Privacy Policy

1. Overview

Workforce CPO Pty Ltd ("we", "our", or "the Company") is committed to protecting the privacy and personal data of individuals whose information we process in connection with our business process outsourcing (BPO) services. We operate in Australia, the Philippines, and Serbia, and use global technology platforms to deliver efficient mortgage and loan processing services.

This Privacy Policy outlines how we collect, use, store, disclose, and safeguard personal information, and explains your rights under applicable laws including the Australian Privacy Act 1988, the Philippine Data Privacy Act of 2012, the Serbian Law on Personal Data Protection, and relevant international standards (including the GDPR, where applicable).

2. Scope

This policy applies to all personal information processed by Workforce CPO Pty Ltd in any format—digital or physical—across all operational regions and platforms.

3. What Information We Collect

We may collect the following types of personal information, depending on our clients' needs:

• Full name, date of birth, and contact details
• Identification documents (e.g., driver's licence, passport)
• Financial and credit information
• Loan and mortgage application data
• Employment and income details
• Sensitive personal information (as required under contract or law)

4. How We Collect Personal Information

• Directly from clients or their customers
• Through online portals and digital forms
• Via third-party platforms integrated into our systems
• By phone, email, or in writing during processing activities

5. Use of Personal Information

We use personal data strictly for:

• Providing BPO services related to loan and mortgage processing
• Meeting contractual obligations to our clients
• Ensuring compliance with legal and regulatory requirements
• Internal training, quality assurance, and process improvement

6. Data Sharing and International Transfers

Due to our global infrastructure:

• Personal data may be stored or processed using cloud platforms hosted internationally (e.g., AWS, Microsoft Azure, Google Cloud)
• Data may be accessed by authorised staff across our operational regions
• We ensure that all third-party platforms and partners meet strict data protection standards through Data Processing Agreements and contractual safeguards

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, and as required by law or contractual obligation.

8. Data Security

We apply industry best practices in data protection, including:

• Role-based access control
• Encryption in transit and at rest
• Regular audits and penetration testing
• Employee training on privacy and data handling

9. Individual Rights

Individuals may have the right to:

• Access, update, or correct their personal information
• Request deletion, restriction, or data portability
• Object to processing or withdraw consent (where applicable)
• Lodge a complaint with a local data protection authority

Requests should be submitted to our Data Protection Officer (see Contact section).

10. Policy Review

This policy is reviewed annually or when significant changes occur in business operations, legal obligations, or technology use.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact: