Introduction
OneJob Group Limited and its affiliated companies (“we”, “us”, “our”, “workstem”) are committed to protecting your personal data privacy in accordance with applicable data protection laws.
For the purposes of this policy, applicable laws include the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong SAR, the Personal Data Protection Act (Law 8/2005) of Macau SAR, and the Personal Data Protection Act of Taiwan. We adhere to the principles and requirements of these laws based on the jurisdiction from which your personal data originates.
This Privacy Policy describes how we collect, hold, use, and disclose your personal data in connection with our human resources and payroll management platform and services (the “Service”).
The Service is primarily provided to business clients (“Clients”). If you are an employee or authorised user of a Client, your employer (our Client) is responsible for determining how your personal data is managed within the Service. We generally process such data on behalf of and in accordance with the instructions of our Client, who is the primary data user. This policy also explains our independent privacy practices as a data processor and custodian of such information.
Our information security practices are designed in accordance with the ISO/IEC 27001:2022 standard.
The Personal Data We Collect and Hold
We collect personal data that is necessary for the provision of the Service to your employer. Where we collect sensitive personal data (as defined under applicable laws), we will do so only with your prescribed consent or as otherwise permitted by law.
The types of personal data we may collect include:
- Identity and Contact Details:Name, date of birth, address, email address, telephone number, identification number (e.g., Hong Kong ID, Taiwan ID), visa and right-to-work details.
- Employment Details:Job title, employment history, salary, pension or provident fund details (e.g., MPF), leave records, performance information.
- Financial Information:Bank account details for payroll processing.
- Technical and Usage Data:IP address, device information, browser type, and log data related to your use of our Service.
- Information from Third Parties:We may receive information about you from your employer or from integrated third-party services with the necessary authorisations.
How We Collect Personal Data
We collect personal data directly from you, from your employer, and automatically through cookies and similar tracking technologies when you use our website or applications. We will only collect personal data from you where it is necessary and not excessive for the relevant purposes.
Information about Children
Workstem is a workforce management and payroll platform designed for business use and is not directed at children. We do not knowingly collect personal data from minors, except where such information is provided by a User (employee or their employer) for the sole purpose of listing a child as a dependent for legitimate employment-related benefits. If we learn that we have inadvertently collected personal data from a minor outside of this specific context, we will take prompt steps to delete that information.
Purposes for Holding, Using, and Disclosing Your Personal Data
Your personal data may be held, used, processed, and disclosed for the following purposes:
- To provide, operate, maintain, and improve the Service for you and your employer.
- To process payroll, report to tax authorities, and comply with pension or provident fund obligations.
- For identity verification and security purposes.
- To communicate with you regarding the Service.
- To comply with any applicable law, regulation, or court order.
- In connection with a corporate transaction, such as a merger or acquisition.
Direct Marketing
Where required by applicable law, we will only use your personal data for direct marketing purposes with your prior consent. You have the right to opt-out of receiving direct marketing communications from us at any time.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal obligations (such as statutory record-keeping periods for tax and employment), and for legitimate business purposes. Personal data that is no longer required is securely destroyed or anonymised.
Data Security
We take reasonable and appropriate steps to safeguard your personal data against unauthorised or accidental access, processing, erasure, loss, or use. Our security measures include electronic safeguards, strict access controls, and staff training, as part of our ISO 27001:2022 compliant security framework.
Data Access and Correction
You have the right to request access to and correction of your personal data held by us. As we often process data on behalf of your employer, we may need to refer your request to them. We will respond to your request within the period stipulated by applicable law.
Transfer of Personal Data Across Borders
To provide and improve our Service, your personal data may be transferred to, stored in, or accessed by our trusted service providers or affiliated companies located in other jurisdictions, including transfers between Hong Kong, Macau, Taiwan, and other countries. Where such transfers occur, we implement appropriate safeguards required by the applicable data protection law from which your data originates to ensure continued protection.
Complaints
If you have any concerns or complaints about our handling of your personal data, please contact our Data Protection Officer. You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
Contact Us
For any enquiries about this Privacy Policy, or to exercise your privacy rights, please contact:
Data Protection Officer
OneJob Group Limited
4/F, Lee Garden Three
1 Sunning Road, Causeway Bay
Hong Kong
Email: info@workstem.com
Changes to this Policy
We may update this Privacy Policy from time to time. The updated version will be posted on our website.