We collect personal data to deliver and enhance our services effectively. This includes:

• Account Information: Name, email address, phone number, and other details when you create an account.
• Payment Information: Billing address, payment method details, and transaction history.
• Support Information: Information you provide when contacting customer support, including chat logs and issue descriptions.

• Device Information: IP address, browser type, operating system, and device identifiers.
• Usage Information: Data on your interaction with our platform, including pages visited and features used.
• Cookies and Similar Technologies: Used to enhance user experience and track session data. You can manage cookie preferences through your browser settings.

• Integration Services: Data retrieved from third-party applications linked to your account.
• Marketing Partners: Information provided by third parties to personalize communications and offers.

Your personal data is used to:

• Deliver and improve our services to meet your needs.
• Process transactions, manage billing, and fulfill your requests.
• Communicate updates, promotions, or account-related information.
• Customise user experiences through targeted content and recommendations.
• Detect, prevent, and address fraudulent or security-related issues.
• Comply with legal obligations as stipulated by the PDPA.
• Improve automation processes and optimize system performance.

Our CRM platform is powered by a white-labeled solution from GreenRope. By using our services, you acknowledge that certain data processing activities are handled by GreenRope, and theirapplies in addition to this policy.

• GreenRope manages the underlying infrastructure for our CRM functionalities. While we take reasonable steps to ensure data security, GreenRope operates its own infrastructure, and we are not responsible for their internal policies or any data breaches on their platform.
• Our CRM services are provided "as is" and "as available", without warranties of any kind. We do not guarantee uninterrupted service and shall not be held liable for any losses, damages, or data breaches caused by GreenRope or any third-party providers.
• As part of our CRM services, User data may be processed and stored on servers managed by GreenRope, which may be located outside Singapore. By using our services, you consent to such transfers in compliance with the Personal Data Protection Act (PDPA).
• For more information on how Boomerangme manages data, please review their Privacy Policy.

We also utilise Boomerangme for digital loyalty and rewards management. By using our services, you acknowledge that Boomerangme may process certain data, and their Privacy Policy applies in addition to this policy.

• Boomerangme handles loyalty program functionalities, including the management of digital cards and rewards.
• While we implement security measures to protect your data, Boomerangme operates its own infrastructure, and we are not responsible for their internal policies or any security incidents that occur on their platform.
• Data processed through Boomerangme may be transferred outside Singapore to facilitate service operations. By using our services, you consent to such data transfers in accordance with PDPA requirements.
• For more information on how Boomerangme manages data, please review their Privacy Policy.

Your personal data may be shared with:

• Service Providers: Third-party vendors providing payment processing, hosting, analytics, and support services under strict confidentiality agreements.
• Affiliates: Entities within our corporate group for shared administrative purposes.
• Legal Authorities: To comply with legal obligations or respond to lawful requests.
• Business Transfers: Relevant parties in cases of mergers, acquisitions, or sales of assets.
• With Your Consent: For specific use cases such as testimonials or case studies.

You have the following rights concerning your personal data:

• Access and Correction: Request access to your personal data and rectification of inaccuracies.
• Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
• Account Management: Update or delete your account and associated data.
• Marketing Preferences: Opt out of promotional communications through account settings or by contacting us.
• Cookie Preferences: Manage cookies via browser settings or platform tools provided.

We implement reasonable and appropriate technical, organisational, and administrative measures to safeguard your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption Protocols: For secure transmission of personal data.
• Access Control: Role-based access to personal data within our organisation.
• Regular Audits: To ensure the integrity of our security measures.

In the event of a data breach that poses a significant risk to your personal data, we will take immediate action and notify affected individuals and relevant authorities in accordance with applicable legal requirements.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law.

• Upon account deletion, we will retain your personal data for up to 2 months for compliance, fraud prevention, and dispute resolution before securely deleting or anonymising it.

As part of our services, your personal data may be processed and stored on GoHighLevel's and Boomerangme’s servers, which may be located outside Singapore, including in the United States and other jurisdictions where they operate.

By using our services, you acknowledge and consent to the international transfer of your personal data as required to provide and improve our CRM and loyalty services. While we take reasonable measures to ensure data security, we are not responsible for any actions, policies, or breaches by GoHighLevel, Boomerangme, or their third-party affiliates.

For further details on how they handle cross-border data transfers, please refer to their respective Privacy Policies

Our services are not intended for individuals under the age of 13, and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete such data as soon as possible.

Our website and services may contain links to third-party websites or services that are not operated or controlled by us. We are not responsible for the privacy practices or content of these third-party sites. We recommend that you review the privacy policies of any third-party websites before providing them with your personal data.

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technologies, or legal requirements. Any changes will be posted on this page with an updated "Effective Date". If the changes are significant, we will notify you by email or through a prominent notice on our website.

By using our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.