Privacy Policy

Last Updated: October 6, 2026

MPM Consulting Services Inc. (“MPM,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data entrusted to us.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit our websites, communicate with us, use our software and online services, or otherwise interact with MPM.

We process personal data in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012, its Implementing Rules and Regulations, applicable issuances of the National Privacy Commission (NPC), and other applicable Philippine laws and regulations.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed through MPM’s websites and online services, including, where applicable:

• MPM Consulting Services website;
• MPM Accounting;
• MPM Payroll;
• MPM Payroll Employee Self-Service (ESS);
• MPM Projects;
• online registration, inquiry, support, and contact forms;
• webinars, demonstrations, newsletters, and other communications; and
• other online services operated by MPM that refer or link to this Privacy Policy.

Certain engagements with MPM, including outsourced accounting, bookkeeping, tax preparation, payroll, business registration, or other professional services, may involve additional privacy terms, agreements, or notices applicable to the particular engagement.

2. Our Role in Processing Personal Data

Depending on the circumstances, MPM may act either as a Personal Information Controller (PIC) or a Personal Information Processor (PIP) under the Data Privacy Act.

When MPM Acts as a Personal Information Controller

MPM generally acts as a Personal Information Controller when we determine why and how personal data will be processed, such as when we process information relating to:

• website visitors;
• prospective customers and inquiries;
• MPM account administrators and subscribers;
• webinar or event participants;
• job applicants;
• suppliers and business contacts; and
• persons communicating directly with MPM.

When MPM Acts as a Personal Information Processor

For some of our software and services, our customers determine what personal data is entered into and processed through the service.

For example, a company using MPM Payroll may enter and process personal data concerning its employees. In these circumstances, the customer generally acts as the Personal Information Controller and MPM processes the data on the customer’s behalf as a Personal Information Processor.

If you are an employee or other individual whose information was provided to MPM by your employer or another MPM customer, requests concerning your personal data may need to be directed to that organization as the Personal Information Controller. MPM will provide reasonable assistance to our customers in fulfilling their obligations under applicable privacy laws.

3. Personal Data We May Collect

The personal data we collect depends on how you interact with MPM.

Information You Provide Directly

This may include:

• name;
• email address;
• telephone or mobile number;
• company or business name;
• business address;
• job title or position;
• account and login information;
• information submitted through inquiry, registration, support, or contact forms;
• communications with our support or customer service teams;
• information submitted when registering for webinars, demonstrations, or events;
• job application information, including resumes and employment-related information; and
• other information that you voluntarily provide to us.

Information Processed Through MPM Software

Customers using MPM software may process personal data relating to their employees, customers, suppliers, contractors, or other persons.

Depending on the MPM service being used, this may include information such as:

• employee identification and employment information;
• attendance and timekeeping records;
• payroll, salary, earnings, deductions, and benefits information;
• government identification or membership information;
• tax-related information;
• leave and scheduling information;
• customer and supplier information;
• accounting and transaction records;
• documents uploaded by users; and
• other information necessary for accounting, payroll, HR, tax, or related business processes.

The particular MPM customer using the service is responsible for determining what information it collects and enters into the system and for ensuring that it has an appropriate lawful basis for doing so.

Information Collected Automatically

When you access our websites or online services, certain technical information may be collected automatically, including:

• Internet Protocol (IP) address;
• browser type and version;
• device and operating system information;
• date and time of access;
• pages or features accessed;
• referring pages or websites;
• login and system activity; and
• other technical information necessary for security, troubleshooting, and operation of our services.

4. How We Use Personal Data

Depending on our relationship with you, we may process personal data for purposes including:

• providing and operating MPM’s products and services;
• creating and administering user accounts;
• processing customer registrations and subscriptions;
• responding to inquiries and requests;
• providing customer support;
• conducting product demonstrations and onboarding;
• communicating important service, account, security, or administrative information;
• processing accounting, payroll, HR, tax, or other information on behalf of our customers;
• maintaining the security and integrity of our systems;
• detecting, investigating, and preventing fraud, abuse, unauthorized access, and security incidents;
• troubleshooting and improving our products and services;
• maintaining business, accounting, and regulatory records;
• complying with legal, regulatory, tax, and government requirements;
• establishing, exercising, or defending legal claims;
• conducting webinars, events, and educational activities;
• evaluating job applications;
• sending product information, educational content, announcements, or marketing communications where permitted by law; and
• other purposes compatible with the circumstances in which the information was collected.

We endeavor to collect and process only personal data that is reasonably necessary and proportionate to the stated purpose.

5. Basis for Processing Personal Data

Depending on the circumstances, MPM may process personal data based on one or more grounds permitted under applicable law, including:

• your consent;
• the performance of a contract or steps necessary to enter into a contract;
• compliance with a legal obligation;
• protection of lawful rights and interests;
• legitimate business interests that are consistent with applicable privacy laws; and
• other grounds permitted under the Data Privacy Act and applicable laws and regulations.

Where processing is based on consent, you may withdraw your consent, subject to applicable legal and contractual limitations and the consequences of such withdrawal.

6. Cookies and Similar Technologies

Our websites and online services may use cookies and similar technologies to operate essential website functions, maintain sessions, remember preferences, improve security, understand how our websites and services are used, and improve user experience.

Some cookies may be necessary for the proper operation and security of our services.

Where required, users may be provided with options regarding non-essential cookies. You may also configure your browser to restrict or block cookies, although doing so may affect certain website or application features.

7. Disclosure and Sharing of Personal Data

MPM does not sell personal data.

We may disclose or provide access to personal data when reasonably necessary to:

• employees and authorized personnel who require access to perform their responsibilities;
• service providers that assist us in hosting, infrastructure, communications, security, customer support, analytics, or other business operations;
• professional advisers such as accountants, auditors, or legal advisers where necessary;
• government agencies, regulators, courts, or law enforcement authorities when required or permitted by law;
• parties involved in a corporate transaction, such as a merger, acquisition, restructuring, or sale of business assets, subject to appropriate safeguards; or
• other parties when authorized by the data subject or otherwise permitted by law.

Service providers that process personal data on our behalf are expected to process such information only for authorized purposes and subject to appropriate confidentiality, security, and data protection obligations.

8. International Processing and Data Transfers

Some technology and infrastructure providers used in delivering our online services may operate facilities or process information outside the Philippines.

Where personal data is transferred or processed outside the Philippines, MPM takes reasonable steps to ensure that appropriate contractual, organizational, and technical safeguards are in place and that the personal data receives a level of protection consistent with applicable Philippine privacy requirements.

9. Data Retention

We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, provide our services, comply with legal and regulatory requirements, resolve disputes, enforce agreements, maintain appropriate business records, and protect legitimate business interests.

Retention periods may vary depending on the type of information, the service involved, contractual requirements, and applicable laws or regulations.

For customer data processed through MPM software, retention may also depend on the customer’s subscription, contractual arrangements, instructions, and applicable legal requirements.

When personal data is no longer required, we take reasonable measures to securely delete, anonymize, or otherwise dispose of it in accordance with applicable policies and legal requirements.

10. Security of Personal Data

MPM implements reasonable and appropriate organizational, physical, and technical measures designed to protect personal data against accidental or unlawful destruction, alteration, loss, unauthorized disclosure, unauthorized access, misuse, and other unlawful processing.

These measures may include, where appropriate:

• access controls and authorization procedures;
• authentication and account security measures;
• network and application security controls;
• system monitoring and logging;
• backups and recovery procedures;
• confidentiality obligations for personnel;
• restrictions on access to personal data; and
• periodic review and improvement of security practices.

No method of electronic transmission or storage can guarantee absolute security. Users are also responsible for protecting their account credentials and should immediately notify MPM if they suspect unauthorized access to their account.

11. Data Subject Rights

Under the Data Privacy Act of 2012, data subjects may have the right to:

• be informed about the collection and processing of their personal data;
• access personal data being processed about them;
• object to certain processing of their personal data;
• rectify inaccurate or incomplete personal data;
• request erasure or blocking of personal data when permitted by law;
• exercise the right to data portability, when applicable;
• claim damages where provided by law; and
• file a complaint with the National Privacy Commission if they believe their data privacy rights have been violated.

The exercise of these rights may be subject to conditions and limitations provided under applicable laws and regulations.

When MPM processes personal data solely on behalf of one of our customers, requests may need to be submitted to that customer as the Personal Information Controller.

12. Marketing Communications

Where permitted by law, we may use contact information to send information about MPM products, services, educational content, webinars, regulatory updates, or other information that may be relevant to our customers and prospective customers.

Recipients may opt out of marketing communications using the unsubscribe mechanism provided in the communication, when available, or by contacting us.

Opting out of marketing communications does not prevent us from sending transactional, security, support, billing, or other communications necessary to provide our services.

13. Publicly Submitted Content

If our websites allow users to submit comments, testimonials, reviews, or other content intended for publication, information identified as public may become visible to other website visitors.

Users should avoid including confidential, sensitive, or unnecessary personal information in content intended for public posting.

We may review submitted content before publication and may remove content that violates our policies or applicable law.

14. Children’s Privacy

MPM’s websites and business services are not intended for children to independently create accounts or purchase our business services.

However, some MPM services, particularly payroll and HR-related services, may process information relating to employees’ dependents or other individuals, including minors, when such information is lawfully provided by an MPM customer for legitimate employment, benefits, payroll, or compliance purposes.

In these circumstances, MPM processes such information according to the instructions of the relevant customer and applicable privacy requirements.

15. Third-Party Websites and Services

Our websites or applications may contain links to websites, applications, or services operated by third parties.

MPM is not responsible for the privacy practices of independent third parties. We encourage users to review the privacy notices of those services before providing personal information to them.

16. Personal Data Breaches and Security Incidents

MPM maintains procedures for responding to suspected or confirmed security incidents involving personal data.

Where a personal data breach requires notification under applicable law or regulations, MPM will take appropriate steps to notify affected parties and/or the National Privacy Commission within the applicable requirements.

When MPM acts as a Personal Information Processor, we will coordinate with the relevant customer or Personal Information Controller as appropriate.

17. Contacting Us and Exercising Your Privacy Rights

If you have questions about this Privacy Policy, wish to exercise your rights as a data subject, or have concerns regarding MPM’s processing of personal data, you may contact:

MPM Consulting Services Inc.
Unit 712 & 715, Vinia Residences & Versaflats
EDSA, Brgy. Philam
Quezon City, Metro Manila 1104
Philippines

For privacy-related inquiries and requests, please use our Contact Us page at:

https://mpm.ph/contact

When submitting your request, please indicate that your inquiry concerns Data Privacy so that it can be properly routed to the appropriate person.

We may request reasonable information to verify your identity before acting on a request involving personal data.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or legal and regulatory requirements.

The updated Privacy Policy will be published on our website together with its revised “Last Updated” date. Where changes are material and appropriate under the circumstances, we may provide additional notice through our websites, applications, email, or other reasonable means.

19. Effective Date

This Privacy Policy is effective as of October 6, 2026 and supersedes the previous website Privacy Policy effective February 6, 2013.