Privacy Notice

Last updated: October 2026

1. Who we are

VMB Business Consultancy Services ("VMB", "we", "us" or "our") is an accounting and business consultancy based at Unit 207, 2543 Tejeron Street, Bgy. 783, Santa Ana, Manila. We provide bookkeeping, tax filing and compliance, external audit, permits and licensing, business consulting, website development and related services.

For the personal information described in this notice, VMB is the personal information controller. This notice applies to information we collect through our website vmbbusiness.com (including the quote form), through Viber, Facebook Messenger, email and phone, and when you visit our office or engage our services.

2. Information we collect

When you use our website quote form

• Your full name, business name and business type
• Your mobile or Viber number and email address
• The service you need and any message you write to us
• Your consent to this Privacy Notice, and the date and time of your submission

When you message us on Viber or Facebook Messenger, email us or call us

• Your name or profile name, mobile number or account identifier, and email address
• The content of your messages and any photos, files or documents you send us

When you become a client

To deliver the services you engage us for, we collect the information and documents required for your case. Depending on the service, this may include:

• Identification and contact details of the business owner, partners, officers or authorized representatives
• Government-issued identification and numbers, such as Taxpayer Identification Number (TIN), SSS, PhilHealth and Pag-IBIG numbers
• Business registration documents, permits, licenses and filings with government agencies
• Financial records, books of accounts, receipts, invoices, bank statements and tax returns
• Employee information needed for payroll, contributions and employer registrations, when you engage us for these services

Some of this information (for example, government-issued identifiers and information about an individual's tax returns) is considered sensitive personal information under RA 10173. We collect it only when it is needed for the service you requested or required by law, and we handle it with extra care.

Technical information

Like most websites, our hosting provider automatically processes basic technical information when you visit our site or submit the form, such as your IP address, browser type and the pages requested. This is used to deliver the website, keep it secure and filter spam submissions.

Please send us only the information we ask for. If you give us personal information about other people (for example, your partners, officers or employees), please make sure you are authorized to share it with us.

3. How we use your information

• To respond to your inquiries sent through our website, Viber, Messenger, email or phone.
• To prepare quotations and the list of requirements for your case.
• To provide and manage our services, including preparing and filing documents with government agencies, keeping your books, coordinating audits and updating you on progress.
• To communicate with you about your inquiry or engagement, including reminders about deadlines and requirements related to the services you engaged us for.
• To comply with our legal obligations, such as record-keeping and reporting required by law and lawful requests from authorities.
• To protect our website and business, for example by filtering spam and preventing misuse.

We do not sell your personal information, and we do not use it for unrelated marketing without your consent.

4. Legal basis for processing

Under Sections 12 and 13 of RA 10173, we process your personal information on one or more of the following grounds:

• Your consent, such as when you tick the consent box on our quote form or send us your information to ask for a quotation;
• Contract: processing needed to take steps you ask for before engaging us (such as preparing a quotation) and to perform our engagement with you;
• Legal obligation: processing needed to comply with laws and regulations that apply to us or to the filings we make for you;
• Legitimate interests: such as keeping our website secure and managing our business records, where these interests are not overridden by your rights; and
• For sensitive personal information, your consent, processing provided for by existing laws and regulations, or processing needed to submit information to government agencies or to establish, exercise or defend legal claims.

You may withdraw your consent at any time by contacting us (see Section 12). Withdrawal does not affect processing already carried out, or processing we must continue because of a contract or a legal obligation.

5. Sharing and disclosure

We share personal information only when needed for the purposes above, and only with:

• Government agencies and local government units, when we file, register, renew or follow up on your behalf. Depending on your case, these may include the BIR, SEC, DTI, your city or municipal hall and barangay, BFP, SSS, PhilHealth, Pag-IBIG, DOLE, PCAB, FDA and IPOPHL.
• Independent professionals working on your engagement, such as an independent auditor for external audit services, who are bound by confidentiality obligations.
• Service providers that help us operate, such as our website hosting and form-processing provider, our email provider, and messaging platforms (Viber and Facebook Messenger, which process messages under their own privacy policies). Our service providers may only use your information to provide their services.
• Authorities, when required by law, such as in response to a court order, subpoena or other lawful request, or to protect our rights in legal proceedings.

6. Storage outside the Philippines

Some of our service providers, such as our website host and form processor, email provider and messaging platforms, may store or process information on servers located outside the Philippines. We use established providers and take reasonable steps so that your information remains protected in accordance with RA 10173.

7. How long we keep information

• Inquiries and quotation requests that do not lead to an engagement are kept for up to one (1) year from our last communication, and then deleted or anonymized.
• Client records are kept for the duration of our engagement and afterwards for as long as required by applicable laws and regulations (for example, record-keeping rules under the National Internal Revenue Code and BIR regulations), or as needed to establish, exercise or defend legal claims.
• Website form submissions are periodically removed from our form-processing system once they have been transferred to our records or are no longer needed.

When information is no longer needed, we delete or securely dispose of it, including shredding paper documents.

8. How we protect information

We use reasonable organizational, physical and technical measures to protect personal information against loss, misuse and unauthorized access, disclosure or alteration. These include limiting access to authorized staff who need it for their work, using password-protected accounts, keeping physical documents secured in our office, and serving our website over an encrypted (HTTPS) connection.

No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to put you at real risk of serious harm, we will notify you and the National Privacy Commission as required by law.

9. Website, cookies and embedded map

Our website does not use advertising or analytics cookies, and our fonts are served from our own website. The contact section includes an embedded Google Map. When the map loads, Google may collect information such as your IP address and may set cookies, under Google's Privacy Policy. Links to Viber, Facebook and Google Maps take you to those services, which have their own privacy policies.

10. Your rights as a data subject

Under RA 10173, you have the right to:

• Be informed whether and how your personal information is being processed;
• Access your personal information that we hold;
• Object to processing, including processing for direct marketing;
• Correct (rectify) inaccurate or incomplete information;
• Erasure or blocking of information that is incomplete, outdated, false, unlawfully obtained or no longer necessary;
• Data portability: to obtain a copy of your information in an electronic, commonly used format, where applicable;
• Withdraw consent where processing is based on consent;
• Be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of personal information; and
• File a complaint with the National Privacy Commission (privacy.gov.ph).

To exercise your rights, email info@vmbbusiness.com with the subject "Data Privacy Request", or contact us by phone or at our office (see Section 12). We may ask you to verify your identity before acting on your request, and we will respond within a reasonable time. Some requests may be limited where we are required by law to keep certain records.

11. Changes to this notice

We may update this Privacy Notice from time to time, for example when our services or legal requirements change. The latest version will always be posted on this page with its "Last updated" date.

12. Privacy questions and requests

VMB Business Consultancy Services complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. If you have questions, concerns or requests about your personal information, including requests to exercise your rights as a data subject, you can contact us by email, phone or at our office:

Last updated: October 2026