CFW
CONFEDERATION OF FILIPINO WORKERS
Registered Labor Federation
Privacy notice

WHAT WE HOLD ABOUT YOU,
AND WHO ELSE CAN SEE IT

A union asks its members for their pay, their grievances and their debts. Those are the three things people least want loose. So this page is not a formality: it is the list of everything we keep, every person who can see each part of it, and what you can do about any of it.

Republic Act No. 10173, the Data Privacy Act of 2012 · Last updated 26 July 2026

Sa madaling salita

ANG BUOD, SA TAGALOG

  • Hinihingi namin ang inyong pangalan, kapanganakan, tirahan, numero, employer, posisyon, at buwanang basic pay — ang huli dahil doon nakabatay ang 1% na dues at kung magkano ang pwede ninyong utangin.
  • Ang chapter president ninyo ay nakakakita ng rekord ng mga miyembro sa kanyang chapter lamang. Ang national president ay nakakakita ng lahat. Ang ibang miyembro ay wala.
  • Ang employer ay binibigyan lamang ng pangalan at halagang ibabawas sa payroll. Hindi nila nakikita kung bakit ka umutang, at hindi nila nakikita ang grievance mo.
  • Ang QR sa ID ninyo ay nagpapakita sa kahit sino na nag-scan ng apat na bagay: pangalan, chapter, aktibo ba, at updated ba ang dues. Wala nang iba.
  • Pwede ninyong tingnan, itama, o hilingin na burahin ang rekord ninyo anumang oras — may pindutan na para dito sa loob ng portal.
  • Hindi namin ipinagbibili ang datos ninyo. Kahit kanino.
Section 1

WHO IS ANSWERABLE FOR IT

Under the Act the organisation that decides what is collected is the personal information controller, and it carries the responsibility. That is the federation, not your chapter and not your employer.

THE CONTROLLER

Confederation of Filipino Workers, a registered labor federation.
National Office — info@cfw.org.ph

WHO TO WRITE TO ABOUT YOUR DATA

Vic Poseran, Data Protection Officer
info@cfw.org.ph, with “Data privacy” in the subject line.
You may write in Filipino or English. We answer within fifteen working days.

The Act requires a named person, not a department, because a request sent to an office is a request nobody in particular has to answer.

Section 2

EVERYTHING WE HOLD

This is the complete list, taken from the system itself rather than written from memory. If something is not here, we do not keep it.

When you join

WHO YOU ARE

  • Full name
  • Date of birth
  • Civil status
  • Home address
  • Mobile number and email address
  • A photograph, for the membership ID
  • An emergency contact, if you give one
  • The date and time you ticked the consent box on the join form
Because you work somewhere

YOUR JOB AND PAY

  • Employer and chapter
  • Position
  • Employee number
  • Date hired
  • Monthly basic pay
  • Dues paid, and up to what month
  • If you leave: the date, and whether you resigned, were made redundant, retired or were dismissed
Why we ask for your pay Dues are one per cent of basic pay — two per cent at Shakey's — so the figure decides what the employer must remit for you and what you may borrow. It is not curiosity.
Only if it happens

WHAT YOU BRING TO US

  • Loans — amount, purpose, the reason if you applied as an emergency, who approved it, every deduction, and the balance
  • Grievances — the account of what happened, the category, who else is named, every remark, and each stage
  • Help requests — what you asked for and what was done
  • Payroll deduction authority — the form you signed, and its date
  • Emails we sent you, and whether they arrived
  • A record of every change made to your file, by whom and when
The grievance file is the sensitive one A grievance often has to describe illness, a family emergency, a disciplinary hearing, or something said to you at work. That is held under tighter rules than the rest, and Section 3 sets out exactly who sees it. Your employer is not on that list.
Section 3

WHO CAN SEE EACH PART

Not a promise — a description. The database enforces every row below, so an officer who tries to open a record outside their chapter gets nothing rather than a warning they can click past.

What You Your chapter president National office Other members Your employer The financing partner
Name, chapter, membership number YesYesYes No Yes Only if you borrow
Address, birth date, mobile, email YesYesYes No No No
Monthly basic pay YesYesYes No They already have it No
Dues standing YesYesYes No The amount deducted No
Loan amount and balance YesYesYes No The deduction only Yes — they lend it
Why you borrowed YesYesYes No Never Never
Grievance contents and remarks Yes Yes Yes Only those named on it Never Never
Help requests YesYesYes No Never Never
Your ID photograph YesYesYes No No No

WHEN A GRIEVANCE NAMES MORE THAN ONE PERSON

Your chapter president chooses who can follow it: a named list of the members concerned, or the whole chapter where the matter affects everybody. For anything personal — health, family, discipline — it stays with the named list. A member added to a grievance is told, and may write on the record themselves.

A CHAPTER PRESIDENT SEES ONE CHAPTER

Not the federation. The president of the Dow chapter cannot open a Monde Nissin member's record, and neither can the reverse. Only the national office sees across chapters, because dues remittance and loan approvals above the chapter limit require it.

Section 4

THE THREE DISCLOSURES WORTH KNOWING ABOUT

Everything else stays inside the federation. These three do not, so they are set out in full rather than buried in a list.

Disclosure one

YOUR EMPLOYER'S PAYROLL OFFICE

Dues and loan repayments reach the union by check-off: the employer deducts them from your pay and transfers the total. That cannot happen without telling payroll who to deduct from and how much.

What payroll receives

  • Your name, membership number and employee number
  • Your position
  • The amount to deduct, and which instalment it is
  • The loan reference number and the balance left

What payroll never receives

  • Why you borrowed
  • That you applied as an emergency, or what the emergency was
  • Any grievance, remark or help request — ever
  • Your home address, birth date or emergency contact
Disclosure two

THE QR CODE ON YOUR ID

The code on your membership card opens a public page. Anybody who scans it — a guard, a hospital clerk, a lawyer, a stranger — sees four things and nothing else:

  • Your name
  • Your chapter
  • Whether your membership is active
  • Whether your dues are up to date

No pay, no address, no loans, no grievances. The point of the card is that you can prove you are covered without having to ring the office, and that only works if the check is open. If you would rather not carry it, do not print one — nothing in the system requires it.

Disclosure three

THE FINANCING PARTNER, IF YOU BORROW

The Damayan Fund is funded by an outside lender, not out of your dues. Their account manager has a sign-in to a single screen that shows loans ready to fund. The financier sends the approved amount to CFW; CFW then makes the separate payout to the member.

What they receive

  • Your name and membership number
  • Your chapter and employer, and the payroll cutoff
  • The amount approved and the term
  • That a signed authority to deduct exists, its date, and who verified it

What they never receive

  • Why you borrowed. Not the purpose, not the reason you gave for an emergency. It is often a funeral, a hospital bill or a child's tuition, and a lender does not need it to send money secured on a payroll deduction.
  • Any grievance, remark or help request
  • Your dues, your address, your birth date, your photograph
  • Your personal payout account — CFW handles the member payout
  • Any member who is not on their funding list

They see nothing at all until your loan has been approved and your signed authority to deduct is on file — and if you revoke that authority, the loan disappears from their funding screen and the system refuses the transfer. Their confirmation records funds sent to CFW only; it never starts payroll deductions.

One more, if we are ever compelled A court, the Department of Labor and Employment, the National Labor Relations Commission or the National Privacy Commission may lawfully order us to produce records. We comply with a lawful order, we give only what is asked for, and where we are permitted to tell you, we tell you.
Section 5

WHERE IT IS ACTUALLY KEPT

The Act requires us to name the companies that process your data on our behalf, including those outside the Philippines. Three do.

The database

SUPABASE

Holds the membership records, loans, grievances and dues. The servers for this federation are in Singapore. Encrypted in transit and at rest.

The email sender

EMAILJS

Sends the notices about your loan, your grievance and your record. Your name, email address and the wording of the notice pass through it, in the United States. Nothing else does.

The website

HOSTINGER

Serves these pages. It holds no membership data of its own — the pages fetch what you are allowed to see, when you sign in.

And one that is not a processor but a party The financing partner is not handling your data on the federation's behalf — they are lending you money in their own right, and they answer for what they hold under R.A. 10173 themselves. Section 4 sets out exactly what reaches them.
What we do not use No advertising trackers, no analytics that follow you between sites, no social media pixels. The only thing stored in your browser is the token that keeps you signed in. We do not sell, rent or trade your data, and we will not — not to a lender, not to a political party, not to anyone.
Section 6

HOW LONG WE KEEP IT

Keeping a record forever because deleting it is awkward is not a reason. Each of these has one.

WhatKept forWhy that long
Your membership record While you are a member It is what makes you a member
Loan and repayment records Ten years after the loan closes Money the federation lent and collected has to be accountable to an audit and to you
Dues and remittance records Ten years They are the proof of what the employer owed and paid
Grievance records Ten years after it closes A settled grievance is the precedent for the next one and evidence in the next round of bargaining
Your record after you leave Three years, then reduced to name, membership number and dates So a former member can be verified, and so a dispute arising later can be answered
Your ID photograph Deleted when you stop being a member It has no purpose after that
The log of changes to your file Ten years Removing the record of who changed what would defeat its purpose
Section 7

YOUR RIGHTS, AND HOW TO USE THEM TODAY

Sections 16 and 18 of the Act give you these. Most notices stop at listing them; here is where each one actually is.

Right to be informed

To know what is held and what it is used for. This page. If it is out of date, that is a fault worth reporting.

Right of access

To see your record. My details in your portal shows every field we hold, including which ones are blank. You may also ask for a copy in writing.

Right to rectification

To correct what is wrong. Your mobile, address, emergency contact and civil status you change yourself, immediately. Your name, pay, date hired and position go to an officer, because those decide money — ask from the same panel and you will be told the outcome.

Right to erasure or blocking

To have data removed where it is no longer needed or was unlawfully obtained. Write to Vic Poseran, the Data Protection Officer. An open loan or an unresolved grievance is the one thing we cannot erase while it is live — we will say so plainly and give the reason.

Right to object

To refuse a particular use. In practice this is the ID photograph and the QR verification, both of which are optional. Dues and loan deductions are not: they are the substance of membership, and withdrawing from them means resigning.

Right to data portability

To receive your data in a usable electronic form. Ask, and you get a spreadsheet of your record, your loans and every deduction — not a printout you cannot do anything with.

Right to damages

To be compensated for harm caused by false, unlawfully obtained or unauthorised use of your data.

If something goes wrong

If your data is exposed in a way that could put you at real risk, we tell you and we tell the National Privacy Commission — we do not wait to be asked and we do not decide on your behalf that it does not matter.

Section 8

IF YOU ARE NOT SATISFIED

Three steps, and you are not obliged to take them in order. You may go to the Commission first.

Step one

YOUR CHAPTER PRESIDENT

Fastest for anything wrong on your own record. They can correct most of it the same day.

Step two

THE DATA PROTECTION OFFICER

Vic Poseran — info@cfw.org.ph
For anything your chapter cannot settle, or where the complaint is about your chapter. Fifteen working days.

Step three

NATIONAL PRIVACY COMMISSION

complaints@privacy.gov.ph
(+63) 2 5322 1322, local 114 or 115
25th–27th Floors, The Upper Class Tower, Quezon Avenue corner Scout Reyes Street, Quezon City
privacy.gov.ph

Complaining does not put your membership at risk Saying it in a privacy notice is easy, so here is the mechanism: every change to a member's record is logged with the name of the officer who made it, and only the national office can remove a member. A complaint and a retaliation would both be in the same log.

WHY THIS PAGE IS THIS LONG

A federation that asks a worker for their payslip and their grievance is asking for trust it has not yet earned. The usual answer is a short notice full of “may be shared with third parties as necessary”, which is another way of saying we would rather you did not ask.

The first time management tries to argue that the union is careless with its members' information, this page is the answer — and it only works if every line of it is true. If you find a line that is not, report it and it will be fixed.

This notice is reviewed each year and whenever the system changes in a way that affects it. Material changes are emailed to members; we do not rely on you noticing a new date at the top of a page.