Privacy Policy & Candidate Confidentiality

Information We Collect

To facilitate clinical credentialing and direct-hire hospital sponsorship, we collect the following categories of information:

• Candidate Identifying Data: Full legal name, date of birth, mailing address, email address, telephone/WhatsApp contact details, and government-issued identification numbers.
• Professional & Clinical Credentials: Philippine Professional Regulation Commission (PRC) RN license numbers, NCLEX-RN examination confirmation, CGFNS VisaScreen status, English language proficiency scores (IELTS Academic, OET, TOEFL iBT), and curriculum vitae.
• Bedside Employment Records: Current and past healthcare employer names, clinical specialties (ICU, ER, Med-Surg, OR, etc.), years of verified bedside experience, bed capacity of clinical facilities, and supervisor references.
• Healthcare Facility Inquiries: Facility name, executive contact details, licensed bed count, acute RN vacancy numbers, and clinical department staffing specifications.

Purpose of Data Processing

We process personal and professional data strictly for lawful, necessary, and transparent operations:

• Verifying nursing licenses with the Philippine PRC and the National Council of State Boards of Nursing (NCSBN).
• Matching candidate clinical competencies with direct-hire staffing requirements of contracted U.S. hospitals.
• Preparing immigration documentation required for U.S. Department of Labor Schedule A prevailing wage filings and USCIS Form I-140 immigrant petitions.
• Authenticating user interactions via secure, single-use email verification tokens.

Compliance with Philippine Data Privacy Act (RA 10173)

For nursing candidates located in the Republic of the Philippines, Centouch Healthcare operates in strict compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations issued by the National Privacy Commission (NPC).

Candidate consent is obtained prior to clinical record processing. Candidates retain full statutory rights to access their stored personal records, request corrections of erroneous information, or demand data erasure upon written notice.

Technical Data Security & Storage Standards

We maintain multi-layered technical, administrative, and physical safeguards to prevent unauthorized access, alteration, or disclosure:

• 256-Bit TLS Encryption: All data transmitted through Centouch.com forms is encrypted in transit using industry-standard Transport Layer Security (TLS 1.3).
• Isolated Database Storage: Production candidate and client records are stored in a hardened SQLite database located outside public web directories with explicit server-level deny rules.
• No Plaintext Secret Storage: Verification tokens are generated using cryptographically secure pseudorandom generators (CSPRNG) with strict expiration timeouts.
• Zero Client-Side Secret Leakage: Form inputs never render sensitive tokens or passwords in client DOM attributes or hidden elements.

Authorized Third-Party Disclosures

Personal information is disclosed strictly on a need-to-know basis to authorized parties directly involved in your employment and immigration pipeline:

• Contracted U.S. Hospital Employers: Sponsoring healthcare systems reviewing candidate clinical files for direct-hire job offers.
• Retained Immigration Legal Counsel: Licensed U.S. immigration attorneys preparing and filing USCIS Form I-140 petitions and consular processing documents.
• Government & Credentialing Authorities: USCIS, U.S. Department of State, CGFNS International, and state nursing boards as mandated by official immigration and licensing procedures.

Candidate Rights & Inquiries

Candidates and facility administrators may review, update, or request the deletion of their records at any time by contacting our Data Governance Officer at info@centouch.com. Requests are acknowledged within 48 business hours.