PRIVACY POLICY

ORGMASTR OPC
Website: www.orgmastr.com
Effective Date: 15 August 2026
Last Updated: 15 August 2026

1. Introduction

ORGMASTR OPC (“ORGMASTR”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.

ORGMASTR is a company established and operating in the Republic of the Philippines. We provide organisation capability, consulting, advisory, education, training, masterclasses, publications, research, and related professional services to individuals and organisations in the Philippines and internationally.

This Privacy Policy explains how ORGMASTR collects, uses, discloses, stores, protects, and otherwise processes personal information.

It applies to personal information collected through:

  • the ORGMASTR website;

  • online forms and registration systems;

  • consulting and advisory engagements;

  • masterclasses, courses, workshops and training programmes;

  • events and conferences;

  • publications;

  • client and professional engagements;

  • applications for employment, consultancy, coaching, training or associate partnership opportunities;

  • business correspondence;

  • marketing and communications;

  • professional and social-media interactions; and

  • other services and activities operated or administered by ORGMASTR.

ORGMASTR processes personal information in accordance with applicable privacy and data protection laws, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

Where the laws of another jurisdiction apply to particular processing activities, ORGMASTR will take reasonable steps to comply with those applicable requirements.

2. Who We Are

The ORGMASTR website and related services are operated by:

ORGMASTR OPC
Republic of the Philippines

Website: www.orgmastr.com
Privacy Contact: hello@orgmastr.com

Depending on the nature of a particular processing activity, ORGMASTR may act as a personal information controller, data controller, or data processor.

Where ORGMASTR processes personal information on behalf of a client or another organisation, that organisation may remain the controller of the information while ORGMASTR acts as its processor or service provider.

3. Applicable Privacy Laws

3.1 Philippine Law

As a Philippine organisation, ORGMASTR's principal privacy framework is the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

ORGMASTR applies the principles of:

  • transparency;

  • legitimate purpose; and

  • proportionality

when processing personal information.

ORGMASTR also takes into account applicable regulations, circulars, advisories and guidance issued by the National Privacy Commission of the Philippines.

3.2 International Laws

ORGMASTR serves individuals and organisations internationally. Depending on the circumstances, privacy laws outside the Philippines may apply to particular processing activities.

The application of a particular law depends on factors including:

  • the location of the individual;

  • the location of the organisation;

  • the nature of the services provided;

  • the nature and purpose of the processing;

  • whether services are specifically offered to individuals in a particular jurisdiction; and

  • whether behaviour is monitored within a particular jurisdiction.

Where applicable, this may include:

  • the EU General Data Protection Regulation (EU GDPR);

  • the UK General Data Protection Regulation (UK GDPR);

  • applicable UK data protection legislation;

  • and other applicable national or regional privacy laws.

ORGMASTR does not represent that every provision of every international privacy law applies to every individual or processing activity. Where a particular law applies, ORGMASTR will comply with the requirements applicable to the relevant processing.

4. What Personal Information We Collect

The personal information we collect depends on how you interact with ORGMASTR. This may include:

4.1 Identity and contact information

  • full name;

  • email address;

  • telephone or mobile number;

  • business or postal address;

  • city, country or region;

  • professional contact information.

4.2 Professional information

  • job title;

  • organisation or employer;

  • professional qualifications;

  • professional experience;

  • areas of expertise;

  • CV or résumé;

  • professional biography;

  • LinkedIn or other professional profile information;

  • publications and professional achievements;

  • information relating to consultancy, training, coaching or associate partner engagements.

4.3 Programme and training information

Where you register for or participate in a programme, masterclass, course, workshop, training programme or event, we may collect:

  • registration information;

  • attendance information;

  • professional background;

  • programme preferences;

  • assessment or participation information;

  • feedback;

  • completion or certification information; and

  • information necessary to administer the programme.

4.4 Commercial information

Where relevant, we may collect:

  • billing information;

  • invoicing details;

  • purchase history;

  • transaction information;

  • organisation details;

  • contract information; and

  • payment-related information.

Where payment is processed by a third-party payment provider, payment card details may be processed directly by that provider rather than stored by ORGMASTR.

4.5 Application information

Where you apply to work with ORGMASTR or express interest in an opportunity, we may collect:

  • CVs and résumés;

  • professional profiles;

  • employment history;

  • qualifications;

  • areas of expertise;

  • availability;

  • references;

  • contact information; and

  • other information voluntarily provided as part of the application.

This includes applications for roles or opportunities such as:

  • coaches;

  • trainers;

  • consultants;

  • associate partners;

  • authors;

  • speakers;

  • employees; and

  • other professional collaborators.

4.6 Communications

We may retain communications you send to us, including:

  • emails;

  • enquiries;

  • meeting correspondence;

  • feedback;

  • support requests;

  • applications; and

  • other professional communications.

4.7 Technical information

When you use our website, we may automatically collect certain technical information, including:

  • IP address;

  • browser type;

  • operating system;

  • device type;

  • referring website;

  • pages visited;

  • date and time of access;

  • approximate location derived from technical information;

  • website interaction information; and

  • information relating to website security and performance.

5. How We Collect Personal Information

We may collect personal information:

  • directly from you;

  • when you complete a website or online form;

  • when you register for a programme or event;

  • when you purchase a publication or service;

  • when you contact ORGMASTR;

  • during consulting, training or advisory engagements;

  • when you submit a CV, résumé or professional profile;

  • when you apply to become an associate partner, consultant, coach or trainer;

  • when you communicate through professional or social-media platforms;

  • from your employer or organisation where appropriate;

  • from publicly available professional sources;

  • through cookies and similar technologies;

  • through third-party platforms used to deliver our services; and

  • from other lawful sources.

Where personal information is obtained from another source, ORGMASTR will take reasonable steps to ensure that the processing is lawful and appropriate.

6. Purposes for Processing Personal Information

ORGMASTR processes personal information for legitimate and specified purposes, including:

6.1 Providing services

To:

  • provide consulting and advisory services;

  • deliver training and education;

  • administer masterclasses and courses;

  • organise events;

  • provide publications and related services;

  • manage client engagements;

  • communicate with participants and clients; and

  • perform contractual or pre-contractual obligations.

6.2 Managing professional relationships

To manage relationships with:

  • clients;

  • prospective clients;

  • associate partners;

  • consultants;

  • coaches;

  • trainers;

  • authors;

  • speakers;

  • suppliers;

  • professional advisers; and

  • other business partners.

6.3 Applications and professional opportunities

To:

  • assess applications;

  • evaluate professional qualifications and experience;

  • contact applicants;

  • arrange interviews or discussions;

  • assess suitability for ORGMASTR opportunities;

  • maintain appropriate applicant records; and

  • consider individuals for future opportunities where permitted by applicable law.

6.4 Website operation

To:

  • operate and maintain our website;

  • provide website functionality;

  • improve website performance;

  • understand website usage;

  • diagnose technical problems;

  • maintain cybersecurity; and

  • prevent misuse or unauthorised activity.

6.5 Communications and marketing

To:

  • respond to enquiries;

  • provide requested information;

  • send service-related communications;

  • distribute newsletters;

  • promote masterclasses and programmes;

  • communicate information about publications;

  • provide professional insights and updates; and

  • conduct lawful marketing activities.

6.6 Business administration

To:

  • manage accounting and financial records;

  • issue invoices;

  • administer payments;

  • manage contracts;

  • maintain business records;

  • manage risks;

  • obtain professional advice; and

  • establish, exercise or defend legal claims.

6.7 Legal and regulatory compliance

To:

  • comply with applicable laws;

  • respond to lawful requests from authorities;

  • meet regulatory requirements;

  • maintain required records; and

  • protect ORGMASTR's legal rights and interests.

7. Lawful Basis for Processing

Where Philippine law applies, ORGMASTR processes personal information in accordance with the lawful bases recognised under the Data Privacy Act. Where EU GDPR or UK GDPR applies, ORGMASTR will rely on an appropriate lawful basis depending on the circumstances.

This may include:

  • consent;

  • performance of a contract or taking steps before entering into a contract;

  • compliance with a legal obligation;

  • protection of vital interests, where applicable;

  • legitimate interests, where permitted and where those interests are not overridden by applicable rights; or

  • another lawful basis recognised under applicable law.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

8. Sensitive and Special-Category Information

ORGMASTR generally does not seek to collect sensitive personal information unless there is a legitimate and lawful reason to do so. Where sensitive or special-category information is necessary for a particular service or engagement, ORGMASTR will process it only where permitted by applicable law and will apply appropriate safeguards. Individuals should not provide sensitive information through general website forms unless specifically requested or necessary.

9. Data Minimisation

ORGMASTR seeks to collect only personal information that is reasonably necessary for the purpose for which it is processed. We do not intentionally collect excessive personal information merely because it is available. Where information is no longer required for a legitimate purpose, ORGMASTR will consider whether it should be deleted, anonymised, securely destroyed or otherwise disposed of in accordance with applicable law and our retention practices.

10. Cookies and Similar Technologies

The ORGMASTR website may use cookies and similar technologies.

These technologies may be used to:

  • enable website functionality;

  • maintain security;

  • remember preferences;

  • understand website usage;

  • measure website performance;

  • improve user experience; and

  • support relevant communications or analytics.

Some cookies may be provided by third-party services integrated into the website. Where applicable law requires consent for particular cookies or tracking technologies, ORGMASTR will provide appropriate information and obtain consent where required. You may also manage cookies through your browser or device settings. Disabling certain cookies may affect website functionality.

11. Marketing Communications

Where permitted by applicable law, ORGMASTR may send communications concerning:

  • consulting services;

  • masterclasses;

  • courses;

  • training;

  • publications;

  • events;

  • research;

  • professional insights; and

  • other ORGMASTR activities.

You may unsubscribe from marketing communications at any time. Marketing communications will include an appropriate mechanism for opting out where required.

You may also contact hello@orgmastr.com to change your marketing preferences.

12. Third-Party Service Providers and Data Processors

ORGMASTR may use third-party providers to support its website, services and business operations.

These may include providers of:

  • website hosting;

  • website management;

  • online forms;

  • email and communications;

  • customer relationship management;

  • analytics;

  • cloud storage;

  • payment processing;

  • online learning;

  • event management;

  • cybersecurity;

  • accounting; and

  • other business-support functions.

Where a third party processes personal information on behalf of ORGMASTR, we will take reasonable steps to ensure that the provider:

  • processes information only for authorised purposes;

  • maintains appropriate confidentiality;

  • applies appropriate security measures;

  • assists with relevant privacy obligations where appropriate; and

  • does not use personal information for unauthorised purposes.

Where ORGMASTR acts as a processor on behalf of a client, we will process information in accordance with the client's lawful instructions and applicable contractual requirements.

13. Sharing and Disclosure of Personal Information

ORGMASTR does not sell personal information.

We may disclose or share personal information where reasonably necessary and lawful with:

  • service providers;

  • data processors;

  • professional advisers;

  • payment providers;

  • technology providers;

  • event or programme partners;

  • trainers and consultants involved in delivering a service;

  • collaborating organisations where appropriate;

  • government authorities;

  • regulators;

  • courts or law-enforcement authorities where legally required;

  • insurers;

  • auditors;

  • legal advisers; or

  • parties involved in a merger, acquisition, restructuring, sale or transfer of business.

We will not disclose personal information for purposes unrelated to the purpose for which it was collected unless permitted or required by applicable law.

14. International and Cross-Border Data Transfers

Because ORGMASTR operates internationally and may use service providers located in different countries, personal information may be transferred to, stored in, or accessed from countries outside the Philippines. Some of these countries may have privacy laws that differ from those in the Philippines or from the laws applicable to you. ORGMASTR will take reasonable steps to ensure that international transfers are subject to appropriate safeguards required by applicable law.

European Union / EEA

Where EU GDPR applies, international transfers may be made using an appropriate mechanism, including:

  • an applicable adequacy decision;

  • European Commission Standard Contractual Clauses;

  • binding corporate rules where applicable;

  • an approved certification mechanism or code of conduct where applicable; or

  • another transfer mechanism recognised under applicable law.

The European Commission identifies adequacy decisions, Standard Contractual Clauses and other mechanisms as available safeguards for transfers of personal data to third countries.

United Kingdom

Where UK GDPR applies, international transfers may rely on:

  • UK adequacy regulations;

  • appropriate safeguards, including the UK International Data Transfer Agreement or applicable UK Addendum;

  • binding corporate rules where applicable; or

  • another lawful mechanism or exception recognised under UK law.

The UK ICO's current guidance identifies adequacy regulations, appropriate safeguards and specified exceptions as the principal mechanisms for restricted transfers. Where required, ORGMASTR may undertake an appropriate transfer assessment or other assessment required by applicable law before making or permitting a restricted transfer.

15. Data Security

ORGMASTR maintains reasonable and appropriate organisational, physical and technical safeguards designed to protect personal information against:

  • unauthorised access;

  • unauthorised disclosure;

  • misuse;

  • alteration;

  • loss;

  • destruction; and

  • other unlawful or unauthorised processing.

Depending on the circumstances, safeguards may include:

  • access controls;

  • authentication;

  • confidentiality obligations;

  • secure systems;

  • appropriate data-handling procedures;

  • backups;

  • security monitoring;

  • access limitation;

  • contractual safeguards; and

  • staff and contractor awareness and training.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

16. Personal Data Breaches

ORGMASTR maintains procedures for identifying, assessing, containing, investigating and responding to personal data breaches and security incidents. Where a breach is subject to mandatory notification under applicable law, ORGMASTR will make the required notifications to the relevant authorities and/or affected individuals within the applicable timeframe and in the manner required by law.

17. Data Retention

ORGMASTR retains personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:

  • provide services;

  • maintain client and professional records;

  • fulfil contractual obligations;

  • comply with accounting, tax, regulatory or legal requirements;

  • resolve disputes;

  • establish, exercise or defend legal claims;

  • maintain security records; or

  • meet legitimate business requirements.

Different types of information may be retained for different periods. When information is no longer required, ORGMASTR will take reasonable steps to delete, anonymise, securely destroy or otherwise dispose of it in accordance with applicable law and our retention practices.

18. Data Subject Rights

Depending on the law applicable to your personal information, you may have rights including:

Right to be informed

To receive information about how your personal information is collected and processed.

Right of access

To request access to personal information held about you and information concerning its processing.

Right to correction

To request correction of inaccurate or incomplete information.

Right to object

To object to certain processing, including certain direct marketing activities and, where applicable, processing based on legitimate interests.

Right to withdraw consent

Where processing is based on consent, to withdraw that consent.

Right to deletion or erasure

Where applicable, to request deletion or erasure of personal information.

Right to restriction

Where applicable, to request restriction of processing.

Right to data portability

Where applicable, to request personal information in a structured, commonly used and machine-readable format and, where legally required, request its transmission to another organisation.

Right to lodge a complaint

To raise a concern with ORGMASTR and, where applicable, lodge a complaint with a relevant privacy or data protection authority.

These rights are subject to limitations and exceptions under applicable law.

19. EU/EEA and UK Additional Rights

Where EU GDPR or UK GDPR applies, you may have additional rights including:

  • access;

  • rectification;

  • erasure;

  • restriction of processing;

  • data portability;

  • objection to processing;

  • withdrawal of consent; and

  • rights relating to certain automated decision-making and profiling.

Where applicable, you may also have the right to lodge a complaint with the relevant supervisory authority. ORGMASTR will assess requests according to the law applicable to the relevant processing activity.

20. Automated Decision-Making and Profiling

ORGMASTR does not ordinarily make decisions producing legal or similarly significant effects about individuals solely through automated processing. If this changes and applicable law requires additional information, safeguards or rights concerning automated decision-making or profiling, ORGMASTR will provide the protections required by applicable law.

21. Client Data and Professional Engagements

Where ORGMASTR provides consulting, advisory, research, training or other professional services to an organisation, the client may provide ORGMASTR with personal information concerning its employees, contractors, participants, customers, stakeholders or other individuals.

In such circumstances:

  • the client may be the relevant data controller or personal information controller;

  • ORGMASTR may act as a processor or service provider;

  • the client may determine the purposes and scope of processing;

  • ORGMASTR will process information in accordance with applicable contractual instructions; and

  • additional data processing, confidentiality, security or international-transfer provisions may be included in the relevant client agreement.

Where appropriate, the applicable client agreement will govern the specific processing covered by that agreement.

22. Professional Profiles and Publicly Available Information

ORGMASTR may process professional information voluntarily published through professional networks, websites, publications, conferences, professional directories or other publicly accessible sources.

This may include:

  • professional title;

  • organisation;

  • professional experience;

  • qualifications;

  • areas of expertise;

  • publications;

  • professional biography; and

  • publicly available professional contact information.

Such information may be used for legitimate professional purposes, including:

  • identifying potential consultants, coaches or trainers;

  • evaluating professional expertise;

  • developing associate partner relationships;

  • preparing professional profiles;

  • preparing programme or event materials;

  • business development; and

  • maintaining ORGMASTR's professional network.

ORGMASTR will not assume that publicly available information is freely available for every purpose. Processing remains subject to applicable law.

23. Applications, Recruitment and Professional Opportunities

Where you apply for an ORGMASTR opportunity, including as a coach, trainer, consultant, associate partner, employee, author or other professional collaborator, we may process the information you provide for purposes including:

  • assessing your application;

  • evaluating qualifications and professional experience;

  • contacting you;

  • arranging interviews or discussions;

  • determining suitability;

  • maintaining applicant records;

  • considering you for future opportunities where permitted; and

  • establishing or managing a professional relationship.

Where an application is submitted through an ORGMASTR online form, the information may be processed using authorised third-party form or cloud-service providers. Additional privacy notices may be provided at the point of collection where appropriate.

24. Children

ORGMASTR's services are primarily directed toward adults and professional users. ORGMASTR does not knowingly seek to collect personal information from children through general website activities. Where a programme or service legitimately involves children or individuals requiring parental or guardian involvement, ORGMASTR will apply appropriate safeguards and comply with applicable legal requirements. If you believe that a child has provided personal information to ORGMASTR improperly, please contact us.

25. Third-Party Websites and Platforms

The ORGMASTR website may contain links to third-party websites, social media platforms, registration systems, payment services or other external services. Those third parties may have their own privacy policies and data-processing practices. ORGMASTR is not responsible for the privacy practices of third-party services that it does not control. We encourage you to review the applicable privacy notice before submitting personal information to a third-party service.

26. Your Responsibilities

When providing personal information to ORGMASTR, you should ensure that:

  • the information you provide is accurate and reasonably up to date;

  • you provide only information that is necessary for the relevant purpose;

  • you do not provide another person's information unless you are authorised to do so; and

  • you notify us if information requires correction.

Where you provide personal information concerning another individual, you should ensure that you have an appropriate lawful basis or authority to provide that information.

27. Exercising Your Privacy Rights

If you wish to:

  • access your personal information;

  • correct inaccurate information;

  • request deletion or restriction;

  • object to processing;

  • withdraw consent;

  • change your marketing preferences;

  • ask about international transfers; or

  • raise another privacy concern,

please contact:

ORGMASTR OPC
Email: hello@orgmastr.com

Please provide sufficient information for us to understand your request and, where necessary, verify your identity. ORGMASTR may request additional information where reasonably necessary to protect personal information from unauthorised disclosure.

28. Response to Privacy Requests

ORGMASTR will assess and respond to privacy requests in accordance with the law applicable to the relevant processing activity. Where a specific statutory timeframe applies, ORGMASTR will comply with that timeframe. Where no specific statutory timeframe applies, ORGMASTR will endeavour to respond within a reasonable period. If a request cannot be fulfilled, we will explain the reason where permitted by law.

29. Complaints and Regulatory Authorities

If you have a privacy concern, we encourage you to contact ORGMASTR first so that we can investigate and attempt to resolve the matter.

Philippines

Where applicable, you may contact or lodge a complaint with the:

National Privacy Commission of the Philippines

ORGMASTR will cooperate with the National Privacy Commission as required by applicable law.

European Union / EEA

Where EU GDPR applies, you may have the right to lodge a complaint with the data protection supervisory authority in the EU/EEA jurisdiction relevant to you.

United Kingdom

Where UK GDPR applies, you may have the right to complain to the Information Commissioner's Office (ICO) or another competent UK supervisory authority, as applicable.

30. Changes to This Privacy Policy

ORGMASTR may update this Privacy Policy from time to time to reflect:

  • changes to our services;

  • changes to our website;

  • changes to our technology or service providers;

  • changes to applicable laws;

  • regulatory guidance;

  • changes to our data-processing practices; or

  • improvements to our privacy and security practices.

Where appropriate, material changes will be communicated through the website or other suitable channels.

The effective date shown at the beginning of this Policy indicates when the current version took effect.

31. Contact Us

For privacy questions, requests, complaints or other data protection matters:

ORGMASTR OPC
Republic of the Philippines

Privacy Contact: hello@orgmastr.com
Website: www.orgmastr.com

32. Governing Privacy Framework

ORGMASTR is established in the Philippines and is principally subject to Philippine law, including the Data Privacy Act of 2012. However, this Policy is intended to operate internationally. Where a mandatory privacy or data protection requirement applies to a particular processing activity and provides greater protection or additional rights than those described in this Policy, that mandatory legal requirement will apply to the extent required by law. Nothing in this Policy is intended to exclude, restrict or limit a right or protection that cannot lawfully be excluded, restricted or limited under applicable law.

Effective Date: 15 August 2026
Last Updated: 15 August 2026

© 2026 ORGMASTR OPC. All rights reserved.