Privacy Policy

This Privacy Policy explains how MACRES TRAINING CONSULTANCY SERVICES (“macres house,” “we,” “us” or “our”), a sole proprietorship registered in the Republic of the Philippines with principal office at 4F Commerce & Industry Plaza, 1100 Park Avenue, Upper McKinley, Taguig City 1634, collects, uses, discloses and protects personal data when you visit www.macres-house.com, contact us, receive a proposal, or work with us as a client or supplier.

We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and, where it applies to our work in Singapore, the Personal Data Protection Act 2012 (PDPA). This policy does not cover third-party websites or tools we link to; they follow their own privacy policies.

1. Collection of Personal Data

Personal data you provide to us directly. When you use the form on our website, we collect your name, work email, company website, the markets you are interested in, any files you attach and your message. When you buy a plan through our checkout page, we also collect your company name, team size, preferred pre-sprint call date, the name and role of the person who will run the system, where your company is billed and its country, and, for companies billed in the Philippines, its Tax Identification Number (TIN). When you pay a monthly invoice through our payment page, we collect your name, work email, company name, the invoice number, where your company is billed and its country, and, for the Philippines, its TIN. If you give us details about a colleague, please make sure they are aware. When you work with us, we also collect contact details of your team, billing details, and the briefs, materials and content you share for the engagement, as well as what you tell us in emails, calls and meetings.

Personal data we collect automatically. When you visit our website, we collect information about how it is used: pages visited, the website or link that brought you here, approximate location (country and city), device and browser type, and how you interact with pages. We use Vercel Web Analytics and Vercel Speed Insights, which count visits and measure loading speed without cookies. If you accept analytics cookies, we also use Google Analytics (see Section 4). Our hosting provider also keeps standard server logs, such as IP address, browser type and pages visited, for security. We use this information only to understand and improve our website and how people find it in search, including through Google Search Console. We do not use advertising trackers, and we do not sell this information or use it to identify you.

Personal data from third parties and public sources. When preparing for a call or proposal, we may review publicly available business information, such as your company website or professional profiles. If a partner refers you to us, they may share your contact details with us.

Sensitive personal information. We do not ask for sensitive personal information, such as health data or government ID numbers. The one exception is the TIN of companies billed in the Philippines, which we ask for at checkout and on our payment page only to issue official receipts and keep the tax records Philippine law requires; it is kept with our invoices and accounting records (see Section 6). Please do not include it in messages or materials unless an engagement specifically requires it and we have agreed in writing how it will be handled.

2. Uses of Personal Data

• To reply to your enquiry and arrange calls.
• To understand how our website is used and how people find it, and to improve its content, speed and search visibility.
• To prepare proposals, deliver the Services, and communicate with you during an engagement.
• To issue invoices, receive payments and keep business and tax records.
• To keep our website, systems and your information secure.
• To meet our legal and regulatory obligations and to protect our legal rights.

We do not sell, rent or trade personal data. The legal basis for each use is set out in Section 10.

3. Recipients and Third-Party Data Sources

Service providers. We use trusted tools to run our business and deliver the Services, including workspace, email, AI assistant, design, video, voice and website tools. Our core providers are listed below. Each handles data under its own privacy policy, and this list may change as our tools change.

• Vercel (website hosting, visit statistics and speed measurement, without cookies): vercel.com/legal/privacy-policy
• Odoo (checkout, CRM and invoicing, hosted in Singapore): odoo.com/privacy
• Google Analytics (website visit statistics, only if you accept cookies): policies.google.com/privacy
• Google Search Console (how our website appears in Google Search): policies.google.com/privacy
• Google Workspace (email, documents and storage): policies.google.com/privacy
• Notion (client workspaces): notion.com/trust/privacy-policy
• Scheduled (publishing client posts to their social media accounts from the workspace): scheduled.so/policy
• Anthropic, Claude (AI assistant and agents): anthropic.com/legal/privacy and Claude Privacy and Legal
• OpenAI, ChatGPT (AI assistant): openai.com/policies/privacy-policy
• Perplexity (research): perplexity.ai/hub/legal/privacy-policy
• Canva (design): canva.com/policies/privacy-policy
• ElevenLabs (voice): elevenlabs.io/privacy-policy
• Higgsfield (video and image generation): higgsfield.ai/privacy-policy
• Webflow (websites): webflow.com/legal/privacy
• Wise (bank transfer and Wise account payments): wise.com privacy policy
• PayPal (card and PayPal account payments): paypal.com privacy

Payments. Payments are processed by Wise and PayPal. We do not receive or store your full card details or bank login details.

AI tools. Our systems use AI assistants and agents to research, draft and organise work. When we run the system with you, for example under the RUN plan, a person at macres house reviews outputs before they are delivered or published. When your team runs the system itself, for example under the BUILD plan, your team is responsible for reviewing outputs before using or publishing them. We do our best to limit what we share with these tools: we enter only the information a task needs, we avoid entering sensitive personal information, and where a tool offers plans or settings that exclude customer data from model training, we use them.

However, these tools are owned and operated by third parties. How they process and store data, train or update their models, release new models or features, and change their terms is outside our control, and we cannot guarantee it. Their own privacy policies, linked above, apply.

Tools you ask us to connect. If you ask us to connect or work inside a tool you use, such as your own CRM, social media accounts or website platform, that tool’s own terms and privacy policy apply. We confirm these tools with you in the Signed Proposal before connecting them.

Partners, with your consent. If you ask us to introduce you to a partner, for example for lead generation, events or media, we share only what is needed and only after you agree.

Authorities and legal requirements. We may disclose personal data when required by law, for example to the Bureau of Internal Revenue, or to protect our legal rights.

4. Rights and Choices

Your rights. Depending on where you are, you may have the right to be informed about how we use your personal data, to access it, to correct it, to object to its processing, to have it erased or blocked, to receive it in a portable format, and to withdraw your consent. Section 11 sets out the rights under Philippine and Singapore law.

How to make a request. Email privacyandlegal@macreshouse.com. We may ask you to confirm your identity, and we aim to respond within 30 days. Some requests may be limited where we must keep information to meet legal obligations.

Cookies. We ask before setting any non-essential cookie. If you click Accept in our cookie banner, Google Analytics sets _ga and _ga_<ID> cookies, kept for up to 2 years, to count visits and understand how the site is used. If you click Decline, or make no choice, Google Analytics does not run. You can change your choice at any time with Cookie settings at the bottom of every page. Our checkout and payment pages (payments.macres-house.com) use two essential cookies: session_id, which keeps your session working, and frontend_lang, which remembers your language. You can also block or delete cookies in your browser settings; blocking essential cookies may stop the checkout from working.

5. Data Transfers

Some of our service providers store or process data outside the Philippines, including in Singapore, the United States and the European Union. When this happens, we choose providers with recognised security and privacy practices and take reasonable steps to make sure your personal data receives a comparable level of protection.

6. Data Retention, Data Lifecycle, and Security Controls

How long we keep personal data.

• Enquiries that do not become engagements: up to 2 years after our last contact.
• Working files, briefs and content: up to 2 years after the engagement ends, or sooner if you ask us to delete them.
• Invoices, receipts and accounting records: 5 years, as required by Philippine tax law.
• Signed proposals and contracts: up to 10 years, the period during which claims on written contracts may be brought under the Philippine Civil Code.

After these periods, we delete or anonymise the information.

Security controls. We use reasonable organisational, physical and technical measures to protect personal data, including limiting access to people who need it, using secure, password-protected accounts with two-factor authentication where available, and working within reputable platforms rather than local copies wherever possible. No system is completely secure, but we work to prevent unauthorised access, loss or misuse.

Data breaches. If a breach affects your personal data and is likely to cause you harm, we will notify you and, where required, the relevant authority within 72 hours of becoming aware of it, and tell you what we are doing about it.

7. Children

Our Services are for businesses. We do not knowingly collect personal data from anyone under 18.

8. Changes to Our Privacy Policy

We may update this policy from time to time. The latest version will always be on this page with its effective date, and significant changes will be shared with active clients.

9. Contact Information

For questions about this policy or your personal data, please contact our Data Protection Officer:

MACRES TRAINING CONSULTANCY SERVICES
Data Protection Officer: Nathalia Biancci Jardin
4F Commerce & Industry Plaza, 1100 Park Avenue, Upper McKinley, Taguig City 1634
Email: privacyandlegal@macreshouse.com

10. Legal Bases for Processing

11. Regional Supplemental Disclosures

Philippines. Under the Data Privacy Act of 2012, you have the right to be informed, to access, to object, to erasure or blocking, to rectification, to data portability, and to be indemnified for damages. You may also file a complaint with the National Privacy Commission (privacy.gov.ph). We notify the National Privacy Commission of personal data breaches where the law requires it.

Singapore. Under the Personal Data Protection Act 2012, you may ask for access to and correction of your personal data, and you may withdraw your consent to its collection, use or disclosure at any time by contacting us. Withdrawing consent may affect our ability to provide the Services. You may also contact the Personal Data Protection Commission (pdpc.gov.sg).