Privacy policy

1. Introduction

FinEdgeTech Pte. Ltd. (UEN 202813579M), registered at 1 Fusionopolis Way, #20-10 Connexis North Tower, Singapore 138632 (« FinEdgeTech », « we », « us », or « our »), is committed to protecting the personal data of individuals who interact with our website, services, and fintech platform products. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore and guidelines issued by the Personal Data Protection Commission (PDPC).

By accessing our website at finedgetech.pro, submitting enquiry forms, engaging our professional services, or using our financial technology platforms, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, please do not use our website or services.

This policy applies to personal data collected through our public website, contact forms, demo requests, client onboarding processes, platform support channels, and marketing communications. It does not cover personal data processed by our clients through their own applications built on FinEdgeTech platforms — in those cases, our clients act as data controllers and are responsible for their own privacy notices and PDPA compliance.

2. Data controller

The data controller responsible for personal data described in this policy is:

FinEdgeTech Pte. Ltd.
UEN: 202813579M
Address: 1 Fusionopolis Way, #20-10 Connexis North Tower, Singapore 138632
Privacy contact: [email protected]
General contact: [email protected]
Phone: +65 6778 9101

3. Personal data we collect

We may collect the following categories of personal data depending on how you interact with us:

Identity and contact data: Full name, business email address, telephone number, company name, job title, and business address provided through contact forms, demo requests, event registrations, or direct correspondence.

Technical data: IP address, browser type and version, device type, operating system, referring URL, pages visited, time spent on pages, and cookie identifiers when you browse our website (subject to your cookie consent preferences).

Communication data: Content of messages, enquiry subjects, support tickets, and correspondence records when you communicate with our team.

Contract and transaction data: For clients engaging our fintech services, we may collect billing contact details, project specifications, integration requirements, and service agreement records.

Marketing preferences: Your consent status for receiving marketing communications about fintech products, events, and industry updates.

We do not intentionally collect sensitive personal data such as NRIC/FIN numbers, financial account numbers, health information, or biometric data through our public website contact forms. If such data is inadvertently submitted, we will delete it promptly unless retention is required by law.

4. How we collect personal data

Personal data is collected through the following channels:

• Website contact forms: When you submit a demo request, API integration enquiry, or general fintech enquiry through contact.php, with explicit PDPA consent required before submission.
• Direct communication: Email, telephone, or in-person meetings at our One-North office.
• Client engagements: During technical discovery workshops, implementation projects, and managed platform support onboarding.
• Website analytics: Through analytics cookies, only if you provide consent via our cookie banner (Accept all or Customise with analytics enabled).
• Events and conferences: Business cards, registration forms, or digital sign-ups at fintech industry events.

5. Purposes of collection, use, and disclosure

We collect and use personal data for the following purposes, relying on appropriate PDPA bases including consent, contractual necessity, and legitimate business interests:

• Responding to enquiries: Processing demo requests, API integration enquiries, SME finance platform inquiries, regtech solution inquiries, and general fintech enquiries submitted through our website or email.
• Service delivery: Performing fintech implementation, API deployment, compliance workflow configuration, payment rail connectivity, and managed platform support services under client agreements.
• Client relationship management: Maintaining contact records, project history, support interactions, and account management communications.
• Marketing (with consent): Sending information about fintech product updates, industry insights, events, and service offerings where you have opted in. You may withdraw marketing consent at any time.
• Website improvement: Analysing aggregated website usage patterns to improve our fintech product pages and user experience (analytics cookies only with consent).
• Legal and regulatory compliance: Meeting record-keeping obligations, responding to lawful requests from authorities, and protecting our legal rights.
• Security: Detecting and preventing fraud, abuse, unauthorised access, and security incidents affecting our systems.

We may disclose personal data to the following categories of recipients where necessary for the above purposes:

• Cloud hosting providers (DigitalOcean, Singapore region) for website and platform infrastructure
• Email service providers for transactional and support communications
• Professional advisers including legal and accounting firms bound by confidentiality obligations
• Regulatory authorities when required by applicable law
• Business partners involved in joint fintech integration projects, with appropriate data processing agreements

We do not sell personal data to third parties for their marketing purposes.

6. Consent and withdrawal

Where PDPA requires consent, we obtain it through explicit, informed mechanisms. Contact form submissions require active checkbox consent for PDPA processing — consent is never pre-checked. Marketing communications require separate opt-in consent.

You may withdraw consent at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. We may continue processing personal data where another PDPA basis applies, such as contractual necessity or legal obligation.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law:

• Enquiry records: Up to 24 months from last interaction, unless converted to an active client relationship.
• Client project records: Duration of the service agreement plus up to 7 years for contractual, tax, and audit purposes.
• Marketing consent records: Duration of consent plus 3 years for compliance documentation.
• Website analytics data: Up to 14 months from collection (if analytics cookies consented).
• Cookie consent preferences: 6 months, stored in browser localStorage.

When personal data is no longer needed, we securely delete or anonymise it in accordance with our data retention schedule.

8. Your rights under PDPA

Under the Personal Data Protection Act 2012, you have the following rights regarding your personal data held by FinEdgeTech:

• Access: Request access to personal data we hold about you and information about how it has been used or disclosed in the past year.
• Correction: Request correction of inaccurate or incomplete personal data.
• Withdrawal of consent: Withdraw consent for collection, use, or disclosure where consent is the legal basis.
• Data portability: Where applicable under PDPA amendments, request transfer of your data in a commonly used format.

To exercise these rights, contact [email protected] with sufficient information to verify your identity. We will respond within 30 days as required by PDPA. A reasonable administrative fee may apply for access requests as permitted by law.

If you are dissatisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

9. Data security

FinEdgeTech implements appropriate technical and organisational measures to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. Security measures include:

• Encryption of data in transit using TLS/HTTPS for all website communications
• Encryption at rest for stored personal data on cloud infrastructure
• Role-based access controls limiting personal data access to authorised personnel
• Multi-factor authentication for administrative systems
• Regular security assessments and vulnerability monitoring
• Employee training on data protection and PDPA obligations
• Incident response procedures for suspected data breaches

While we strive to protect personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but will notify affected individuals and the PDPC of notifiable data breaches as required by law.

10. Cross-border data transfers

Our primary data processing occurs in Singapore. Where personal data is transferred outside Singapore — for example, to cloud infrastructure regions or support tools operated by international providers — we ensure that transfers comply with PDPA requirements through appropriate safeguards such as standard contractual clauses, binding corporate rules, or transfers to jurisdictions with comparable data protection standards as determined under PDPA.

11. Cookies and tracking

Our website uses cookies and similar technologies as described in our Cookie Policy. Essential cookies operate the website regardless of consent. Analytics cookies are activated only with your consent through our cookie banner (Accept all or Customise). Your preference is stored in localStorage for six months.

12. Minors

FinEdgeTech's website and B2B fintech services are directed at business professionals and enterprises. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that personal data from a minor has been collected, we will take steps to delete it promptly.

13. Third-party links

Our website may contain links to third-party websites including PDPC, MAS, and technology partner sites. We are not responsible for the privacy practices of external websites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to this policy

We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy regularly. Continued use of our website after changes constitutes acceptance of the updated policy.

15. Contact us

For privacy-related enquiries, access or correction requests, or consent withdrawal:

Data Protection Officer contact:
FinEdgeTech Pte. Ltd.
Email: [email protected]
Address: 1 Fusionopolis Way, #20-10 Connexis North Tower, Singapore 138632
Phone: +65 6778 9101

Effective date: June 2026