"Timely Business Advice"

Privacy Statement


Integrity, Transparency, Independence and Confidentiality are among the many core values and pillars of our Profession and of UHY M.L.AGUIRRE & CO., CPAs (“UHYMAC” or the “Firm”). The Firm has always been dedicated to protecting the confidentiality of sensitive information. Being in a highly regulated industry, UHYMAC is committed to comply with laws and regulations among which are Data Privacy Act of 2012, its IRR, NPCs Advisories, Circulars and Memoranda to protect individual’s (“data subjects”) privacy rights.   

To learn more about the types of personal information that we collect, how we collect, use, process and update, protect, share and dispose, you may refer to our Privacy Statement. We highly encourage you to provide us any feedback on our privacy statement and notices. 

Collection and Use of Data in General

We obtain and use personal data when a natural or juridical person (as applicable):

• submits an online inquiry or an online career application;

• undergoes recruitment process;

• becomes an employee, advisor, consultant, agent, supplier, or service provider of the Firm;

• offers products and services, sends proposals, requests, forms or other documents to the Firm;

• subscribes to our marketing, announcements and advisories;

• requests for proposals/quotations, for presentation, or for communication purposes;

• provides data during our seminar, networking or marketing events;

• becomes our client;

• provides us with personal data directly or indirectly to execute our contract or agreements, as part of legitimate business protocols and objectives;

• provides us with personal data directly or indirectly through other natural or juridical persons;

• has publicly made the personal data available; and

• participates in surveys, research, data gathering activities and company profiling. 

Providing us with your personal data through the above-mentioned circumstances shall mean that you agree with our Privacy Policy. This supplements previously and subsequently provided consent obtained for a specific purpose. 

Online Inquiry and Online Career Application

In general, we collect personal data that is voluntarily submitted thru online by individuals. This is either thru online inquiry at http://www.mlaguirre.org/ or thru online career application sent to [email protected].  By voluntary submission of information, you are expressly agreeing to policies set forth in Privacy Statement. We only collect personal data that are relevant to fulfill its purpose.

For the online inquiry, only Name, Email and Phone number are collected. These are necessarily utilized only for the purpose of answering individual’s queries. Should there be a need for additional personal information, we shall request from you the necessary information at the point of collection. And for the online career application, this shall be utilized for UHYMAC’s’ recruitment and employment purposes only.

The information obtained shall not be used for any other purposes unless we obtain consent from you or otherwise required or permitted by law or regulation or professional standards.

Recruitment and Employment Process (For Employees & Specialists)

We obtain personal data from resumes submitted through voluntary online career application or thru referrals both from current and prospective employees/ specialists to initiate the employment/ contracting application process. The collected personal data of any applicant, whether hired or not shall be stored in our database for two (2) years. Personal data of applicants/specialists who were not hired are retained for future selection process. For hired employees/ specialists, a contract shall be consummated after the interview. Resumes of those successfully employed/ contracted are stored in their respective 201 or equivalent files. In addition to personal data reflected on resumes, we request our new employees/ specialists to provide for their photos, medical certificates and government IDs (SSS, TIN, Philhealth, Pag-ibig and PRC IDs, if any). Only authorized personnel have access to their related files. Personal data are collected, used and processed to initiate, carry out and terminate employment/ contracting agreement. 

We share their personal data other than in the context of an employer-employee relationship when expressly authorized by law or when an applicant or an employee has given his/her consent or when the Firm’s name is given as reference. All personnel are duty bound to observe confidentiality.

Advisories/Announcement/Marketing thru E-mail

We shall ask your permission to provide personal data such as email address, name and company or affiliation, in order for you to receive tax and other regulatory advisories including upcoming events, services and seminars through e-mail which you are free to agree or decline. Any personal data will be kept on file by UHYMAC’S and shall be used for introduction to certain range of UHYMAC’s services as well. Our list of clients’ email addresses is password protected to prevent unsolicited emails from being sent to people on the list and details will not be passed on to unauthorized third parties. A request to remove your respective email address from our list at any time can be made by following the instruction included in each communication or simply replying back to the email sender such as [email protected] or writing to UHYMAC, 18F Cityland Pasong Tamo Tower 2210 Chino Roces Ave., Makati City, 1231 Philippines and stating which lists and /or newsletters you wish to be removed from.


Personal data collected shall be accessed and used by UHYMAC’s authorized employees, specialists, and consultants. We do not share information with unaffiliated third parties except when required or permitted by law or professional standards or are necessary to execute your requests, for declared, specified and legitimate purposes, business and professional needs. 

In certain instances, in order to achieve the purpose, UHYMAC may share your personal data to other service providers or companies within the Philippines or across geographical borders even with other UHY International member firms which are working with us or working on our behalf. Information shared shall be on a need-to-know basis only. We shall require third parties to enter into confidentiality or non-disclosure agreements. We shall be obliged to disclose confidential information if the law and profession explicitly require us to do so. 

UHYMAC shall neither sell nor transfer your personal data to any third parties to be used for direct marketing.

Retention and Disposal

We shall retain the personal data collected for a period not longer than necessary. Necessary means for the fulfilment of the declared, specified and legitimate purpose or when processing relevant to the purpose has been terminated; for the establishment, exercise or defense of legal claims, which must be consistent with standards followed by the industry or approved by appropriate government agency or as provided by law. In some cases, personal data shall be stored in a database for at least 5 to 10 years after complaints, inquiries, requests are acted upon. For advisories, announcements and marketing thru email, related personal data shall be deleted upon notice of non-subscription. For every communication, a notice to the recipients shall be sent allowing them to unsubscribe.   

We also have policies to ensure personal data is disposed or discarded in a secure manner that would prevent further processing, unauthorized access, or disclosure to any other party or the public, which shall prejudice the interests of the data subjects. We also take reasonable steps to destroy or de-identify personal data if it is no longer needed for any purpose. We shred hard copies or permanently delete digital files or anonymized as deemed appropriate.


By communicating with UHYMAC, using UHYMAC services, purchasing products and services from UHYMAC or by virtue of your engagement with UHYMAC, you acknowledge that you have read and understood this Policy and agree and consent to the use, processing and transfer of your Personal Data by UHYMAC as described in this Policy.

UHYMAC shall have the right to modify, update or amend the terms of this Policy at any time by placing the updated Policy on the Websites. By continuing to communicate with UHYMAC, by continuing to use UHYMAC’s services, purchasing products/ services from UHYMAC or by your continued engagement with UHYMAC following the modifications, updates or amendments to this Policy, such actions shall signify your acceptance of such modifications, updates or amendments.

Personal Data Privacy Security Measures and Breach Management

Our Profession is bound on confidentiality unless required or authorized by law and professional standards. UHYMAC implements reasonable and appropriate organizational, physical and technical measures intended for the protection of personal information against any accidental and unlawful destruction, alteration and disclosure, misuse and against any other unlawful processing. These measures include periodic internal reviews of our personal data collection, use, storage, retention, processing and disposal policies and practices.  We provide access of personal data to authorized personnel only and observe physical security measures as well.

Despite UHYMAC’s best efforts, we could not absolutely guarantee the security against all risks or threats. We have exerted reasonable efforts to limit the access of personal data to those authorized to know. Individuals who were given access primarily our employees/ specialists/ contractors are bound to maintain confidentiality through their non-disclosure agreements.

We shall comply with the relevant provisions of Data Privacy Act of 2012, its IRR, NPCs circulars and advisories on handling personal data security breaches. Within forty-eight (48) hours from discovery, we shall notify the data subject or the involved party that there is an unauthorized use or disclosure of data. We shall require the same from third or external parties.   

Data Subjects’ Privacy Rights

UHYMAC highly values and protects your privacy rights relative to your personal data. Under most circumstances, you may exercise your right to access, correct any inaccuracy, update or remove your personal data. You may refer to our concerns and feedback for the contact details of our DPO. We shall be amenable within reasonable means to fulfill your requests within the bounds of law, moral or public policy.

Periodic Review and Amendment

UHYMAC periodically reviews and if it warrants, modifies its privacy statement to comply with the recent privacy regulations and practices.  Any changes shall be incorporated in the statement. When changes are incorporated, we shall also revise the “Last Update Date” portion. As we update it from time to time, you agree to be bound by the prevailing terms of this policy. Thus, we encourage you to take initiative in revisiting our Privacy Statement periodically.

Concerns and Feedback

Should you have questions or feedback, or concerns about our privacy statements, our compliance and our management of your personal information, feel free to contact our DPO at [email protected].   

If there is any conflict between the English and other language versions, the English version shall prevail.