PRIVACY NOTICE

I. Introduction

This form shall form part of your pre employment requirements and will involve
the processing of your personal information. This Notice and Consent Form, in
consonance with the requirements of Republic Act No. 10173, otherwise known as the
"Data Privacy Act" ("DPA") and its applicable rules and regulations, serves to inform you
of:

a) The description of your personal information to be processed in

relation with your employment;
b) The scope, source, and method of the personal information processing
in relation to requirements;
c) The purpose of such processing and the legitimate interests of the
parties involved in such processing;
d) The identities of the intended recipients of your personal information;
e) How long your personal information in relation to the requirements will
be retained; and
f) Your rights as Data Subjects who own and control the personal
information being processed.

II. Collection and Use of Personal Information

A. Types of Personal Information to be Processed

On the one hand, personal information, in general, refers to any information,

whether recorded in a material form or not, from which the identity of an individual is
apparent or can be reasonably and directly ascertained by the entity holding the
information, or when put together with other information would directly and certainly
identify an individual. On the other hand, sensitive personal information refers to
personal information:

(a) About an individual’s race, ethnic origin, marital status, age, color,
and religious, philosophical or political affiliations;
(b) About an individual’s health, education, genetic or sexual life of a
person, or to any proceeding for any offense committed or alleged
to have been committed by such person, the disposal of such
proceedings, or the sentence of any court in such proceedings;
(c) Issued by government agencies peculiar to an individual which
includes, but not limited to, social security numbers, previous or
cm-rent health records, licenses or its denials, suspension or
revocation, and tax returns; and
(d) Specifically established by an executive order or an act of
Congress to be kept classified.
 The following personal information shall be collected:

A. Non-Sensitive

1. Employee's Full Name (Last, First and Middle)

2. Employee's Date of Birth
3. Employee's Date of Hire
4. Employer's Identity
5. The reason for the employee's separation or departure from service.

B. Sensitive Personal Information

1. A factual statement that internal proceedings conducted pursuant to an

investigation of a disciplinary action for fraud and similar acts against such an
employee as defined under the Rules of Listing attached as Annex "A" of this
Notice and Consent Form, the results thereof, up to the termination from service
of said employee, and whether or not the result of the investigation is the cause
or reason of such termination.

2. A factual statement that civil or criminal action(s) were filed pursuant to the
investigation conducted by the employer whether the same remains pending
even after termination or departure from service.

B. Scope and Method of Collection and Data Sharing

We generally collect and process the above-mentioned personal data for human
resource management and development as well as for other legitimate purposes
necessary for LBTI’s continued operation and growth, including the following:

1. Maintenance of an employee database for Identity verification procedures,

internal security and access protocols, and regulatory compliance;
2. Pre-qualification and post-qualification assessments
3. Processing of various contracts, certificates and documents evidencing
employment/engagement with LBTI;
4. Processing and grant of employment compensation and corporate benefits,
including payroll and loan management, Health Maintenance Organization
(“HMO”) coverage and corporate loans;
5. Development and implementation of employee learning, training, and welfare
programs, including workplace performance and compatibility testing;
6. Maintenance of employee performance appraisals/metrics as well as attendance
and geolocational records;
7. Fulfillment of contractual obligations to clients which includes delivery of services,
provisioning for access to client-platforms as well as reportorial requirements
such as disclosure of business data analytics/metrics for purposes of maintaining
 quality of service and for workforce management involving campaign-specific
requirements;
8. Processing of employee participation in organization-wide sponsored activities,
events, programs, trainings, workshops and initiatives activities, events and
programs including those related to Corporate Social Responsibility (“CSR”);
9. Implementation of incident verification, investigation and reporting processes or
matters in relation to termination of employment;
10. Regular background and lifestyle checks on an employee to assist the
organization in conducting its continuing security assessment activities as well as
in compliance with industry and standards requirements.
11. Compliance with government and regulatory requirements such as Bureau of
Internal Revenue (“BIR”), Department of Labor and Employment (“DOLE”), SSS,
PhilHealth, and Pag-IBIG reportorial requirements, business, and occupational
permits, and licenses as well as other National Government and Local
Government Unit (LGU) compliance requirements;
12. For the protection of lawful rights and interests of the organization in internal
quasi-judicial and judicial proceedings, or the establishment, exercise or defense
of legal claims against prospectively malfeasant employees; and
13. Periodic 2nd and 3rd party audits and risk assessments of LBTI’s processes and
practices which may impact its employees.

III. Your Rights as a Data Subject

1. The Right to be Informed - This Notice and Consent Forms honors your right to
be informed of whether personal information pertaining to you will be, are being,
or were processed, including its disclosure to third parties. As you will see above,
we endeavored: i) to provide you with a description of the personal information
we collect, will collect and stored and the purpose/s thereof; ii) to obtain your
consent; iii) to explain the scope and method of the collection and sharing; and
iv) the recipients of the personal information collected and shared;

2. The Right to Object - You have the right to object to the sharing of your
information other than what is part of employment related activities. Should there
be any changes in the information provided to you in the Notice and Consent
Form, you should be informed of such changes and your consent thereto
obtained before such changes are implemented.

3. The Right to Withdraw Consent Anytime - You have the right to withdraw your
consent to the sharing of your information .

4. The Right to Access, Erasure and/or Blocking - You have the right to request
for a copy of any personal data we hold and shared about you, including the
sources from which such information was collected and to whom the same is
shared. You have the right to have it corrected or revised if you think it is
inaccurate or incomplete. You have the right to suspend, withdraw or order the
 blocking, removal or destruction of your personal information should you a)
discover that it is incomplete, outdated, false, unlawfully obtained, used for an
unauthorized purpose, no longer necessary for the purposes stated; b) withdraw
your consent thereto; or c) discover violations of your right as a data subject.

5. The Right to Damages - You have the right to be indemnified for any damages
sustained due to any violations of your rights as a data subject.

IV. Recipients of Personal Data

a. Internal Personnel

In the collection and processing of personal data, only authorized personnel from the
Human Resources and Administration and Finance Departments. These personnel are
authorized specific to their function and in accordance with our procedures for
application and approval in collaboration with our Data Protection Office (DPO).
Additional access provided to personnel not mentioned herein may be provided on a
case-to-case basis only upon approval by our DPO and in consonance with the
purposes enumerated above.

b. Third Parties

We allow access to human resource personal data to authorized third-party service

providers/vendors/suppliers/subcontractors/consultants who provide outsourced
functions including, among others:

1. EQ/aptitude/proficiency/psychological/performance testing services for employees

through third-party website/portal;
2. Partner agencies who provide personnel services;
3. Financial institutions that provide loan and contribution services to our employees;
4. Business resource management systems, productivity tools, applications and
software, as well as cloud storage systems to meet the Company’s storage
management requirements;
5. Mobile communications services;
6. Payroll processing
7. Health Maintenance Organization (HMO) services;
8. Additional regular background and lifestyle checks on an employee to assist the
organization in conducting its continuing security assessment activities as well as in
compliance with industry and standards requirements.
9. External professional advice and consultation including audits, legal assessments,
comparative compensation studies and evaluations; and
10. Other financial, technical, architectural and administrative services such as human
resource information systems, payroll, accounting, sales administration,
procurement, training and other services.
The Company remains responsible over the personal data disclosed to such third
parties. As such, we ensure that such third parties are contractually obligated to comply
with the requirements of the Data Privacy Act and shall process your data strictly in
accordance with the purposes enumerated above. You may request for additional
information on the identities of these parties from the Office of the Data Protection
Officer.

We also disclose employee information to government regulatory agencies including,

but not limited to the SSS, PhilHealth, Pag-IBIG, DOLE, and the BIR in accordance with
reportorial requirements established by law.

We do not sell or disclose your personal data to unauthorized third parties unless we
are legally required to do so or if such action is necessary to protect, defend and/or
enforce our rights, property or the personal safety of our employees and other
individuals. Your personal data collected by LBTI shall only be used for the purposes
stated above.

V. Personal Data Retention and Disposal

Your personal data will only be kept in TaskUs’ database only for as long as is
necessary for the fulfillment of the declared, specified, and legitimate purposes provided
above, or when the processing is relevant to the purpose. After which, personal data
shall be disposed or discarded in a secure manner that would prevent further
processing, unauthorized access, or disclosure to any other party or the public, or
prejudice the interests of the data subjects.

VI. Contact Us

If you have any questions, concerns, objections about this Notice and Consent
Form, and personal information processing to be conducted in relation to this consent
form please contact us through the privacy@taskus.com .
 Consent

I, _________________________ [name of Employee], support TaskUs’ efforts to maintain

honesty, integrity, professionalism, and fairness in our workplace . I support all efforts of the
Company to guard our ranks against unscrupulous employees, supervisors, administrators, clients,
and persons within our midst and work environment in order to maintain our personal safety,
security of the workplace, and integrity of the Company and the industry.

Pursuant to such efforts, TaskUs is maintaining a database containing specific personal

information, sensitive or otherwise including information on any fraud-related internal disciplinary
proceedings conducted against me and any civil and/or criminal cases arising therefrom.

As a data subject whose personal information, sensitive or otherwise, will be processed in

relation to the requirements, I acknowledge having received, viewed, and provided with access to
a copy of the Company’s Privacy Notice made in compliance to Republic Act no. 10173, otherwise
known as the Data Privacy Act. Having fully read and understood said Notice, I recognize the
following:

1. I have been duly informed of the nature of the personal information to be processed and
stored in the database;
2. I have been informed of the scope, source and method of the personal processing
involved in said database;
3. I have been informed of the purpose of such processing as well as the legitimate interests
of the parties involved thereto;
4. I have been informed of the intended recipients of my personal information, sensitive
or otherwise;
5. I have been informed of how long my personal information, sensitive or otherwise, will
be retained; and
6. I have been informed of my rights and obligations as a data subject under the Data
Privacy Act and its implementing rules and regulations.

In support of the database requirements, I expressly agree to the processing and disclosure
of my personal information, sensitive or otherwise, in accordance with the policies set forth in the
Privacy Notice. In so giving this authority, I hereby warrant that my consent is freely given and is
an informed indication of my will.

__________________________
Name and Signature