Legal

Privacy Policy

How LisBom Limited collects, uses, and protects your personal data

Last updated: May 2025

1 Who we are

LisBom Limited ("LisBom", "we", "us", "our") is a company registered in England & Wales. We are the data controller for personal data collected through this website and in the course of our services.

We connect UK and international businesses with Filipino professionals, managing recruitment, onboarding, and ongoing employment. This means we handle personal data relating to two groups of people: business clients and their contacts, and candidates and placed talent (primarily based in the Philippines).

Questions about this policy? Contact us at support@lisbom-ltd.com.

2 What data we collect and why

A) Business clients and enquirers — when you contact us, book a call, or use our services:

DataWhy we collect it
Name, email, phone numberTo respond to your enquiry and manage our relationship
Company name and countryTo tailor our service and match appropriate candidates
Role requirements and budgetTo source the right Filipino talent for your needs
Communications historyTo provide continuity of service and resolve any disputes

B) Candidates and placed talent — when you apply for a role or are placed with a client:

DataWhy we collect it
Full name, email, phone numberTo manage your application and employment relationship
CV / résumé and work historyTo assess suitability and present you to relevant clients
Skills, qualifications, and test resultsTo match you accurately to roles
Right to work and identity documentsTo comply with legal and contractual obligations
Bank details and payment informationTo process salary payments
Performance and review recordsTo fulfil our ongoing management obligations

C) Website visitors — when you browse our site:

  • Technical data such as IP address, browser type, and pages visited (via cookies — see Section 7)
  • Any information you voluntarily submit via our contact or application forms

3 Lawful basis for processing

Under UK GDPR, we must have a valid lawful basis to process your personal data. We rely on the following:

Processing activityLawful basis
Managing client contracts and service deliveryContract — processing is necessary to fulfil our agreement with you
Processing candidate applications and employmentContract — necessary to enter into or perform an employment/service agreement
Responding to enquiries and booking callsLegitimate interests — we have a legitimate interest in responding to business enquiries
Retaining unsuccessful candidate data (short-term)Legitimate interests — to consider candidates for future roles; balanced against candidate rights
Analytics and website improvementConsent — via our cookie banner for non-essential cookies
Legal obligations (e.g. tax, payroll records)Legal obligation — required by law

You have the right to object to processing based on legitimate interests. See Section 8 for how to exercise this right.

4 International data transfers

Our core service involves transferring personal data between the UK and the Philippines. The Philippines is not currently on the UK's list of countries with an adequacy decision, which means we must put appropriate safeguards in place.

We rely on the following transfer mechanisms:

  • UK International Data Transfer Agreements (IDTAs) — standard contractual clauses approved by the ICO, incorporated into our agreements with candidates, clients, and sub-processors in the Philippines
  • Legitimate interests assessment — for transfers necessary to fulfil our contractual obligations to clients

In addition, the Philippines has its own data protection law — the Data Privacy Act of 2012 — which imposes obligations on any party that processes Philippine residents' personal data. We comply with both UK GDPR and this Act.

If you are a candidate based in the Philippines, your personal data will be shared with UK-based clients as part of our service. We ensure all clients are bound by appropriate data protection obligations before any transfer takes place.

5 How long we keep your data

Data typeRetention period
Unsuccessful candidate CVs and application data6 months from the hiring decision, then securely deleted — unless you give us explicit consent to retain your details for future roles
Placed talent / employee recordsDuration of the engagement, plus 6 years after termination (for legal and tax purposes)
Client contact and contract dataDuration of the client relationship, plus 6 years
Website enquiry / contact form submissions2 years from the date of enquiry
Cookie analytics dataAs set by the relevant cookie provider (typically 12–26 months)

6 Who we share your data with

We do not sell your data. We only share personal data where necessary:

  • Client businesses — candidate profiles are shared with prospective clients as part of our placement service
  • Payroll and HR tools — used to process salaries and manage employment records
  • Email and CRM platforms — to manage client and candidate communications (e.g. HubSpot, Google Workspace)
  • Calendly — to facilitate discovery call bookings; their privacy policy applies to data you enter on their platform
  • Analytics providers — such as Google Analytics, where you have consented to analytics cookies
  • Legal or regulatory authorities — where required by law (e.g. HMRC, ICO)

All third-party processors are bound by data processing agreements and may only process your data on our instructions.

7 Cookies

We use cookies and similar tracking technologies on this website. A cookie banner will appear on your first visit, and non-essential cookies will only be set with your consent.

CategoryPurposeConsent required?
Strictly necessaryCore site functionality (e.g. remembering cookie preferences)No
AnalyticsUnderstanding how visitors use the site (e.g. Google Analytics)Yes
FunctionalEnhanced features such as the Calendly booking widgetYes

You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the footer.

8 Your rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — ask us to correct inaccurate or incomplete data
  • Right to erasure — ask us to delete your data where there is no compelling reason for us to continue processing it
  • Right to restriction — ask us to limit how we use your data
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interests or for direct marketing
  • Rights related to automated decision-making — we do not make solely automated decisions that significantly affect you

To exercise any of these rights, email us at support@lisbom-ltd.com. We will respond within one calendar month. We may ask you to verify your identity before processing a request.

These rights are not absolute and may be subject to legal exemptions in certain circumstances.

9 How to complain

If you have a concern about how we handle your personal data, please contact us first at support@lisbom-ltd.com and we will do our best to resolve it promptly.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, SK9 5AF

10 Contact us

For any questions about this Privacy Policy or your personal data:

LisBom Limited — Data Enquiries

📧 support@lisbom-ltd.com

🏢 Registered in England & Wales

We aim to respond to all data-related requests within 30 days.