Privacy Policy

Pursuant to Chapter III of the Republic Act 10173 “An Act Protecting Individual Personal Information in Information and Communications Systems in the Government and the Private Sector, Creating for this Purpose a National Privacy Commission, and for Other Purposes” (hereinafter also referred to as the “Data Privacy Act of 2012”) and its Implementing Rules and Regulations (IRR), we hereby provide the informative notice regarding the processing of personal data provided by you and/or collected via the website www. mbe.ph.

  1. Personal Information Controller

    Your Personal Data collected via the website will be processed by MBE PH.

    MBE PH – that is the entrepreneur that has entered into a franchising agreement with Mail Boxes Etc. and to which the Customer has requested the provision of one or more of the following services of the MBE franchising network such as; (a) shipment services; (b) domiciliation services; (c) graphic and printing services (hereinafter, “MBE Services”).

  1. Categories of personal information processed
    The following Personal Data provided by you (hereinafter the “Personal Data”) may be processed via the Website:

    • the IP address;
    • navigation data on the Websites;
    • information on the browser and on the device;
    • information collected through cookies, pixel tags, provided by you and without disclosing your specific identity;
    • demographic information and other information provided by you and without disclosing your specific identity;
    • information that has been aggregated in such a way as to no longer reveal your specific identity.

    Moreover, the following Personal Data provided by you may be processed if you decide to interact with the Websites:

    • Name, surname, email address, telephone number and company, if you send us messages.
    • Name and email if you use the chat box.
    • If you create an account and use our services, name, surname, email, address, company, telephone number, VAT number, your login account details and all the information related to the service you intend to purchase (e.g. size of the package, price, information on the relevant addressee).
    • Name, surname, email, telephone number, city, CV, if you ask to be contacted in order to obtain information on how to commence your business with MBE.
    • Your physical position, if you ask the website for the MBE centers closer to your position.
  1. Purposes of processing Personal DataThe Controller will process your Personal Data for the following purposes:
    • to allow you to benefit from the features offered by the Websites, and more in detail:
      • to chat with / send a message to MBE centers through the forms on the website.
    • to provide you with the services you request, and more in detail:
      • to create your personal account;
      • to find the MBE centers closer to your current location;
      • to reserve your products delivery services in a specific MBE center selected by you, and to process payments direct to the specific MBE center above, manage potential complaints and communicate with you about the above (in this case your Personal Data will be transmitted to the specific MBE center selected).
    • to conduct studies and surveys, and more in detail:
      • to send you, by any means of communication (fax, e-mail, text message, multimedia messaging service, paper-based mail, operator-assisted phone calls), advertising material and literature of a promotional nature or in any case involving commercial solicitation pertaining to services, products or discounts offered by the Controller, as well as for conducting studies and surveys of the market, and elaborating related statistics;
  1. Legal basis for processing Personal Data

    The processing of your Personal Data for the purposes referred to in Section 3, a. is carried out in order to comply with your request and on the basis of a legitimate interest of the Controller, which business is inevitably linked to the quality of the services offered by its Websites, to the users’ interaction experience and to the satisfaction of their expectations. Any refusal to provide the Personal Data for the purposes set out above will make it impossible to send your contact request to the Controller and/or the selected MBE center.

    The processing of Personal Data for the purposes referred to in Section 3, b., is necessary in order to perform the pre-contractual and contractual measures adopted upon your request when you ask for the services offered by the Websites. Any refusal to provide the Personal Data for the purposes set out above will make it impossible to use and enjoy the services above.

    The processing of your Personal Data for the purposes referred to in Section 3, c., is optional and is based on your freely given consent. Any refusal to provide the Personal Data for the purposes set out above will have the sole consequence of making it impossible for the Controller, the MBE Group and/or the selected MBE center to send you advertising and promotional messages, to conduct studies and surveys of the market, and elaborating related statistics.

    In case of processing in the event of any potential corporate events (sale of the company or business units), due diligence or in the case of defense of a legal claim and the related preliminary activities, such processing will be carried out on the basis of legitimate interests of the Controller in the continuation of its commercial activities and for the protection of its rights.

  2. Modalities of processing of Personal Data

    The processing of your personal data will be carried out with the assistance of both automated instruments and on paper suitable to guarantee the security and confidentiality of Personal Data. Processing herein means to collect, consult, store, manage, extract and transmit the Personal Data.

  3. Recipients of Personal Data

    The Personal Data will be disclosed to the persons authorized for the processing within the Controller’s staff.

    The Personal Data may be disclosed by the Controller solely and exclusively for the purposes indicated and where necessary, to the following categories of subjects:

    • employees, agents or collaborators of MBE PH that are located within the territory of the Philippines and/or country of destination of the MBE service;
    • subjects located within the territory of the Philippines and/or country of destination of the MBE service of whom or which MBE PH avails itself for profiling and marketing activities;
    • subsidiaries or associated companies
    • third parties with which – from time to time – commercial partnership agreements and/or common initiatives, campaigns and projects will be developed, which are located within the territory of the Philippines and/or country of destination of the MBE service and operate in the following industries:
      • information and other computer services (data processing, hosting and related activities; web portals; other information service activities);
      • (i) land transport and pipeline transport (rail freight transport; road freight transport and moving services); (ii) maritime and waterborne transport (maritime and coastal freight transport; inland waterway transport of goods); (iii) air transport (air freight and space transport); (iv) warehousing and transport support activities (warehousing and storage; transport support activities); (v) postal services and courier activities (postal activities with universal service obligation; other postal and courier activities);
      • telecommunications (land telecommunications; mobile telecommunications; satellite telecommunications; other telecommunications activities);
      • in advertising and market research (advertising; market research and opinion polling);
    • persons, companies or professional offices located within the territory of the Philippines and/or country of destination of the MBE service that engage in activities of assistance and consultation in accountancy, administrative, legal, tax and financial matters;
    • subjects, bodies or authorities to whom or which the communication of your Personal Data is mandatory by virtue of provisions of law or orders issued by authorities.

    Entities belonging to the categories listed above, may act, as the case may be, as data processors (and in this case they will receive appropriate instructions from the Controller) or as autonomous data controllers. In the latter case, the Personal Data will be communicated only with the express consent of the data subjects, except where the communication is mandatory or necessary pursuant to the applicable law or for the pursue of purposes for which the consent from the data subject is not required.

    The Controller also have the right to transfer your Personal Data to third countries. Transfers of Data outside the Philippines are subject to the Data Privacy Act of 2012, and are only made in respect of countries that ensure an adequate level of personal data protection, where adequate safeguards have been adopted, provided that the data subjects have enforceable rights and effective judicial remedies.

  1. Cookies

    The Controller may use “cookies” within the Websites (i.e. text files sent and stored on users hard disk to be then retransmitted during the next visit of the same Websites), or other similar tools in order to facilitate the use of services requested by the user himself, as well as the user’s collection of information, the navigation of the Websites and the choices and preferences expressed on products/services. The user may revoke at any time the authorization granted and oppose to the use of cookies by selecting the appropriate settings on its Internet browser.

  2. Retention of Personal Data

    Personal Data will be stored, in compliance with the applicable law, for a term not exceeding what is necessary to pursue the purposes for which they are processed, save for the right to withdraw the consent at any time where it constitutes the legal basis for the processing.

    The criteria for determining the storage period of the Personal Data takes into account the allowed processing period and the applicable laws on the statute of limitation of rights and legitimate interests of the data subject where they are the applicable legal basis for processing.

    Subsequently, the Personal Data will be deleted, aggregated or anonymized.

  3. Rights of the data subject

    At any time, you will be entitled to:

    Pursuant to Section 16 of the Data Privacy Act of 2012, as well as pursuant to Section 34 (a), (b), (c) (d), (e) and (f) of its IRR, the Client is entitled to:

    • the right to be informed of the collection, procedures, period, scope and methods used in personal data processing, as well as the existence of your rights including the right to access, correction, and object to the processing, as well as the right to lodge a complaint before the National Privacy Commission;
    • the right to apply to the Data Process Controller for reasonable access to the personal data, the rectification or deletion of the same or restriction on the processing as concerns you, and to object to such processing, or to revoke consent, in addition to the right to portability of the data;
    • the right to lodge a complaint with the National Privacy Commission, following the procedures and instructions published on the official website of the same national privacy authority at ;
    • any rectification or deletion or restriction on processing done at your request, unless it proves to be impossible or entails a disproportionate effort, will be communicated by the Personal Information Controller (s) to each of the recipients to whom or which your personal data have been transmitted. The Personal Information Controller (s) may communicate such recipients to you should you expressly so request.

    The Customer shall also have the right to withdraw the consent to the processing of personal data (where given) at any time, without prejudice to the lawfulness of the processing based on consent before its withdrawal. Customer will have the possibility to opt-out from marketing via email by clicking on the relevant “unsubscribe” link.

    Should Customer request more than one copy of personal data or in cases of excessive or unfounded requests, the data controller may: (i) charge a reasonable expense, considering the administrative costs incurred to fulfil the request; or (ii) refuse to fulfil the request. In these cases, the data controller will inform the Customer of the costs before fulfilling the request.

    The data controller may ask for further information before fulfilling the requests if it needs to verify the identity of the person who has made them.

    In any case, the data controller is interested in knowing the reasons for the complaint and asks the Customer to use the contact methods below before turning to the authorities, in order to prevent and resolve any disputes, amicably and promptly, with the greatest courtesy, professionalism and discretion.

    The exercise of the rights is not subject to any formal restriction and is free of charge. For ease of reference, we reproduce below the text of Section 16 of the National Privacy Act of 2012:

    SEC. 16. Rights of the Data Subject. – The data subject is entitled to:

    • Be informed whether personal information pertaining to him or her shall be, are being or have been processed;
    • Be furnished the information indicated hereunder before the entry of his or her personal information into the processing system of the personal information controller, or at the next practical opportunity:
      1. Description of the personal information to be entered into the system;
      2. Purposes for which they are being or are to be processed;
      3. Scope and method of the personal information processing;
      4. The recipients or classes of recipients to whom they are or may be disclosed;
      5. Methods utilized for automated access, if the same is allowed by the data subject, and the extent to which such access is authorized;
      6. The identity and contact details of the personal information controller or its representative;
      7. The period for which the information will be stored; and
      8. The existence of their rights, i.e., to access, correction, as well as the right to lodge a complaint before the Commission.

      Any information supplied or declaration made to the data subject on these matters shall not be amended without prior notification of data subject: Provided, That the notification under subsection (b) shall not apply should the personal information be needed pursuant to a subpoena or when the collection and processing are for obvious purposes, including when it is necessary for the performance of or in relation to a contract or service or when necessary or desirable in the context of an employer-employee relationship, between the collector and the data subject, or when the information is being collected and processed as a result of legal obligation;

    • Reasonable access to, upon demand, the following:
      1. Contents of his or her personal information that were processed;
      2. Sources from which personal information were obtained;
      3. Names and addresses of recipients of the personal information;
      4. Manner by which such data were processed;
      5. Reasons for the disclosure of the personal information to recipients;
      6. Information on automated processes where the data will or likely to be made as the sole basis for any decision significantly affecting or will affect the data subject;
      7. Date when his or her personal information concerning the data subject were last accessed and modified; and
      8. The designation, or name or identity and address of the personal information controller;
    • Dispute the inaccuracy or error in the personal information and have the personal information controller correct it immediately and accordingly, unless the request is vexatious or otherwise unreasonable. If the personal information have been corrected, the personal information controller shall ensure the accessibility of both the new and the retracted information and the simultaneous receipt of the new and the retracted information by recipients thereof: Provided, that the third parties who have previously received such processed personal information shall he informed of its inaccuracy and its rectification upon reasonable request of the data subject;
    • Suspend, withdraw or order the blocking, removal or destruction of his or her personal information from the personal information controller’s filing system upon discovery and substantial proof that the personal information are incomplete, outdated, false, unlawfully obtained, used for unauthorized purposes or are no longer necessary for the purposes for which they were collected. In this case, the personal information controller may notify third parties who have previously received such processed personal information; and
    • Be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information.

    For more information about the provisions contained in Section 34 (a)(b)(c)(d)(e) and (f) of its IRR, click on the following link: https://www.privacy.gov.ph/wp-content/uploads/2016/07/updated-draft-July-12-2016.pdf

  1. Contacts for the exercise of the rights of the data subject and for further information

    With respect to the exercise of the rights in relation to the purposes specified in paragraph 3.1 above and/or to obtain any type of information you may need in relation to the MBE PH pursuant to this privacy notice, you may send a written communication to the MBE PH registered office or an email to mbe001@mbe.ph.

    With respect to the exercise of the rights in relation to the purposes specified in paragraph 3.2 above and/or to obtain any type of information you may need in relation to MBE PH pursuant to this privacy notice, you may send a written communication to MBE PH, with registered office in 1953-55 M. Adriatico St., Malate, Manila or an email to mbe001@mbe.ph.

  2. Changes to this privacy notice

    This privacy notice will be valid as of the date indicated below. It is advisable to regularly monitor this privacy notice by visiting the Websites in order to keep up to date with any future changes.