Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

1. Introduction

Amaze Group (“Amaze”, “we”, “our”, or “us”) respects and values the privacy and protection of personal data entrusted to us by our clients, users, employees, partners, and other stakeholders.

This Global Privacy Policy and Privacy Notice explains how personal data is collected, processed, stored, used, disclosed, transferred, retained, and protected in connection with the use of digiOffice platforms, applications, websites, services, integrations, mobile applications, and related business operations.

This Privacy Policy applies globally across Amaze Group entities, affiliates, subsidiaries, partners, and authorized service providers involved in the delivery, support, operation, and management of digiOffice products and services.

Amaze is committed to processing personal data responsibly and in accordance with applicable data protection and privacy laws and regulations in the jurisdictions where we operate, including but not limited to:

General Data Protection Regulation (GDPR)
Philippine Data Privacy Act of 2012
Singapore Personal Data Protection Act (PDPA)
Applicable employment, labor, tax, cybersecurity, and regulatory requirements
Other applicable international and local privacy regulations

2. About digiOffice

digiOffice is a cloud-based Human Capital Management (HCM), Human Resource Information System (HRIS), Payroll, Workforce Management, Enterprise Operations, and Digital Transformation platform developed and operated by Amaze Group.

The platform may include modules, services, and integrations relating to:

Core HR
Payroll Processing
Workforce and Attendance Management
Employee Self-Service
Recruitment and Applicant Tracking
Learning and Performance Management
Compensation and Benefits
Employee Helpdesk and Service Management
Asset and Facilities Management
Workflow Automation
Analytics and Reporting
API and Third-Party Integrations
Mobile and Web Applications

3. Scope of this Privacy Policy

This Privacy Policy applies to:

Employees
Applicants and candidates
Clients and client personnel
Contractors and consultants
Platform users
Website visitors
Partners and resellers
Service providers
Other individuals whose personal data may be processed through digiOffice platforms and services

4. Personal Data We Collect

Depending on the nature of the relationship, services, and applicable legal requirements, Amaze may collect and process personal data including but not limited to:

Personal Information

Name and identification details
Contact information
Employment and organizational information
User account credentials
Device and technical information
Profile photographs and documents

Sensitive Personal Data

Government-issued identification numbers
Payroll and compensation information
Banking and payment details
Attendance and leave records
Benefits and insurance information
Taxation and statutory contribution details
Health or medical information where applicable
Biometric data where enabled and legally permitted

Technical and Usage Information

IP addresses
Device identifiers
Browser and operating system information
Audit logs
Login and activity history
Cookies and session information
Application usage analytics

5. Purpose of Processing

Personal data may be processed for purposes including but not limited to:

Human resources and workforce administration
Payroll and compensation processing
Attendance and workforce management
Recruitment and applicant management
Employee onboarding and offboarding
Benefits administration
Performance and learning management
Customer support and service delivery
System administration and maintenance
Security monitoring and fraud prevention
Compliance with legal and regulatory obligations
Reporting and analytics
Integration with authorized third-party systems
Business continuity and disaster recovery
Product enhancement and operational improvement
Other legitimate business and operational purposes

6. Lawful Basis for Processing

Where required by applicable laws, Amaze processes personal data based on one or more lawful bases including:

Performance of contractual obligations
Compliance with legal and regulatory obligations
Legitimate business interests
Consent of the data subject where applicable
Protection of vital interests
Establishment, exercise, or defense of legal claims
Employment and workforce management obligations

Certain processing activities may continue where permitted or required by law even if consent is withdrawn.

7. Data Sharing and Disclosure

Personal data may be shared, transferred, or disclosed to:

Amaze Group entities and affiliates
Authorized employees and personnel
Clients and client-authorized representatives
Cloud hosting and infrastructure providers
Implementation, support, and service delivery teams
Third-party integration providers
Auditors, consultants, and legal advisers
Government agencies, regulators, and authorities
Payment processors and financial institutions
Other authorized service providers and business partners

Data sharing activities are conducted subject to appropriate safeguards, contractual protections, and security controls.

8. International Data Transfers

As a global technology and SaaS provider, Amaze may transfer, store, access, or process personal data across multiple jurisdictions and cloud environments.

Cross-border transfers may occur for purposes including:

Cloud hosting and infrastructure operations
Global support and service delivery
Disaster recovery and backup
System administration and maintenance
Authorized integrations and processing activities

Where international transfers occur, Amaze implements reasonable contractual, organizational, and technical safeguards to protect personal data in accordance with applicable privacy and data protection laws.

9. Data Retention

Personal data shall be retained only for as long as necessary to:

Fulfill legitimate business and operational purposes
Deliver contracted services
Comply with legal, tax, labor, audit, and regulatory requirements
Resolve disputes and enforce agreements
Support security, compliance, and continuity obligations

Retention periods may vary depending on jurisdiction, applicable laws, contractual obligations, and operational requirements.

10. Security Measures

Amaze implements reasonable and appropriate organizational, physical, administrative, and technical safeguards designed to protect personal data against unauthorized access, disclosure, misuse, destruction, alteration, accidental loss, or unlawful processing.

Security measures may include:

Encryption technologies
Role-based access controls
Secure cloud infrastructure
Network security controls
Audit logging and monitoring
Vulnerability management
Backup and disaster recovery procedures
Secure development practices
Access management and authentication controls
Employee confidentiality obligations
Security awareness and privacy training

11. Automated Processing and Profiling

digiOffice platforms may utilize automated processing, analytics, and profiling functions including:

Payroll and compensation calculations
Attendance and workforce computations
Workflow routing and notifications
Reporting and analytics
Employee categorization and segmentation
AI-assisted recommendations and automation features where enabled

Significant employment or business decisions remain subject to human review and authorization where applicable.

12. Cookies and Tracking Technologies

digiOffice websites and applications may utilize cookies, session technologies, and similar tracking mechanisms to:

Maintain secure sessions
Improve user experience
Remember user preferences
Analyze platform usage
Support authentication and security controls
Enhance platform functionality and performance

Users may modify browser settings to manage or restrict cookies, although certain platform features may not function properly.

13. Rights of Data Subjects

Subject to applicable laws and jurisdictional requirements, data subjects may have rights including:

Right to access
Right to rectification
Right to erasure or deletion
Right to object
Right to restrict processing
Right to data portability
Right to withdraw consent where applicable
Right to lodge complaints with applicable supervisory authorities

Requests may be subject to verification and applicable legal limitations.

14. Third-Party Services and Integrations

digiOffice may integrate with or provide links to third-party systems, applications, or services not directly controlled by Amaze.

Amaze is not responsible for the privacy, security, or content practices of third-party providers. Users and clients are encouraged to review the applicable privacy policies of third-party services separately.

15. Children’s Privacy

digiOffice platforms and services are not intended for use by children unless specifically authorized and legally permitted. Amaze does not knowingly collect personal data from children without appropriate authorization and legal basis.

16. Changes to this Privacy Policy

Amaze reserves the right to modify, update, or revise this Privacy Policy from time to time to reflect legal, regulatory, operational, technological, or business changes.

Updated versions may be published through official websites, applications, portals, or communication channels.

Continued use of the platform following updates constitutes acknowledgment of the updated Privacy Policy.

Last Update Date: 08/01/2025

If you have any questions about this privacy policy, please contact us at info@amazeincglobal.com.