Your Privacy Matters to Us

JPB Employment Pte Ltd ("JPB", "we", "us", "our") operates jpb.8creation.com.sg (the "Website") and provides foreign domestic worker ("FDW") and general worker placement services in Singapore. We are committed to protecting personal data in accordance with the Personal Data Protection Act 2012 ("PDPA") and other applicable laws, including the Employment of Foreign Manpower Act ("EFMA") where relevant to our licensed activities.

This Privacy Policy explains what personal data we collect, why we collect it, how we use, disclose, store and protect it, and the rights individuals have in relation to their personal data.

By using our Website, WhatsApp channels, or engaging our services, you consent to the collection, use and disclosure of your personal data as described in this Policy, to the extent permitted by law.

In accordance with our Accountability Obligation under the PDPA, further information about our data protection policies and practices, and our data protection complaints process, is available on request by contacting our Data Protection Officer (see Section 14).

This Policy applies to:

• Employers/clients who engage JPB to source and hire an FDW or general worker (name, contact details, address, household information);
• Foreign domestic workers and general workers who register with JPB for job placement (biodata, passport and identification details, medical information, employment history, background checks, and photographs)
• Website visitors who browse the Website or contact us through it.

Depending on your interaction with us, we may collect:

From employers/clients:

• Full name, NRIC/FIN (where required for MOM documentation), contact number, email address, residential address
• Household composition and care requirements relevant to matching a suitable worker
• Payment and billing records related to agency fees

From FDWs/workers:

• Passport and identification details, work permit information
• Biodata including photographs, employment and skills history, language ability, references
• Medical examination results and health declarations, where required for work permit processing
• Background check results (e.g. character references, prior employer feedback)
• Training and accreditation records (e.g. AIC-accredited course completion)

Collected via WhatsApp:

• Messages, documents and images sent to our WhatsApp channels (including OCR-extracted data from uploaded passport or identification photos) for the purpose of candidate intake, assessment scheduling and interview coordination

Automatically collected:

• Standard technical data such as IP address, browser type and device information when you visit the Website, for security and analytics purposes

We do not knowingly collect more personal data than is necessary for the purposes set out below.

We collect, use and disclose personal data for purposes including:

• Matching employers with suitable FDWs/workers and facilitating placements
• Preparing and submitting work permit applications and related documents to the Ministry of Manpower ("MOM") and other government agencies
• Verifying identity, conducting background and reference checks
• Communicating with employers and workers regarding placements, interviews, and job assessments (including via WhatsApp)
• Complying with our obligations as a licensed employment agency under the Employment Agencies Act and MOM regulations
• Administering payments, invoicing and record-keeping
• Responding to enquiries submitted through the Website
• Improving our services, including our internal biodata management and matching tools
• Complying with legal and regulatory requirements, including responding to MOM, TADM or other statutory bodies where required

Where consent is the basis for processing, we will seek consent before or at the time of collection, except where collection, use or disclosure without consent is permitted or required under the PDPA (for example, where necessary to comply with MOM/EFMA requirements, or for the investigation of employment disputes).

Workers and employers may withdraw consent for future collection, use or disclosure of personal data by contacting our Data Protection Officer, subject to legal or contractual restrictions (for example, where personal data is required to complete a work permit application already in progress, or where withdrawal would affect our ability to fulfil the service engaged).

We may disclose personal data to:

• MOM and other Singapore government agencies, as required for work permit applications, renewals, and regulatory compliance
• Employers and workers, to facilitate the matching and placement process (e.g. sharing a worker's biodata profile with a prospective employer)
• Third-party service providers who support our operations under confidentiality obligations, including:
• Our cloud hosting provider (Railway), which stores our biodata management database
• WhatsApp/Twilio, used to operate our candidate communication and intake channel
• Medical clinics or agencies conducting health screenings required for work permit purposes
• Legal or regulatory bodies, such as TADM, MOM, or courts, where required by law or to resolve an employment dispute

We do not sell personal data to third parties.

Some of our service providers (including cloud hosting infrastructure) may store or process data on servers located outside Singapore. Under Section 26 of the PDPA, we transfer personal data overseas only where the recipient is bound to provide a standard of protection comparable to the PDPA — for example, through contractual clauses (such as ASEAN Model Contractual Clauses) or another legally recognised transfer mechanism — and we document the basis for the transfer before it takes place.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law (including MOM record-keeping requirements and statutory limitation periods for employment disputes). When personal data is no longer needed, we will securely dispose of or anonymise it.

We implement reasonable administrative, technical and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification or disposal, including access controls on our internal systems and encrypted storage where applicable. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

In line with PDPC guidance, we do not use NRIC numbers as a means of authenticating identity (for example, as a password or security check), and we limit the collection and display of full NRIC numbers to what is strictly necessary for statutory or contractual purposes, such as work permit processing.

If we assess that a data breach is likely to result in significant harm to affected individuals, or affects 500 or more individuals, we will:

• Notify the Personal Data Protection Commission ("PDPC") as soon as practicable, and in any event no later than 3 calendar days after making that assessment; and
• Notify affected individuals as soon as practicable, concurrently with or after notifying the PDPC, unless an exception under the PDPA applies.

We maintain internal procedures to detect, contain, assess and respond to data breaches involving personal data in our care.

You may request access to, or correction of, your personal data held by us, subject to exceptions permitted under the PDPA. To make such a request, please contact our Data Protection Officer using the details in Section 13.

We may charge a reasonable fee for access requests, as permitted under the PDPA, and will inform you of any applicable fee before processing the request.

Our Website may use cookies or similar technologies to enhance browsing experience and gather analytics. You may disable cookies through your browser settings, though this may affect certain Website functions.

Our services are directed at adults (employers and workers). We do not knowingly collect personal data from minors through the Website.

If you have questions, feedback, or requests relating to this Privacy Policy or your personal data, please contact:

Data Protection Officer JPB Employment Pte Ltd MOM Licence No. 16C8445 Branches: Bukit Timah | Katong | Eunos Email: dpo@jpbgroup.com Phone: 6747 1888