How we manage personal data under Singapore’s PDPA.

We may collect identity and contact details, organisation and billing information, service and support records, domain registrant data, account activity, communications, transaction references and technical information.

We generally collect data from you, authorised representatives, use of our services and providers involved in delivering an order.

We use personal data to respond to enquiries, prepare proposals, provide and secure services, administer accounts, register domains, process payments, deliver support, maintain records, prevent fraud, improve operations and comply with legal obligations.

We use data for marketing only where permitted, and you may opt out without affecting service communications.

We collect, use and disclose personal data with consent or where the PDPA permits or requires it. We limit handling to purposes a reasonable person would consider appropriate.

You may withdraw consent with reasonable notice, subject to legal or contractual restrictions. We will explain likely consequences, which may include an inability to continue part of a service.

We may disclose relevant data to hosting and cloud providers, registries and registrars, certificate authorities, payment processors, communication providers, professional advisers, contractors and authorities where needed.

We do not sell personal data. Providers receive only data reasonably needed for their function and are expected to protect it appropriately.

Some providers or infrastructure may process data outside Singapore. Where the PDPA transfer limitation applies, we take reasonable steps to ensure a standard of protection comparable to the PDPA, unless an exception applies.

We take reasonable steps to keep decision-relevant data accurate and complete, and maintain administrative, technical and physical safeguards proportionate to the risks.

We stop retaining personal data, or remove association with an individual, when it is no longer needed for a legal or business purpose. Different records have different retention periods.

You may request access to personal data under our control and information about its use or disclosure, or ask us to correct an error or omission. Statutory exceptions may apply and a reasonable fee may be charged where permitted.

We may need to verify identity and authority before processing a request.

We assess suspected data breaches and notify the Personal Data Protection Commission and affected individuals where the PDPA requires notification. We may contact you with protective steps where appropriate.

Marketing to Singapore telephone numbers is managed under applicable Do Not Call provisions. Where required, we check the register or rely on clear consent or another exception, identify the sender and provide an opt-out method.

For access, correction, withdrawal, a complaint or a question, email dpo@webzfusion.com. Please provide enough information for us to identify the relevant record and respond securely.