top of page

Privacy Policy

Last updated: 21 October 2026

Nworks Pty Ltd (ABN 78 133 866 823) ("Nworks", "we", "us" or "our") connects Australian businesses with skilled professionals in the Philippines. This policy explains how we collect, use, disclose and protect personal information.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. For individuals in the Philippines, we also comply with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations and the issuances of the National Privacy Commission. Under the Data Privacy Act, Nworks is the personal information controller for the personal data described in this policy.

Who this policy covers

This policy applies to:

  • candidates and professionals who apply for roles or join our talent pool;

  • contractors engaged through Nworks;

  • contacts at our clients, prospective clients and suppliers; and

  • visitors to nworks.com.au.

What personal information we collect

Candidates. Your name, contact details, location, CV, work history, education, qualifications, certifications, skills, references, availability and rate expectations. We also collect your answers in pre-screening interviews, which may be video recorded with your consent, and our assessment notes and scores.

Contractors. In addition to the above, once you are engaged we collect:

  • identity documents and government-issued identifiers, such as your TIN and BIR registration, and SSS, PhilHealth and Pag-IBIG numbers where required;

  • your NBI clearance;

  • your bank or payment details;

  • your engagement agreement and declarations;

  • health maintenance organisation (HMO) enrolment details if you choose cover;

  • leave records, meaning your name, the email address your client provides and your leave requests.

Clients and suppliers. Names, job titles, business contact details and our communications with you.

Website visitors. Information you submit through our forms. Our website platform, Wix, also collects technical information such as IP address, browser type and pages visited through cookies.

Some of this information is "sensitive personal information" under the Data Privacy Act, such as government-issued identifiers. It may also be "sensitive information" under the Privacy Act, such as health information connected with HMO cover. We collect sensitive information only with your consent or where the law requires or allows it.

How we collect personal information

We collect personal information directly from you through our website forms, email, phone and video calls, and interviews. With your agreement, we may also collect it from your referees. We may collect information about your work performance from the clients you work with. We may also collect information from professional profiles you have made public, such as on LinkedIn, when we contact you about a role. When we do, we tell you how to find this policy.

Why we collect and use personal information

We use personal information to:

  • assess your suitability for roles and present your profile to clients;

  • engage contractors and manage their engagements, fees, tax remittances, statutory payments, leave and HMO cover;

  • provide services to our clients and manage our relationships with suppliers;

  • verify identity and qualifications;

  • meet our legal, tax and regulatory obligations;

  • keep our systems and information secure; and

  • send you information about roles or our services, if you have agreed to receive it.

Automated decision-making and AI-assisted tools

We use computer programs to help us assess candidates fairly and consistently. These include screening spreadsheets with scoring rules and AI-assisted interview tools.

Personal information used. These programs use the information in your CV and application, such as work history, skills, qualifications, certifications, location and availability. They also use your answers and the notes made during pre-screening interviews.

Decisions made solely by computer programs. We do not make decisions about you solely by computer program. Every outcome is reviewed and decided by a member of our recruitment team.

Decisions that computer programs help us make. Our screening programs score your application against the requirements of a role and flag whether you meet its mandatory requirements. Our pre-screening tool suggests scores and a recommendation based on your interview answers. These outputs help our recruiters decide:

  • whether to shortlist you for a role;

  • whether to present your profile to a client; and

  • the assessment summary included in your profile.

If you would like to know more about how a decision about you was made, or want a person to reconsider it, please contact us using the details below.

Who we disclose personal information to

We may disclose personal information to:

  • clients and prospective clients. We tell you before we present your profile to a client. Profiles shared before an engagement do not include your contact details or identity documents.

  • service providers who support our operations. This includes our business process service provider in the Philippines, and our IT, cloud, website, accounting, leave management and AI tool providers.

  • government agencies, such as the Bureau of Internal Revenue and the Australian Taxation Office, where the law requires it.

  • our professional advisers, insurers and bank, where needed.

We do not sell personal information.

Overseas disclosure

Our email and file storage (Microsoft 365) is hosted in Australia. Some of our service providers store or access personal information outside Australia, including in the Philippines and the United States. Before we disclose personal information overseas, we take reasonable steps, including contractual protections, to make sure it is handled consistently with the Australian Privacy Principles and the Data Privacy Act.

How we protect personal information

We protect personal information through an information security management system aligned to ISO/IEC 27001. Our safeguards include:

  • multi-factor authentication on all accounts;

  • encryption;

  • managed and monitored devices;

  • access limited to staff who need it; and

  • security training for our team.

Our service providers are bound by confidentiality and security obligations.

How long we keep personal information

We keep personal information only as long as we need it, or as long as the law requires. For example:

  • unsuccessful applications are kept for 12 months after our last contact, unless you choose to stay in our talent pool;

  • talent pool profiles are kept for up to 2 years after our last contact, and we will ask you to confirm you want to stay;

  • copies of identity documents are deleted within 90 days of verification, and we keep only a record that verification took place;

  • contractor engagement, payment and tax records are kept for 7 years after the engagement ends, to meet Australian and Philippine legal requirements.

When we no longer need personal information, we securely delete or de-identify it.

Your rights

You may:

  • ask for access to the personal information we hold about you;

  • ask us to correct information that is inaccurate, out of date or incomplete;

  • withdraw your consent, for example to staying in our talent pool, or to marketing; and

  • complain about how we have handled your information.

If you are in the Philippines, you also have the rights under the Data Privacy Act to be informed, to object, to erasure or blocking, to data portability, and to claim damages.

We respond to requests within 30 days and do not charge for them. We will need to confirm your identity first. If we cannot fulfil a request, for example because the law requires us to keep a record, we will explain why in writing.

Data breaches

If a data breach is likely to cause you serious harm, we will notify you. We will also notify the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme and, where required, the National Privacy Commission within 72 hours.

Marketing

We will only send you marketing messages if you have agreed to receive them. Every message includes an easy way to unsubscribe.

Cookies

Our website uses cookies to operate the site and to understand how it is used. You can control cookies through your browser settings. Some site features may not work without them.

Contact us and complaints

Our Privacy Officer, who is also our Data Protection Officer under the Data Privacy Act, can be contacted at:

Email: privacy@nworks.com.au
Post: Privacy Officer, Nworks Pty Ltd, Level 57, 25 Martin Place Sydney NSW 2000

We will acknowledge your complaint within 5 business days and respond within 30 days. If you are not satisfied with our response, you can contact:

  • the Office of the Australian Information Commissioner: www.oaic.gov.au or 1300 363 992; or

  • for individuals in the Philippines, the National Privacy Commission: www.privacy.gov.ph.

Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date it was last updated.

bottom of page