Privacy Statement

Last updated: 30 July 2026

Our Commitment to Privacy

Synercore Heavy Industries Corp. (“Synercore,” “we,” “us,” or “our”) respects your right to privacy and is committed to protecting the personal data entrusted to us.

This Privacy Statement explains how we collect, use, disclose, retain, and protect personal data when you visit our website, communicate with us, submit an inquiry or application, engage our services, visit our offices or project sites, or otherwise interact with Synercore.

We process personal data in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012, its Implementing Rules and Regulations, applicable issuances of the National Privacy Commission, and other applicable laws and regulations.

Scope

This Privacy Statement applies to personal data processed through:

our website, online forms, and digital platforms;
business, project, and service inquiries;
proposals, contracts, and project-related communications;
supplier, contractor, consultant, and business-partner engagements;
recruitment and employment applications;
events, meetings, office visits, and project-site access; and
other authorized interactions with Synercore.

Where a separate or more specific privacy notice applies—for example, to employees, project personnel, suppliers, contractors, or job applicants—that notice will supplement this Privacy Statement.

Personal Information Controller

Synercore acts as the Personal Information Controller when it determines why and how personal data is processed.

In certain circumstances, Synercore may process personal data on behalf of a client, project owner, contractor, or another organization. In such cases, the relevant organization’s privacy notice may also apply.

Personal Data We May Collect

Depending on your interaction with us, we may collect:

Identity and Contact Information

Your name, job title, company, business address, email address, telephone number, and other contact details.

Business and Project Information

Information contained in inquiries, proposals, correspondence, meeting records, contracts, project documentation, supplier submissions, and other business communications.

Recruitment Information

Your curriculum vitae, employment and educational history, qualifications, professional licenses, references, work eligibility, and other information submitted in connection with an application.

Compliance and Site-Access Information

Information required for due diligence, contractor accreditation, regulatory compliance, health and safety, security screening, visitor management, or project-site access.

Technical and Usage Information

Your IP address, browser type, device information, operating system, referring website, pages visited, access times, and other information collected through cookies, analytics tools, and similar technologies.

Information From Other Sources

Information received from clients, employers, professional references, contractors, recruitment platforms, business partners, publicly available sources, and other lawful sources.

We endeavor to collect only personal data that is adequate, relevant, necessary, and proportionate to the stated purpose.

How We Use Personal Data

We may process personal data to:

respond to inquiries and requests;
provide information about our construction, project-delivery, and related services;
prepare proposals, quotations, contracts, and project documentation;
manage client, supplier, contractor, consultant, and stakeholder relationships;
coordinate project planning, execution, reporting, testing, closeout, and handover;
assess employment, contractor, or supplier applications;
conduct due diligence, accreditation, background verification, and compliance reviews;
administer office and project-site access, safety, and security;
comply with legal, regulatory, contractual, accounting, taxation, and reporting obligations;
establish, exercise, or defend legal claims;
maintain and improve our website, systems, services, and business operations;
prevent fraud, cybersecurity incidents, unauthorized access, and other unlawful activity;
communicate business updates, publications, events, and service information, where permitted; and
fulfill other purposes disclosed at the time of collection or authorized by law.

Lawful Basis for Processing

Depending on the circumstances, we process personal data on one or more of the following bases:

your consent;
actions necessary before entering into or performing a contract;
compliance with a legal or regulatory obligation;
protection of life, health, or safety;
the legitimate interests of Synercore or a third party, provided those interests do not override your fundamental rights and freedoms;
the establishment, exercise, or defense of legal claims; or
another basis permitted by applicable law.

Where processing depends on consent, you may withdraw that consent, subject to applicable legal and contractual limitations. Withdrawal does not affect processing lawfully undertaken before consent was withdrawn.

Disclosure of Personal Data

Where necessary and lawful, we may disclose personal data to:

clients, project owners, developers, main contractors, subcontractors, consultants, suppliers, and other project participants;
professional advisers, including legal, financial, taxation, accounting, technical, insurance, and compliance advisers;
information-technology, website-hosting, cloud-storage, communications, analytics, recruitment, security, and other service providers;
banks, insurers, auditors, and contractual counterparties;
government agencies, regulators, courts, law-enforcement authorities, and other public bodies where required or permitted by law; and
other persons authorized by you or identified when the personal data is collected.

We do not sell personal data.

Service providers that process personal data on our behalf are expected to use it only for authorized purposes and to maintain appropriate confidentiality, privacy, and security safeguards.

International Data Transfers

Some service providers, cloud platforms, communication systems, or business counterparties may process or store personal data outside the Philippines.

Where personal data is transferred internationally, we will take reasonable and appropriate measures to protect it and require recipients to maintain safeguards consistent with applicable Philippine data-protection requirements.

Data Retention

We retain personal data only for as long as reasonably necessary to:

fulfill the purposes for which it was collected;
maintain appropriate business, project, contractual, and employment records;
comply with legal, regulatory, taxation, accounting, audit, and reporting requirements;
resolve disputes and enforce agreements; and
establish, exercise, or defend legal claims.

Retention periods may vary depending on the type of information, the nature of the relationship, applicable contractual requirements, and legal obligations.

When personal data is no longer required, we will securely delete, destroy, anonymize, or otherwise dispose of it in accordance with applicable requirements and our records-management procedures.

How We Protect Personal Data

Synercore implements reasonable and appropriate organizational, physical, and technical safeguards designed to protect personal data against accidental or unlawful destruction, loss, alteration, misuse, unauthorized disclosure, or unauthorized access.

These safeguards may include:

role-based access controls and authentication measures;
confidentiality requirements for employees, contractors, and service providers;
secure storage, transmission, backup, and disposal procedures;
cybersecurity monitoring and protective technologies;
personnel training and internal privacy procedures;
service-provider security and confidentiality requirements; and
incident-detection, response, recovery, and breach-management procedures.

No information system or transmission method is completely secure. However, we continually assess and improve our safeguards based on the nature of the personal data, applicable risks, available technology, and legal requirements.

Where a personal data breach requires notification, Synercore will notify the National Privacy Commission and affected data subjects in accordance with applicable law.

Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

enable essential website functions;
maintain website security;
remember user preferences;
understand website traffic and visitor behavior; and
improve website performance, content, and usability.

Where required, we will request consent before placing non-essential cookies. You may manage cookies through the available consent controls or your browser settings. Disabling certain cookies may affect website functionality.

Further information should be provided in Synercore’s separate Cookie Notice once the website’s actual cookies and analytics services have been verified.

Marketing Communications

Where permitted by law, we may use your contact details to send information about Synercore’s services, projects, publications, events, and business updates.

You may withdraw your consent or opt out of direct marketing at any time by:

selecting the unsubscribe option in an email; or
contacting us through the details provided below.

Opting out of marketing communications will not prevent us from sending necessary administrative, contractual, project-related, safety, security, or legal communications.

Your Rights as a Data Subject

Subject to applicable law and valid limitations, you may exercise the following rights:

Right to be informed about the collection and processing of your personal data;
Right to object to certain processing activities;
Right of access to personal data processed about you;
Right to rectification of inaccurate, outdated, or incomplete personal data;
Right to erasure or blocking where the legal conditions are satisfied;
Right to data portability where applicable;
Right to withdraw consent where processing is based on consent;
Right to lodge a complaint with the National Privacy Commission; and
Right to damages where provided by law.

To protect your privacy and prevent unauthorized disclosure, we may request information necessary to verify your identity and authority before acting on a request.

Requests may be subject to lawful exceptions, including requirements relating to legal claims, regulatory investigations, contractual obligations, security, and statutory record retention.

Children and Minors

Our website and services are not generally directed toward children or minors.

We do not knowingly collect personal data from a child or minor without an appropriate lawful basis and, where required, authorization from a parent, guardian, or legal representative.

If we learn that personal data has been collected from a child or minor without appropriate authorization, we will take reasonable steps to delete or otherwise lawfully address the information.

Third-Party Websites

Our website may contain links to third-party websites or services. Synercore does not control the privacy, security, or content practices of those third parties.

We encourage you to review the privacy notices of any third-party websites or services before providing them with personal data.

Changes to This Privacy Statement

We may update this Privacy Statement to reflect changes in our operations, technologies, legal obligations, or data-processing practices.

Revisions will be published on this page with an updated effective date. Where changes are material, we may provide additional notice through the website or other appropriate communication channels.

Contact Us

For questions, concerns, complaints, or requests concerning your personal data, please contact:

Data Protection Officer / Privacy Team
Synercore Heavy Industries Corp.
Email: [INSERT DPO OR PRIVACY EMAIL]
Telephone: [INSERT CONTACT NUMBER]
Address: [INSERT REGISTERED BUSINESS ADDRESS]
Website: [INSERT WEBSITE ADDRESS]

You may also lodge a complaint with the National Privacy Commission of the Philippines through its official website: privacy.gov.ph.

PRIVACY STATEMENT Protecting Your Information. Respecting Your Trust.