Data Protection and Privacy

1. Collection of Data

The Company collects personal data including, but not limited to, name, professional email address, mobile phone number (for WhatsApp Blast), corporate address, and payment information. This data is used to create a Subscriber Profile, manage billing, and deliver the Service.

2. Compliance (PDPA & GDPR)

Singapore PDPA: The Company complies with the Personal Data Protection Act 2012 (Singapore). By subscribing, the Subscriber consents to the collection, use, and disclosure of personal data for the purposes of providing market intelligence.
GDPR & International Standards: For Subscribers based in the European Economic Area (EEA) or the United Kingdom, the Company acts as a Data Controller. Processing is based on "Contractual Necessity" (to provide the service) and "Legitimate Interest" (to protect IP and prevent fraud).

3. Cross-Border Transfers

The Subscriber acknowledges that data may be stored on cloud servers (e.g., AWS, Google Cloud) or processed via third-party platforms (e.g., WhatsApp/Meta, Stripe) which may be located outside of Singapore or the Subscriber’s home jurisdiction. The Company ensures that such transfers provide a standard of protection comparable to the PDPA and GDPR.

4. Subscriber Rights

Under various global privacy laws (GDPR, PDPA, CCPA), the Subscriber has the right to:

Access and rectify their profile data.
Request deletion of data (subject to statutory retention periods).
Withdraw consent for marketing communications (noting that withdrawal of consent for WhatsApp may result in inability to receive "News Flashes").

5. WhatsApp & Privacy Risk

Third-Party Processing: The WhatsApp Blast service is a third-party application owned by Meta. The Company is not responsible for Meta’s data processing practices.

6. Data Retention

The Company will retain personal data only for as long as the subscription is active or as required by Singaporean financial and tax laws (typically 5–7 years).