Effective date: Jul 28, 2026
Last updated: Jul 28, 2026
Smart Outsourcing Solution respects your privacy and is committed to handling personal information responsibly, transparently and securely.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you:
visit smartoutsourcingsolution.com or interact with our online content;
contact us about Employer of Record, offshore staffing, recruitment or related services;
apply for a role or participate in our recruitment process;
work with us as an employee, contractor, client, supplier or business partner; or
otherwise interact with Smart Outsourcing Solution.

Smart Outsourcing Solution is a division of Global BPO Solution Ltd. In this Privacy Policy, “SOS,” “we,” “us” and “our” refer to Smart Outsourcing Solution and the relevant affiliated entity responsible for handling your personal information.

Our offices are located at:
Philippine Headquarters
9F Filinvest One Building
Northgate Cyberzone, Alabang
Muntinlupa City, Metro Manila 1780
Philippines

Hong Kong Headquarters
Unit 12, 9/F Kenning Building
No. 19 Wang Hoi Road
Kowloon Bay, Hong Kong

Depending on the service and our relationship with you, SOS may act as:
a Personal Information Controller or data controller when we decide why and how personal information is processed; or
a Personal Information Processor, service provider or data processor when we process information only on a client’s documented instructions.
Where SOS processes personal information on behalf of a client, that client’s privacy notice may also apply. Requests about client-controlled information should generally be directed to the relevant client, although we will provide reasonable assistance where required.

The information we collect depends on how you interact with us.
Business and contact information
This may include:
name, work email address, telephone number and country;
company name, role, industry and business location;
service interests, hiring requirements, team plans and inquiry details;
meeting bookings, correspondence and records of our communications;
proposal, contract, billing and payment information; and
feedback, survey responses and other information you choose to provide.
Recruitment and candidate information
If you apply for a role or join our talent network, we may collect:
contact details and location;
résumé or CV, work history, skills, education and professional qualifications;
portfolio, professional profile and application responses;
interview notes, assessments, availability and compensation expectations;
references and information from background or identity checks, where permitted;
work eligibility and government-issued identification; and
other information reasonably required to assess or progress your application.
Please submit job applications through our Careers page or the application method stated in the job posting. The business-inquiry form is not intended for résumés or employment applications.
Employee, contractor and EOR information
Where we employ, engage, onboard, pay or administer personnel, we may collect information reasonably necessary for employment and workforce administration, including:
identity, contact and emergency-contact details;
signed agreements, employment records and performance information;
payroll, bank, tax and compensation details;
government identifiers and registration information required for BIR, SSS, PhilHealth, Pag-IBIG and other lawful employment obligations;
attendance, leave, benefits and disciplinary records;
health, disability, accommodation or other sensitive information where necessary and permitted by law; and
records needed for compliance, security, investigations, legal claims and offboarding.
Employees and contractors may receive a more specific privacy notice. If a specific notice or agreement conflicts with this general policy, the more specific document will apply to the relevant processing.
Website, device and usage information
When you use our website, we or authorised providers may automatically collect:
IP address, browser type, device type and operating system;
pages viewed, links clicked, referring page and approximate location;
date, time and duration of visits;
cookie identifiers and preference settings; and
security logs, diagnostic data and information used to detect spam, fraud or misuse.
Client-provided and third-party information
We may receive personal information from clients, recruitment partners, referees, background-check providers, benefits providers, public records, professional networking platforms and other lawful sources.
If you provide personal information about another person, you must be authorised to do so and, where required, make this Privacy Policy available to them.

We may use personal information to:
respond to inquiries and schedule consultations;
assess business requirements and prepare proposals;
deliver, manage and improve EOR, recruitment, staffing, payroll and workforce services;
source, assess and introduce candidates for relevant roles;
complete onboarding, employment administration, payroll, benefits and offboarding;
manage client, supplier and business-partner relationships;
operate, maintain, personalise and secure our website and systems;
analyse website performance and improve our content, services and user experience;
send service communications and, where permitted, relevant marketing;
prevent fraud, spam, misuse and security incidents;
comply with employment, tax, corporate, regulatory and legal requirements;
establish, exercise or defend legal claims; and
support a corporate transaction, such as a merger, acquisition or restructuring, subject to appropriate safeguards.
We do not sell or rent personal information for monetary consideration.

We process personal information only when permitted under applicable law. Depending on the circumstances, this may include:
your consent;
taking steps at your request before entering into a contract;
performing or administering a contract with you;
complying with a legal or regulatory obligation;
pursuing a legitimate business interest that is not overridden by your rights and freedoms;
protecting a person’s vital interests;
establishing, exercising or defending legal claims; or
another ground authorised by law.
Where sensitive personal information is involved, we rely on specific consent or another lawful basis that permits that processing.

We may disclose personal information only when reasonably necessary for the purposes described in this policy, including to:
SOS affiliates and authorised personnel;
clients or prospective client employers where relevant to recruitment, placement, EOR or staffing services;
hosting, cloud, communications, customer relationship management, scheduling, analytics and cybersecurity providers;
recruitment, applicant-tracking, assessment, reference-checking and background-screening providers;
payroll, banking, accounting, insurance, benefits and professional advisers;
government bodies and statutory agencies, including BIR, SSS, PhilHealth, Pag-IBIG, DOLE and other competent authorities where applicable;
law-enforcement agencies, courts, regulators or other parties where disclosure is required or permitted by law; and
a potential purchaser, successor or adviser involved in a proposed or completed corporate transaction.

Service providers are authorised to process information only for agreed purposes and are expected to apply appropriate privacy and security safeguards.
We may also disclose information with your direction or consent.

SOS supports international businesses and operates across borders. Personal information may therefore be accessed, stored or processed outside your country.

Likely locations may include the Philippines and Hong Kong, as well as countries where our clients, affiliated operations or service providers are located. Depending on the engagement, these may include Australia, the United Kingdom, the United States, Canada, Germany, the United Arab Emirates, Singapore, Saudi Arabia and Sweden.

Privacy laws in another country may differ from those in your home jurisdiction. Where required, we use contracts, access controls, due diligence and other reasonable safeguards designed to provide an appropriate or comparable level of protection.
Where Australian privacy law applies, we take reasonable steps in relation to overseas disclosures in accordance with the Australian Privacy Principles.
Where the UK GDPR applies, we use an approved transfer mechanism where required. This may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another lawful safeguard.

Our website uses cookies and similar technologies to operate correctly, remember preferences, understand website use, maintain security and support marketing where consent is required.
These technologies may include:
Essential cookies, which support core website functions and security;
Preference cookies, which remember choices such as consent settings;
Analytics cookies, which help us understand website traffic and performance; and
Marketing cookies, which may measure campaigns or support relevant advertising.

Our pages may also use or embed third-party services such as scheduling tools, maps, videos, analytics tools and social-media features. These providers may collect information according to their own privacy policies.

Where a cookie-consent tool is available, you can use it to accept, reject or adjust non-essential cookies. You can also control cookies through your browser settings. Blocking some cookies may affect website functionality.

For UK users, we request consent for non-essential cookies where required by the UK Privacy and Electronic Communications Regulations. For US users, cookie and advertising choices may also constitute requests to opt out of sale, sharing or targeted advertising under applicable state privacy laws.

We may use basic automated rules to route inquiries, identify spam and filter apparent job applications submitted through our business-inquiry form. This helps direct recruitment activity to the correct Careers channel and does not, by itself, determine the outcome of a properly submitted employment application.

If we use automated processing as the sole basis of a decision that produces legal or similarly significant effects, we will provide any notice, consent mechanism or review rights required by applicable law.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate business, contractual, legal, accounting, tax, employment, dispute-resolution and security requirements.
Retention periods vary according to:
the type and sensitivity of the information;
the nature of our relationship with you;
the length of a recruitment, employment or client engagement;
applicable limitation periods and statutory recordkeeping rules;
whether a dispute, investigation or legal claim is active or reasonably anticipated; and
whether you have consented to remain in a talent pool or receive marketing.
When information is no longer required, we take reasonable steps to delete, destroy or de-identify it securely, unless continued retention is required or permitted by law.

We use reasonable and appropriate organisational, physical and technical safeguards designed to protect personal information against accidental loss, misuse, interference, unauthorised access, alteration, disclosure or destruction.

Measures may include role-based access, confidentiality obligations, security controls, staff awareness, vendor due diligence, incident-response procedures and periodic review of relevant systems and practices.

No internet transmission or storage system is completely secure. While we work to protect personal information, we cannot guarantee absolute security.

Subject to applicable law and any lawful exceptions, you may have the right to:
be informed about how your personal information is processed;
request access to personal information we hold about you;
request correction of inaccurate or incomplete information;
object to or restrict certain processing;
withdraw consent where processing relies on consent;
request erasure, deletion or blocking of information;
request a portable copy of eligible electronically processed information;
opt out of direct marketing;
obtain information about qualifying automated decision-making;
complain to us or an applicable privacy regulator; and
seek compensation or other remedies where provided by law.
To exercise a right, email info@smartoutsourcingsolution.com with the subject line Privacy Request. Recruitment-related requests may also be sent to recruitment@smartoutsourcingsolution.com.
Please describe your request and your relationship with SOS. We may ask for information reasonably necessary to verify your identity and locate the relevant records. We will respond within the period required by applicable law.
Some requests may be limited or refused where an exception applies, including where information must be retained to meet a legal obligation, protect another person’s rights or establish, exercise or defend a legal claim. If so, we will explain the basis for our response where required.

This section applies where the UK General Data Protection Regulation and the Data Protection Act 2018 apply to our processing.
UK lawful bases
We rely on one or more of the lawful grounds described in Section 4. Where we process special-category personal data, we also identify an additional condition permitted under UK law.
We will not use personal data for a materially incompatible purpose unless the new use is permitted by law or we provide appropriate information and obtain consent where required.
UK privacy rights
Subject to lawful conditions and exceptions, people in the United Kingdom may have the right to:
receive clear information about our processing;
access their personal data;
correct inaccurate or incomplete data;
request erasure of eligible data;
restrict certain processing;
receive eligible data in a portable format;
object to processing based on legitimate interests or for direct marketing;
withdraw consent without affecting processing that was lawful before withdrawal; and
request safeguards or human review where a decision with legal or similarly significant effects is based solely on automated processing.
We will respond within the period required by UK data protection law. You may submit a request using the contact information in Section 18.
UK cookies and electronic marketing
Where required by the UK Privacy and Electronic Communications Regulations, we obtain consent before using non-essential cookies or sending certain forms of electronic direct marketing. You may withdraw cookie consent through the available consent controls and opt out of marketing using the unsubscribe method provided.
UK international transfers
Where UK personal data is transferred to a country without applicable UK adequacy regulations, we use a lawful transfer safeguard where required, as described in Section 6. You may contact us for information about the applicable safeguard, subject to confidentiality and legal limitations.
UK complaints
Please contact SOS first so we can investigate your concern. You also have the right to complain to the UK Information Commissioner’s Office.

Privacy rights in the United States vary by state. This section applies only where SOS is subject to the relevant federal or state law and the individual or processing falls within its scope.
Categories, sources and uses of personal information
The categories of personal information we may collect are described in Section 2. The sources of that information are also described in Section 2, our business and commercial purposes are set out in Section 3, the categories of recipients are listed in Section 5, and our retention approach is explained in Section 9.
These disclosures cover website visitors, business contacts, candidates, employees, contractors, clients, suppliers and other individuals where applicable. California residents should note that the California Consumer Privacy Act may cover employees, job applicants, contractors and business contacts when its requirements apply to the relevant business and processing.
US state privacy rights
Depending on your state and subject to legal exceptions, you may have the right to:
confirm whether we process your personal information;
access specific information or categories of information we hold;
correct inaccurate personal information;
request deletion of eligible information;
receive a portable copy of eligible information;
obtain information about categories of sources, purposes and recipients;
opt out of the sale of personal information;
opt out of sharing for cross-context behavioural advertising or targeted advertising;
opt out of certain profiling used for decisions with legal or similarly significant effects;
limit certain uses or disclosures of sensitive personal information;
use an authorised agent to submit an eligible request;
appeal the denial of a request where state law provides an appeal right; and
exercise privacy rights without unlawful discrimination or retaliation.
SOS does not sell personal information in exchange for money. However, some disclosures involving advertising, analytics or marketing technology may be treated as a “sale,” “sharing” or targeted advertising under certain state laws even when no money is exchanged.
Where applicable, you may use our cookie-consent controls or contact us to opt out. We will also process recognised browser-based opt-out preference signals, such as the Global Privacy Control, when required by applicable law.
We do not knowingly sell or share the personal information of people under 16 for targeted or cross-context behavioural advertising.
California-specific notice
Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies, the disclosures in this policy are intended to describe our online and offline information practices.

California residents may exercise applicable rights to know, access, correct, delete, obtain a copy of personal information, opt out of sale or sharing, limit qualifying uses of sensitive personal information, and receive equal service and treatment.

Any notice provided at the point where personal information is collected supplements this policy. If SOS’s practices require a dedicated statutory link for sale, sharing or qualifying uses of sensitive personal information, we will provide the required opt-out or limitation method.
US commercial email
We send commercial email in accordance with applicable US requirements, including the CAN-SPAM Act. Marketing messages will provide an appropriate way to opt out, and we will process valid opt-out requests within the legally required period.
US residents can submit requests using the contact information in Section 18. We may verify your identity, authority or residency before completing a request. If we deny a request, we will provide any explanation or appeal method required by applicable law.
California residents may also review information from or submit eligible complaints to the California Privacy Protection Agency or the California Attorney General. Residents of other states may contact their state attorney general or relevant privacy regulator.

Where permitted, we may use business contact information to send relevant updates about SOS services, resources or events.
You can opt out at any time by using the unsubscribe link in a marketing email or contacting us. We may still send non-promotional communications necessary to manage an inquiry, contract, employment relationship or service.

Our website may link to or embed content from other websites. Those third parties operate independently and may collect personal information, use cookies or monitor interactions under their own privacy policies.
SOS is not responsible for the privacy practices or content of third-party websites. We encourage you to review their privacy information before providing personal data.

Our website and business services are not directed to children under 18. We do not knowingly collect personal information from children through the website unless authorised and necessary for a lawful purpose.

For purposes of the US Children’s Online Privacy Protection Act, we do not knowingly collect online personal information from children under 13.
If you believe a child has provided personal information to us without appropriate authorisation, please contact us so we can review and address the matter.

We maintain procedures for assessing and responding to suspected personal data breaches. Where a breach requires notification, we will notify the appropriate regulator and affected individuals in accordance with applicable law.

For questions, privacy requests or complaints, contact:

Data Protection Officer / Privacy Team
Smart Outsourcing Solution
Email: info@smartoutsourcingsolution.com
Subject line: Privacy Request

Philippine Headquarters
9F Filinvest One Building
Northgate Cyberzone, Alabang
Muntinlupa City, Metro Manila 1780
Philippines

Please include enough detail for us to understand and investigate your concern. We will acknowledge and address complaints within a reasonable period and in accordance with applicable law.

If you are not satisfied with our response, you may have the right to contact the relevant privacy regulator, including:
the National Privacy Commission of the Philippines;
where Australian privacy law applies, the Office of the Australian Information Commissioner;
where UK data protection law applies, the UK Information Commissioner’s Office; or
where applicable US state law applies, the relevant state attorney general or privacy regulator, including the California Privacy Protection Agency.

We may update this Privacy Policy to reflect changes in our services, systems, legal obligations or privacy practices. The latest version will be posted on this page with a revised “Last updated” date.

Material changes may also be communicated through the website or another appropriate channel.

Where required by applicable US state law, we will review and update the policy at least once every 12 months.