Privacy Policy

Last Updated July 2026

By using and accessing the MBOX’s Services, which include but are not limited to the locker, mobile applications, and website, you acknowledge that you have read, understood, and agree to be bound by our Privacy Policy, which is supplementary and should be read in conjunction with our Terms and Conditions.

MBOX may process personal data when necessary to provide its Services, process payments, coordinate deliveries, protect the security of users, lockers, packages, systems, and transactions, prevent fraud or misuse, comply with legal or regulatory requirements, establish or defend legal claims, or pursue other legitimate purposes consistent with the Data Privacy Act of 2012, its Implementing Rules and Regulations, and issuances of the National Privacy Commission.

Should you disagree with this Privacy Policy, or if you do not wish to provide personal data necessary for the use of MBOX’s Services, you should immediately discontinue use of the relevant MBOX service, locker, mobile application, website, or related service. Users must be of legal age and have the legal capacity to use the Services and provide valid consent where required.

1.  Personal Data Collection

MBOX may collect personal data to provide and manage its Services. This may include your full name, photo, identification card details or verification documents, contact number, email address, delivery address, payment-related information, which may include credit card, debit card, bank, or payment account details, product and transaction details, billing and delivery information, CCTV footage when using an MBOX locker, website and mobile app access or usage data, transaction details with our partner couriers and other authorized third-party service providers, and any other information that may be reasonably necessary for MBOX to provide, secure, support, and improve its Services, subject to applicable law.

MBOX may process personal data for the following purposes:

  1. To provide, operate, manage, and improve the Services offered to you;
  2. To facilitate the creation, verification, and management of your user account;
  3. To assist you and respond to your inquiries, requests, complaints, and support needs;
  4. To coordinate deliveries, locker access, package release, returns, and related transactions;
  5. To ensure the safety and security of users, lockers, packages, systems, transactions, and the Services;
  6. To prevent, detect, investigate, and respond to fraud, misuse, unauthorized access, security incidents, or other unlawful activity;
  7. To process payments, refunds, fees, and related transaction records;
  8. To coordinate with partner couriers, payment processors, network providers, marketplaces, and other third-party service providers as necessary to provide the Services;
  9. To resolve complaints, conflicts, disputes, claims, and operational issues;
  10. To enforce our Terms and Conditions and other applicable service terms;
  11. To comply with legal, regulatory, audit, reporting, and law enforcement requirements;
  12. To send service-related notices, transaction updates, security alerts, and administrative messages;
  13. To send marketing communications or allow participation in marketing initiatives, only where permitted by law and, where required, with your consent or subject to your available opt-out choices; and
  14. To pursue other purposes that are directly related to the foregoing purposes, disclosed to you when your personal data is collected, or otherwise permitted under applicable law.
2. Disclosure of Personal Data

MBOX takes reasonable and appropriate measures to protect your personal data. MBOX may disclose or share your personal data with the following persons or entities:

  1. MBOX’s authorized employees, officers, personnel, contractors, and representatives who need access to such personal data to perform their functions and provide the Services;
  2. Partner couriers, logistics providers, payment processors, banks, network providers, marketplaces, technology providers, and other third-party service providers as necessary to provide, operate, secure, and support the Services;
  3. MBOX’s professional advisers, auditors, accountants, lawyers, insurers, consultants, and other advisers acting for or on behalf of MBOX;
  4. Government authorities, regulators, courts, or law enforcement agencies, when required or permitted by law;
  5. MBOX’s affiliates, subsidiaries, business partners, successors, or assigns, where reasonably necessary for business operations or the provision of the Services;
  6. Other third parties where you have provided consent, where disclosure has been made known to you, or where permitted by law. Third parties receiving personal data must process such data in accordance with applicable data protection laws and standards.
3. Accessing and Updating Personal Information

MBOX implements reasonable measures to allow users to access, update, or request correction of their personal data through the mobile application, app settings or other app tools, or other available channels. For account security, MBOX may require verification of identity before acting on any request involving personal data. Subject to applicable law, users may exercise their rights under the Data Privacy Act of 2012. MBOX may refuse, limit, or defer a request where the personal data must be retained or processed for transactions, payments, accounting, security, legal, regulatory, dispute, fraud prevention, service operation, technical, or other lawful purposes. Where a user objects to processing necessary for the use of a Service or feature, the user should stop using the relevant Service or feature.

4. Third-Party Services and Payment Processing

MBOX’s Services, website, mobile application, lockers, or communications may link to or use third-party services, such as payment systems, courier systems, marketplace platforms, or other service providers. MBOX is not responsible for the content or independent privacy practices of third-party services.

Credit card, debit card, online banking, e-wallet, and other digital payment systems may be provided or processed by third-party payment service providers. Relevant payment and transaction information may be processed for authentication, payment authorization, fraud prevention, transaction completion, refunds, chargebacks, and related purposes.

5. Governing Law

This Privacy Policy shall be governed by the laws of the Republic of the Philippines, including the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission.

6. Data Retention and Security

MBOX retains personal data for as long as necessary to fulfill the purposes for which it was collected, provide the Services, complete transactions, maintain business and operational records, resolve disputes, prevent fraud or misuse, protect users, lockers, packages, systems, and transactions, comply with legal, regulatory, accounting, audit, reporting, or law enforcement requirements, or for other lawful purposes.

Personal data that is no longer necessary for active use may be archived, anonymized, or otherwise handled in accordance with MBOX’s retention policies, applicable law, and technical requirements.

MBOX implements reasonable and appropriate technical, organizational, and physical safeguards to protect personal data against unauthorized access, use, disclosure, alteration, loss, or destruction.

7. CCTV and Locker Camera Monitoring

MBOX Smart Lockers and related premises may be monitored by CCTV cameras. MBOX lockers may also have front-facing cameras on the locker touchscreen or interface. These cameras may capture users, recipients, couriers, service providers, bystanders, packages, locker access, and related activities.

Camera footage or images may be used for security, safety, verification, fraud prevention, dispute resolution, service operation, customer support, incident investigation, enforcement of applicable terms, legal or regulatory compliance, or responding to lawful requests from authorities.

By using MBOX lockers or related services, users acknowledge that CCTV and locker camera monitoring may occur in accordance with this Privacy Policy and applicable law.

8. Data Breach Notification

In the event of a personal data breach or security incident involving personal data, MBOX shall take reasonable steps to assess, contain, and mitigate the incident. Where required by applicable law, MBOX shall notify affected users and the National Privacy Commission in accordance with applicable legal requirements.

9. Contact Us

For privacy-related questions, requests, complaints, or concerns, you may contact MBOX through its website www.mbox.com.ph and/or other authorized contact channels.

10. Changes to this Policy

MBOX may update this Privacy Policy from time to time to reflect changes in law, business operations, Services, or data processing practices. Updates may be posted on MBOX’s website, mobile application, locker screen, or other appropriate channels, and will take effect upon posting or notice, unless a later date is stated. Users are encouraged to review this Privacy Policy regularly.