Get360HR Privacy Notice

Effective date: 29 August 2026

Get360HR is operated by LUXEBEAUTE INTERNATIONAL ACADEMY INC ("Get360HR," "we," "us," or "our"). This notice explains how personal data is processed through the Get360HR website, accounts, support channels, and human resource management service.

1. Our role in processing personal data

For website, account administration, service-plan, billing, service security, and support data that we determine how and why to process, we act as a personal information controller.

For employee and applicant data entered into Get360HR by a subscribing organization, that organization generally determines the purposes and means of processing and acts as the personal information controller. Get360HR generally processes that data on the organization's documented instructions as a personal information processor. Employees and applicants should normally direct requests about employer-controlled records to the relevant employer or organization first.

2. Personal data we may process

Depending on how the service is configured and used, we may process:

• account and contact data, including names, business contact details, organization, role, account identifiers, and authentication information;
• employee and applicant records entered by a customer, such as profile, employment, recruitment, attendance, leave, performance, training, compensation, payroll, document, asset, ticket, and employee-relations information;
• service-plan, order, invoice, and payment-status information, while payment providers may process payment credentials under their own notices;
• support communications, service requests, feedback, and related records;
• device, browser, IP address, date and time, activity, audit, diagnostic, and security-log information needed to operate and protect the service; and
• marketing preferences and communications where product updates or direct marketing are enabled.

Customers must configure their forms and workflows to collect only personal data that is relevant and necessary for a declared and lawful purpose.

3. Why we process personal data

We process personal data, as applicable, to:

• create and administer accounts and service plans;
• provide, maintain, support, secure, and improve Get360HR;
• perform our contract and follow a customer's documented instructions;
• authenticate users, apply permissions, investigate incidents, and prevent misuse;
• process orders, invoices, support requests, and service communications;
• meet legal, regulatory, accounting, and recordkeeping obligations;
• establish, exercise, or defend legal claims; and
• send product or marketing communications only where a valid legal basis applies, with a way to withdraw consent or object.

The applicable lawful basis may include performance of a contract, compliance with a legal obligation, protection of lawful interests that do not override individual rights, consent where required, or another basis permitted by law.

4. How personal data may be disclosed

Personal data may be made available only as necessary to:

• the subscribing organization and its authorized users;
• service providers that support hosting, storage, email, communications, payments, security, maintenance, and customer support under appropriate obligations;
• professional advisers, auditors, insurers, or parties involved in a lawful business transaction, subject to appropriate safeguards; and
• government authorities, regulators, courts, or other parties when disclosure is required or permitted by law.

We do not authorize service providers to use customer employee data for their own unrelated purposes.

5. International processing

Some service providers may operate infrastructure or support services outside the Philippines. Where personal data is transferred or made accessible across borders, we use contractual and other reasonable safeguards appropriate to the processing and applicable law.

6. Retention

We retain personal data only for as long as reasonably necessary for the declared purpose, the customer relationship, security and audit needs, legal or contractual obligations, and the establishment, exercise, or defense of legal claims.

Customer-controlled employee and applicant data is retained according to the customer's instructions and applicable agreement, subject to lawful retention requirements and limited backup cycles. Customers are responsible for establishing retention schedules appropriate to their records and legal obligations.

7. Security

We use reasonable and appropriate organizational, physical, and technical measures intended to protect the confidentiality, integrity, and availability of personal data. Measures may include role-based access, authentication, logging, backup, change control, and restricted administrative access where applicable. No service or transmission method can guarantee absolute security.

8. Your data privacy rights

Subject to applicable law and relevant exceptions, data subjects may have rights to be informed, access personal data, object to processing, request correction, request erasure or blocking, obtain data portability, withdraw consent where processing is based on consent, claim damages where legally available, and file a complaint with the National Privacy Commission.

When the data is controlled by your employer or another subscribing organization, submit the request to that organization. You may also contact us if you need help identifying the appropriate channel.

9. Cookies and similar technologies

Get360HR may use essential cookies needed for sign-in, security, session management, language, and service operation. If analytics, advertising, or other non-essential technologies are used, the website should provide additional notice and any control required by applicable law before those technologies are activated.

10. Children

Get360HR is intended for authorized business and workforce use. Customers that process information about minors must establish a lawful basis, provide appropriate notices, collect only necessary information, and apply safeguards required by law.

11. Changes to this notice

We may update this notice to reflect changes in the service, processing, or legal requirements. The current version and effective date will be posted on this page. Material changes will be communicated through an appropriate channel.

12. Contact us

LUXEBEAUTE INTERNATIONAL ACADEMY INC
Isabelle Garden Commercial Lot 4A, E. Rodriguez Avenue, Moonwalk,
Paranaque City, Metropolitan Manila Area 1700, Philippines

For privacy requests, questions, or complaints, email support@get360app.com with the subject line "Privacy Request." Please do not send passwords, government identification numbers, bank information, or complete payroll records by ordinary email.

You may also learn about your rights or submit a complaint through the National Privacy Commission.