contact details, identification documents, employment history, and other pertinent details required by our screening process.

Applicants who proceed through our Security Double-Lock® screening also provide clearance and background documentation, and undergo a medical examination with Hi-Precision Diagnostics and a psychological assessment with Manila Doctors Hospital. We receive and keep the full medical examination results and the full psychological assessment report, including test results and the clinic’s conclusion. These results are sent to us directly by the clinic. This sensitive personal information is handled with heightened security measures and used solely for recruitment, placement, and compliance purposes.

These files are stored securely by our provider Supabase on Amazon Web Services servers in Singapore. Only staff with clinical or HR access can open them. To help HR review each file, we use an AI reader (OpenAI, with the setting that tells OpenAI not to store the data) only to read the examination date, the patient’s name, the clinic’s conclusion, and any urgent findings. HR staff make every decision; the AI decides nothing. We never read or use HIV test results.

Families see only that a screening step has been completed, never the results. The one exception: the family that has signed the applicant’s employment contract and paid may receive the clinic’s result file, and only with the applicant’s separate written consent to share it.

04

Use of Information

We use the information we collect to: maintain accurate records of applicants and clients; facilitate the matching, placement, and management of household professionals; communicate with clients regarding service matters; improve and develop our services; comply with legal and regulatory obligations; and protect the safety and welfare of the households and professionals we serve.

We do not sell your personal data. We may share information with trusted service providers and partners strictly for operational, legal, or service delivery purposes — such as medical screening facilities, background investigation providers, recruitment platforms, payment processors, and technology service providers. These providers are subject to contractual confidentiality, security, and purpose-limitation requirements and may process personal data only as authorized and permitted by applicable law.

05

Third-Party Service Providers

To deliver our services, we work with a limited number of trusted third-party providers. These may include: clinical and psychological screening partners (such as Manila Doctors Hospital); medical clearance laboratories (such as Hi-Precision Diagnostics); recruitment and applicant tracking systems; website hosting and infrastructure providers; analytics and performance monitoring tools; payment and invoicing platforms; communication tools; the providers that support our website chat assistant (OpenAI, Supabase, and Cloudflare); and the providers that store and help read applicant screening files (Supabase and OpenAI).

We require all third-party providers to implement appropriate safeguards and to process personal data only as necessary to perform their services on our behalf. Some organizations we work with, such as hospitals and laboratories conducting medical and psychological screening, also act as independent personal information controllers for the records they create, and handle those records under their own privacy obligations.

06

Cookies & Website Tracking

Our website uses cookies and similar tracking technologies to understand how visitors interact with our site, to improve user experience, and to measure the effectiveness of our marketing efforts. These may include: essential cookies required for website functionality; analytics tools (such as Google Analytics) that may collect device, browser, and usage information, often in aggregated or pseudonymized form; and social media and advertising pixels (such as Meta Pixel) used for campaign measurement.

We also use Google Ads conversion measurement, including when a visitor taps our phone number. Our website uses a cookie banner. Advertising cookies (Google Ads) are off until you accept them through the banner, and you can change your choice at any time; before then, Google may receive only limited signals without cookies. Your choice is passed to Google through its consent settings. Our website also loads Trustpilot review widgets, which may set their own cookies.

Most web browsers allow you to manage cookie preferences through their settings, and you may change your choice at any time through our cookie banner. Disabling certain cookies may affect your experience on our website.

07

Website Chat (Oswen)

Oswen is the AI assistant in the chat on www.maidprovider.ph. It answers questions for families, applicants, household professionals, and other visitors, with human oversight. Contact details are optional; you do not need to give your name, email address, or mobile number to use the chat. Oswen does not decide on payments, refunds, complaints, or replacements. Those are passed to a person on our team.

What we keep. We keep the conversation, the topic you choose, and any name, email address, or mobile number you choose to give. We do not keep your IP address in readable form; only a scrambled version is kept to prevent spam, and it is deleted after two days. The chat remembers small settings in your own browser: your chat session and whether the “Ask Oswen” label has already been shown.

Who processes it. Oswen’s replies are written by an AI language model provided by OpenAI, which we access through OpenAI’s business API. Your messages are sent to OpenAI only so the model can write the reply, with the setting that tells OpenAI not to store them. OpenAI does not use our data to train its models, but may keep it for up to 30 days to check for abuse, after which it is deleted. OpenAI’s servers are mainly in the United States, so messages are transferred outside the Philippines. Chat conversations are stored by our provider Supabase on Amazon Web Services servers in Singapore, and the chat is delivered through Cloudflare.

Who can see it. Only authorized staff in Client Care, Acquisition, and HR/Recruitment, during their working hours and signed in under their own names, and management. A designated operations lead is alerted when a visitor is waiting for a person.

How long we keep it. A chat that is not linked to an enquiry, application, or other client record is deleted automatically one year after its last activity. A chat linked to an enquiry, application, or case is kept as long as that record is kept. You can ask us to delete your chat earlier by contacting our Data Protection Officer; we handle these requests manually.

Please avoid sharing medical, financial, or government identification details in the chat unless our team asks for them through a secure channel.

08

Cross-Border Data Transfers

Some of the tools and platforms we use to operate our business — including website hosting, analytics, applicant tracking, and communication systems — may store or process data on servers located outside the Philippines. Website chat messages are processed by OpenAI mainly in the United States and stored in Singapore (see Section 07). Applicant screening files are stored in Singapore, and the limited details read by our AI reader are processed by OpenAI mainly in the United States (see Section 03). In such cases, we ensure that appropriate safeguards are in place and that transfers comply with the requirements of the Data Privacy Act of 2012 and National Privacy Commission guidelines.

09

Data Security

We implement organizational, physical, and technical safeguards to protect the confidentiality, integrity, and availability of your personal data. These include access controls and role-based permissions, secure storage systems, encrypted communications where applicable, restricted data handling protocols, and regular review of our security practices.

While no system can guarantee absolute security, we maintain safeguards proportionate to the nature, volume, and sensitivity of the personal data we process and review those safeguards as our systems and risks evolve.

10

Data Breach Notification

If a personal data breach meets the criteria for mandatory notification under applicable law, we will notify the National Privacy Commission and affected data subjects within seventy-two (72) hours from knowledge of, or reasonable belief that, the breach occurred, subject to any delay permitted by law. Initial notices may be based on available information and supplemented as the investigation continues. Notices will describe the nature of the breach, the data potentially affected, the measures taken or proposed, and practical steps affected individuals may take.

11

Retention of Information

We retain personal data only for as long as necessary for the purpose for which it was collected, to comply with legal and regulatory obligations, to establish or defend legal claims, to resolve disputes, and to enforce our agreements. Retention periods vary by record category, sensitivity, lawful basis, and operational need and are governed by our approved data retention schedule. Sensitive personal information, including medical and psychological screening records, is subject to restricted access and category-specific retention controls. When personal data is no longer required, we securely delete, destroy, or anonymize it.

12

Your Rights

Under the Data Privacy Act of 2012, you have the right to: be informed of how your data is collected and processed; access the personal data we hold about you; correct or update inaccurate information; object to certain processing; request erasure or blocking under applicable conditions; obtain data portability where applicable; seek indemnification for damages caused by unlawful or unauthorized processing; and file a complaint with the National Privacy Commission.

To exercise any of these rights, please contact us using the information below. We will respond to verified requests within a reasonable timeframe, as required by law.

13

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Changes will be effective immediately upon posting on our website, and the "Last updated" date at the top of this page will be revised accordingly.

This Privacy Policy applies solely to MaidProvider.ph and its associated platforms. Third-party websites linked from our site are governed by their own privacy policies.

Data Protection Officer & Privacy Requests
For questions about this Privacy Policy, to exercise a data-subject right,
or to raise a privacy concern, contact MaidProvider.ph Corp’s Data Protection Officer.
dpo@maidprovider.ph
0998 888 1818