Privacy Policy

01Who we are

M42 Technologies Inc. is the Personal Information Controller responsible for your personal data under the DPA. We decide the purposes and means of the processing described in this Policy. M42 builds a portfolio of software products and platforms for businesses, and connect.m42tech.io is the site through which we share information, run events, and respond to interest in that work.

02Scope of this Policy

This Policy applies to personal data collected through connect.m42tech.io and the related M42 marketing, event, inquiry, and content-download activities it supports. It does not cover the separate M42 software products and applications you may subscribe to or use, each of which has its own terms and privacy notice, nor offline dealings unrelated to the Site, nor third-party websites we link to, which are governed by their own privacy practices.

03Personal data we collect

Information you provide

Depending on the form, event, or request, we may collect:

• Your name, such as first and last name
• Email address
• Mobile or telephone number, where a form or event requires it
• Company or business name, and business type or industry
• Job title or role, where relevant
• City, province, or location
• The nature of your inquiry or message, and the event, demonstration, consultation, or material you are interested in
• Event registration details, such as sessions you sign up for
• Responses to on-page questions, polls, or short assessments
• Your consent to receive the requested materials and communications, together with the date it was given

Information collected automatically

• Campaign and referral details, such as the source, medium, and campaign parameters that tell us which advertisement or link brought you here
• Technical information, such as your browser and device type (user agent)
• Your IP address, which is processed by our servers and service providers as part of normal operation, security, and logging
• Cookies and similar technologies, as described in the Cookies section

We do not intentionally collect sensitive personal information, such as data about health, religion, ethnicity, or government-issued identifiers, through the Site. Please do not include such information in the form fields or free-text messages.

04How we use your personal data

We use your personal data for the following purposes:

• To respond to your inquiries and provide the information, demonstration, or consultation you request
• To register you for events, manage your participation, and follow up with you afterward
• To deliver research papers, guides, and other materials you request, and to give you access to downloads
• To send you newsletters, business insights, and updates about M42 events, products, and materials, where you have consented
• To understand which campaigns, events, and content are effective, and to improve the Site and our communications
• To manage our relationship with you and, where relevant, to assess whether our products may fit your needs
• To secure the Site, prevent fraud and abuse, and maintain the integrity of our systems
• To comply with legal obligations and respond to lawful requests from authorities

05Legal bases for processing

Depending on the activity, we rely on one or more of the following bases under the DPA:

• Your consent, which you give when you submit a form and agree to receive the requested materials and communications
• Our legitimate interests, such as responding to inquiries you initiate, organizing and running events, securing the Site, preventing abuse, measuring the performance of our campaigns, and managing our business relationships, balanced against your rights and freedoms
• Steps taken at your request before entering into a possible business relationship
• Compliance with a legal obligation to which we are subject

Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

06Consent and marketing communications

When you submit a form, you consent to receive the materials you requested and, where you agree, occasional newsletters and business insights from M42. Every marketing email includes an unsubscribe link, and you can opt out at any time using that link or by contacting us. We keep a record of your consent, including the date it was given, so that we can honor your choices and demonstrate accountability.

07Cookies and tracking technologies

We use a small number of cookies and similar technologies:

• Strictly necessary. Short-lived cookies or session markers that keep the Site working, for example to give you access to a download after you submit a form. These do not track you across other websites.
• Analytics and advertising. We use analytics and advertising tools from Meta (the Meta or Facebook Pixel) and Google (such as Google Analytics) to measure the performance of our campaigns and events and to understand how the Site is used. These tools may set cookies and share limited information, including your IP address and events such as page views, registrations, and form submissions, with Meta and Google.
• Fonts and content delivery. The Site loads web fonts from Google Fonts, which may receive your IP address as part of serving those fonts.

You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Site, such as downloads, from working.

08How we share and disclose your data

We do not sell your personal data. We disclose it only in the following ways:

• Service providers (Personal Information Processors) who process data on our behalf under appropriate agreements. These include our email delivery provider, our cloud hosting, infrastructure, and database providers, our customer-relationship and marketing tools, our event registration and communication tools, and, where enabled, our advertising and analytics partners. They act only on our instructions and for the purposes described here.
• Advertising and analytics partners, specifically Meta Platforms and Google, for measurement and advertising.
• Legal and regulatory disclosures, where required by law, court order, or a lawful request from a public authority, or to establish, exercise, or defend legal claims and protect our rights, users, and systems.
• Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

09International data transfers

Some of our service providers are located outside the Philippines, including in the United States. Where your personal data is transferred abroad, we take reasonable steps to ensure it receives a comparable level of protection consistent with the DPA, including through contractual safeguards with our processors. By using the Site, you understand that your data may be processed outside the Philippines.

10Data retention

We keep your personal data only for as long as necessary to fulfill the purposes in this Policy, including responding to your inquiry, delivering requested materials, managing events, sending updates while you remain subscribed, and meeting legal, accounting, or reporting requirements. As a general rule, we retain lead, event, and inquiry data for up to two years after your last interaction with us, unless you ask us to delete it sooner or a longer period is required by law. When your data is no longer needed, we securely delete or anonymize it. If you unsubscribe or ask us to delete your data, we will do so, subject to any retention required by law and to a minimal suppression record needed to honor your opt-out.

11Data security

We implement reasonable and appropriate organizational, physical, and technical measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These include access controls, encryption of data in transit, restricted database access, and activity logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach that meets the thresholds under the DPA, we will notify the NPC and affected data subjects as required.

12Your rights as a data subject

Under the DPA, subject to its conditions and exceptions, you have the right to:

• Be informed about how your personal data is collected and processed
• Access the personal data we hold about you
• Object to the processing of your personal data, including for direct marketing, and to withhold consent
• Rectify inaccurate or incomplete personal data
• Erase or block your personal data where permitted
• Data portability, to obtain and reuse your personal data in a structured, commonly used format where applicable
• Damages, to be indemnified for harm sustained due to unlawful or unauthorized processing
• Lodge a complaint with the National Privacy Commission

These rights may be exercised by you or, in the cases allowed by law, by your lawful heirs and assigns. We may need to verify your identity before acting on a request.

13Exercising your rights

To exercise any of your rights, withdraw consent, or ask a question about this Policy, please contact our Data Protection Officer using the details in the Contact section. We will respond within a reasonable period and in accordance with the DPA. If you are not satisfied with our response, you may refer the matter to the National Privacy Commission.

14Children

The Site is intended for business owners and professionals and is not directed at children. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it.

15Third-party links

The Site and our materials may contain links to other websites and services that we do not operate. We are not responsible for their privacy practices, and we encourage you to review the privacy policies of any third-party site you visit.

16Changes to this Policy

We may update this Policy from time to time. We will post the updated version on this page and revise the Last updated date above. Where changes are material, we may provide additional notice through the Site or by email, as appropriate.

17Contact us

For any request or question about your personal data or this Policy, contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission, the Philippine authority for data protection:

This Policy is governed by the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 and its Implementing Rules and Regulations.