(Draft )PRIVACY POLICY

MaYo Holdings and Construction, Inc.

Effective Date: April 2026 | Pursuant to Republic Act No. 10173 (Data Privacy Act of 2012)

This Privacy Policy explains how MaYo Holdings and Construction, Inc. collects, uses, stores, and protects the personal information you provide when you visit our website or contact us through our online forms. We are committed to protecting your privacy in compliance with the Philippines Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations.

1. WHO WE ARE

Company Name: MaYo Holdings and Construction, Inc. (MHCI)

Website: www.mayoholdings.com (currently in deployment)

Head Office: 94 Barangay Milagrosa, Calamba City, 4027 Laguna, Philippines

Telephone: (02) 579-7814 | (049) 502-2117 | 502-3004

Email: [email protected]

Office Hours: Monday to Saturday, 8:00AM – 5:30PM

MHCI is an accredited construction and maintenance contractor serving the Philippines’ top commercial developers including SM Supermalls, Robinsons Land, and other major retail and commercial space operators nationwide.

2. WHAT PERSONAL DATA WE COLLECT

We collect personal data only when you voluntarily provide it to us. The types of data we may collect include:

2.1 Contact Form Submissions

When you fill out the ‘Request a Free Quote’ or ‘Send Us a Message’ form on our website, we collect:

• Your first and last name

• Your email address

• Your phone number (if provided)

• The service you are inquiring about

• The content of your message

This information is collected for the purpose of responding to your inquiry and routing it to the correct department within MHCI. Each submission is assigned a unique ticket number for tracking purposes.

2.2 Automatic Technical Data

When you visit our website, certain technical information is collected automatically by our hosting server and content management system:

• Your IP address (used for security and spam detection)

• Referring website (where you came from before visiting our site)

This data is collected automatically and is not linked to your personal identity unless required for security purposes.

2.3 Job Application Submissions

If you apply for a position through our Work With Us page, we may collect:

• Your name and contact details

• Your resume or CV

• Your qualifications and work experience

This information is sent directly to our HR Department at [email protected] and is used solely for recruitment purposes.

3. HOW WE USE YOUR PERSONAL DATA

MHCI uses the personal data you provide strictly for the following legitimate purposes:

Purpose	Legal Basis (RA 10173)
To respond to your service inquiry	Consent — you voluntarily submitted the form
To route your inquiry to the correct department head	Legitimate interest — efficient business operations
To assign and track inquiry ticket numbers	Legitimate interest — quality assurance and follow-up
To send you information about our services	Consent — you initiated contact
To process job applications	Consent — you applied for employment
To detect and prevent spam and fraud	Legitimate interest — security
To comply with legal obligations	Legal obligation — applicable Philippine laws

4. HOW YOUR INQUIRY IS ROUTED

When you submit a contact form and select a requested service, our system automatically routes your inquiry by email to the specific department responsible for that service. The departments and their corresponding email addresses are internal to MHCI and are not shared with third parties.

Your inquiry email will include:

• A unique ticket number in the subject line (e.g. ‘New Website Inquiry #1007’)

• Your name, email address, service requested, and message

• A Reply-To field set to your email address so our team can respond directly to you

Your personal data is never sold, rented, or shared with advertisers or third-party marketing services. It is used solely to respond to your inquiry.

5. COOKIES

Our website uses cookies — small text files stored on your device — for the following purposes:

5.1 Essential Cookies

These cookies are necessary for the website to function and cannot be disabled:

• Session cookie: Determines whether your browser accepts cookies. Contains no personal data and is discarded when you close your browser.

• Login cookies: Set when you log in to the website. Login cookies last for two days; screen option cookies last for one year. If you select ‘Remember Me’, your login persists for two weeks.

• Editorial cookie: Saved when you publish or edit content. Contains only the post ID and expires after one day.

5.2 Optional Cookies (Comment Forms)

If you leave a comment on our website and opt in, your name, email, and website may be saved in cookies for one year so you do not need to re-enter your details on future visits. These cookies are only set if you explicitly opt in.

5.3 Third-Party Cookies

Our website may embed content from third-party services (such as Google Maps). These services may set their own cookies and collect data about your interaction with embedded content. Please refer to their respective privacy policies:

• Google Maps / Google LLC — policies.google.com/privacy

• Gravatar (Automattic) — automattic.com/privacy

• Facebook (Meta Platforms) — facebook.com/policy.php (for any embedded Facebook content)

6. EMBEDDED CONTENT FROM OTHER WEBSITES

Pages on this site may include embedded content such as maps, videos, or social media posts. Embedded content from other websites behaves as if you have visited those websites directly. Those websites may:

• Collect data about you

• Use cookies and tracking technologies

• Monitor your interaction with the embedded content

• Track your interactions if you are logged in to those third-party services

MHCI does not control the data practices of third-party embedded services and encourages you to review their privacy policies directly.

7. WHO WE SHARE YOUR DATA WITH

MHCI does not sell, trade, or rent your personal information to third parties. We may share your data only in the following limited circumstances:

• Your inquiry is routed to the relevant MHCI department head based on the service you selected. No data leaves MHCI for this purpose. Internal departments:

• We use Google Gmail (via SMTP) to transmit inquiry emails. Google’s privacy policy applies to data transmitted through their servers: policies.google.com/privacy Email service provider:

• Visitor comments (if enabled) may be checked through Akismet, an automated spam detection service operated by Automattic. Spam detection:

• We may disclose your data if required by Philippine law, court order, or government authority under RA 10173 or other applicable legislation. Legal compliance:

• If you request a password reset, your IP address will be included in the reset email as a security measure. Password resets:

8. HOW LONG WE RETAIN YOUR DATA

Data Type	Retention Period	Reason
Contact form submissions	2 years	Business records and follow-up
Job application data	1 year	Recruitment consideration
Comment data (if any)	Indefinitely	Spam prevention and moderation
Technical/server logs	90 days	Security monitoring
User account data	Until account deletion requested	Account management
Cookies (session)	Until browser is closed	Essential functionality
Cookies (login)	2 days to 2 weeks	Authentication

9. YOUR RIGHTS UNDER RA 10173 (DATA PRIVACY ACT)

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data:

• You have the right to know that your personal data is being collected and how it will be used. Right to be Informed:

• You may request a copy of the personal data we hold about you at any time. Right to Access:

• You may request corrections to any inaccurate or incomplete personal data we hold. Right to Rectification:

• You may request that we delete your personal data. This right is subject to legal, administrative, or security obligations that require us to retain certain data. Right to Erasure:

• You may object to the processing of your personal data for direct marketing or other purposes based on legitimate interests. Right to Object:

• You may request an exported copy of the personal data you have provided to us in a structured, commonly used format. Right to Data Portability:

• You have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Right to Lodge a Complaint:

To exercise any of these rights, contact our Data Privacy Officer at: [email protected] Please include your full name, contact number, and a description of your request. We will respond within 15 business days as required by the NPC.

10. HOW WE PROTECT YOUR DATA

MHCI implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• All form submissions are transmitted using HTTPS encryption (SSL/TLS) once the site is deployed on the live domain.

• Email communications are sent through Google’s authenticated SMTP servers with DMARC and SPF compliance.

• Access to the WordPress admin panel is restricted to authorized MHCI IT personnel only.

• The website is protected by a firewall and malware scanning (Wordfence).

• Automated backups are taken daily and stored securely off-site.

• Plugins and WordPress core are kept updated to address security vulnerabilities.

Despite these measures, no internet transmission is completely secure. We encourage you not to share sensitive personal or financial information through our website contact form.

11. MEDIA AND UPLOADED IMAGES

If you upload images to our website, you should avoid uploading images with embedded location data (EXIF GPS data) included. Visitors to the website may be able to download and extract any location data from images on the website.

MHCI staff who upload project photos to the website are advised to strip EXIF data from images before uploading, particularly for images taken on mobile devices which may contain precise GPS coordinates of client sites.

12. CHILDREN’S PRIVACY

Our website and services are intended for business-to-business (B2B) clients and job applicants who are 18 years of age or older. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data through our website, please contact us immediately so we can delete it.

13. CHANGES TO THIS PRIVACY POLICY

MHCI reserves the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.

Material changes that significantly affect how we handle your data will be communicated through a prominent notice on our website homepage.

14. CONTACT US / DATA PRIVACY OFFICER

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

MaYo Holdings and Construction, Inc. Data Privacy Officer / MIS Department Address: 94 Barangay Milagrosa, Calamba City, 4027 Laguna, Philippines Email: [email protected] Telephone: (02) 579-7814 | (049) 502-2117 | 502-3004 Office Hours: Monday to Saturday, 8:00AM – 5:30PM

You also have the right to file a complaint with the National Privacy Commission of the Philippines:

• www.privacy.gov.ph Website:

• [email protected] Email:

• 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila, Philippines Address:

This Privacy Policy is compliant with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.

MaYo Holdings and Construction, Inc. | Calamba City, Laguna, Philippines | Effective April 2026