Get Started

Legal

Privacy Policy

Effective Date: 1 October 2026

How we collect, use, share and protect personal information when you visit our website, contact us or work with us.

Questions? Get in touch

This Privacy Policy explains how MACRES TRAINING CONSULTANCY SERVICES (“macres house,” “we,” “us” or “our”), a sole proprietorship registered in the Republic of the Philippines with principal office at 4F Commerce & Industry Plaza, 1100 Park Avenue, Upper McKinley, Taguig City 1634, collects, uses, discloses and protects personal data when you visit www.macres-house.com, contact us, receive a proposal, or work with us as a client or supplier.

We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and, where it applies to our work in Singapore, the Personal Data Protection Act 2012 (PDPA). This policy does not cover third-party websites or tools we link to; they follow their own privacy policies.

1. Collection of Personal Data

Personal data you provide to us directly. When you use the form on our website, we collect your name, work email, company website, the markets you are interested in, any files you attach and your message. When you buy a plan through our checkout page, we also collect your company name, team size, preferred pre-sprint call date, and the name and role of the person who will run the system. If you give us details about a colleague, please make sure they are aware. When you work with us, we also collect contact details of your team, billing details, and the briefs, materials and content you share for the engagement, as well as what you tell us in emails, calls and meetings.

Personal data we collect automatically. Our website sets two essential cookies, described in Section 4. Our hosting provider also keeps standard server logs, such as IP address, browser type and pages visited, for security. We do not use advertising trackers or analytics cookies on our website.

Personal data from third parties and public sources. When preparing for a call or proposal, we may review publicly available business information, such as your company website or professional profiles. If a partner refers you to us, they may share your contact details with us.

Sensitive personal information. We do not ask for sensitive personal information, such as health data or government ID numbers. Please do not include it in messages or materials unless an engagement specifically requires it and we have agreed in writing how it will be handled.

2. Uses of Personal Data

  • To reply to your enquiry and arrange calls.
  • To prepare proposals, deliver the Services, and communicate with you during an engagement.
  • To issue invoices, receive payments and keep business and tax records.
  • To keep our website, systems and your information secure.
  • To meet our legal and regulatory obligations and to protect our legal rights.

We do not sell, rent or trade personal data. The legal basis for each use is set out in Section 10.

3. Recipients and Third-Party Data Sources

Service providers. We use trusted tools to run our business and deliver the Services, including workspace, email, AI assistant, design, video, voice and website tools. Our core providers are listed below. Each handles data under its own privacy policy, and this list may change as our tools change.

Payments. Payments are processed by Wise and PayPal. We do not receive or store your full card details or bank login details.

AI tools. Our systems use AI assistants and agents to research, draft and organise work. When we run the system with you, for example under the RUN plan, a person at macres house reviews outputs before they are delivered or published. When your team runs the system itself, for example under the BUILD plan, your team is responsible for reviewing outputs before using or publishing them. We do our best to limit what we share with these tools: we enter only the information a task needs, we avoid entering sensitive personal information, and where a tool offers plans or settings that exclude customer data from model training, we use them.

However, these tools are owned and operated by third parties. How they process and store data, train or update their models, release new models or features, and change their terms is outside our control, and we cannot guarantee it. Their own privacy policies, linked above, apply.

Tools you ask us to connect. If you ask us to connect or work inside a tool you use, such as your own CRM, social media accounts or website platform, that tool’s own terms and privacy policy apply. We confirm these tools with you in the Signed Proposal before connecting them.

Partners, with your consent. If you ask us to introduce you to a partner, for example for lead generation, events or media, we share only what is needed and only after you agree.

Authorities and legal requirements. We may disclose personal data when required by law, for example to the Bureau of Internal Revenue, or to protect our legal rights.

4. Rights and Choices

Your rights. Depending on where you are, you may have the right to be informed about how we use your personal data, to access it, to correct it, to object to its processing, to have it erased or blocked, to receive it in a portable format, and to withdraw your consent. Section 11 sets out the rights under Philippine and Singapore law.

How to make a request. Email privacyandlegal@macreshouse.com. We may ask you to confirm your identity, and we aim to respond within 30 days. Some requests may be limited where we must keep information to meet legal obligations.

Cookies. Our website uses only essential cookies: session_id, which keeps your session working, and frontend_lang, which remembers your language. You can block or delete cookies in your browser settings, but parts of the website may not work as intended.

5. Data Transfers

Some of our service providers store or process data outside the Philippines, including in Singapore, the United States and the European Union. When this happens, we choose providers with recognised security and privacy practices and take reasonable steps to make sure your personal data receives a comparable level of protection.

6. Data Retention, Data Lifecycle, and Security Controls

How long we keep personal data.

  • Enquiries that do not become engagements: up to 2 years after our last contact.
  • Working files, briefs and content: up to 2 years after the engagement ends, or sooner if you ask us to delete them.
  • Invoices, receipts and accounting records: 5 years, as required by Philippine tax law.
  • Signed proposals and contracts: up to 10 years, the period during which claims on written contracts may be brought under the Philippine Civil Code.

After these periods, we delete or anonymise the information.

Security controls. We use reasonable organisational, physical and technical measures to protect personal data, including limiting access to people who need it, using secure, password-protected accounts with two-factor authentication where available, and working within reputable platforms rather than local copies wherever possible. No system is completely secure, but we work to prevent unauthorised access, loss or misuse.

Data breaches. If a breach affects your personal data and is likely to cause you harm, we will notify you and, where required, the relevant authority within 72 hours of becoming aware of it, and tell you what we are doing about it.

7. Children

Our Services are for businesses. We do not knowingly collect personal data from anyone under 18.

8. Changes to Our Privacy Policy

We may update this policy from time to time. The latest version will always be on this page with its effective date, and significant changes will be shared with active clients.

9. Contact Information

For questions about this policy or your personal data, please contact our Data Protection Officer:

MACRES TRAINING CONSULTANCY SERVICES
Data Protection Officer: Nathalia Biancci Jardin
4F Commerce & Industry Plaza, 1100 Park Avenue, Upper McKinley, Taguig City 1634
Email: privacyandlegal@macreshouse.com

10. Legal Bases for Processing

PurposeType of dataLegal basis
Replying to enquiries and arranging callsName, work email, company website, markets, message, attachmentsConsent; steps you request before entering a contract
Preparing proposals and delivering the ServicesContact details of you and your team, briefs, materials and content, communicationsPerformance of a contract
Invoicing, payments and record-keepingName, company, billing and payment detailsLegal obligation; performance of a contract
Website operation and securityEssential cookies, IP address, browser type, pages visitedLegitimate interests in running and protecting our website
Processing website purchases and paymentsName, company, checkout answers, payment confirmationPerformance of a contract
Introductions to partnersName, contact details, the need you describeConsent
Meeting legal requirements and protecting our rightsAny personal data relevant to the request or claimLegal obligation; legitimate interests

11. Regional Supplemental Disclosures

Philippines. Under the Data Privacy Act of 2012, you have the right to be informed, to access, to object, to erasure or blocking, to rectification, to data portability, and to be indemnified for damages. You may also file a complaint with the National Privacy Commission (privacy.gov.ph). We notify the National Privacy Commission of personal data breaches where the law requires it.

Singapore. Under the Personal Data Protection Act 2012, you may ask for access to and correction of your personal data, and you may withdraw your consent to its collection, use or disclosure at any time by contacting us. Withdrawing consent may affect our ability to provide the Services. You may also contact the Personal Data Protection Commission (pdpc.gov.sg).