Privacy policy

1. Who we are

Forcefield Design Pte. Ltd. (UEN 202518329D), referred to as “Forcefield Design”, “we”, “us” or “our”, is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data through our websites, enquiries and digital services, in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA).

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Your name, business name and business type.
• Email address and contact number.
• Existing website information.
• Enquiry messages and business requirements.
• Information and materials submitted during onboarding.
• Subscription, billing and transaction records.
• Communications relating to our services and support.

When you submit an enquiry, we may also record the submission date, originating page, consent information, the advertising campaign or website that referred you (if any), and a one-way hashed representation of your IP address for spam prevention.

If you contact us through email, WhatsApp or other communication channels, we may receive the information you choose to share.

3. How we use your information

We collect and use personal data to:

• Respond to enquiries and communicate with you.
• Understand your requirements and prepare quotations.
• Process subscriptions and manage billing.
• Develop, deliver and maintain subscribed services.
• Provide technical support and customer assistance.
• Protect our websites and systems from spam, fraud and misuse.
• Fulfil applicable legal, accounting and regulatory obligations.

We do not sell or rent your personal data.

Marketing communications will be sent in accordance with applicable consent and Do Not Call requirements. You may opt out of marketing communications at any time.

4. Consent and withdrawal

Where consent is required, we will obtain it before collecting, using or disclosing your personal data for the relevant purposes.

You may withdraw your consent by contacting us.

We will process your request within a reasonable period and explain any consequences that may affect our ability to provide services or meet legal obligations.

5. Sharing your information

We may share personal data with trusted service providers where necessary to operate our websites and deliver our services.

These may include:

• Cloudflare: Website hosting, infrastructure, security and enquiry data storage.
• Resend: Delivery of website enquiry notifications.
• Microsoft 365: Business email and communications.
• Relevant service providers: Payment processing, hosting, technical infrastructure or other services used to fulfil an agreed subscription.

We limit disclosure to what is reasonably necessary for the relevant purpose.

We may also disclose information where required or permitted by law.

6. Transfers outside Singapore

Some service providers may process or store personal data outside Singapore.

Where applicable, we take reasonable steps to ensure transferred personal data receives a standard of protection comparable to that required under the PDPA.

7. Data security

We implement reasonable technical and organisational safeguards to protect personal data against unauthorised access, disclosure, modification, loss and misuse.

These measures may include encrypted connections, access controls, security monitoring and anti-spam protections.

Where a data breach meets the applicable notification requirements under the PDPA, we will notify the Personal Data Protection Commission and affected individuals as required by law.

8. Data retention

We retain personal data only for as long as necessary for business, contractual and legal purposes.

Enquiry records for individuals who do not become customers are generally retained for up to two years after our last contact.

For customers, relevant subscription, service and transaction records may be retained during the service relationship and afterwards where required for legal, accounting or regulatory purposes.

Websites suspended for non-payment may be retained for up to ninety (90) days from the suspension date before removal, as described in our Terms & Conditions.

Certain business records may be retained separately where required by law.

When personal data is no longer required, we will securely delete or anonymise it.

9. Cookies and browser storage

Our websites may use cookies and browser storage for essential functionality, security and user experience.

Cloudflare may use necessary cookies to protect website access and security.

Interactive website demonstrations may store temporary preferences or changes locally in your browser.

When you arrive through an advertising or campaign link, we note the campaign details in that link (such as its source and campaign name) and the referring website in your browser for that visit. They are sent to us only if you submit an enquiry, so we can understand which campaigns bring enquiries.

We use Cloudflare Web Analytics to count visits and page views. It does not use cookies, does not store information on your device and does not track you across other websites.

Where third-party content, analytics or advertising services are used, their technologies and associated data handling will be disclosed as applicable.

10. Access and correction

You may request access to personal data we hold about you or ask us to correct inaccurate information.

We will respond in accordance with the PDPA, generally within thirty (30) calendar days, or inform you if additional time is required.

A reasonable administrative fee may apply to access requests where permitted by law. We will inform you of any applicable fee beforehand.

11. Customer website data

Where our services involve storing or processing information through a customer’s website, the handling of that information depends on the relevant service arrangements and the roles of the parties involved.

Customers remain responsible for ensuring that personal data they collect through their websites is handled in accordance with applicable data protection requirements.

Forcefield Design will handle personal data processed on behalf of customers according to applicable law and the agreed service arrangements.

12. Contact us

For questions, requests or complaints about personal data, please contact our Data Protection Officer using the contact details published on our website, or email [email protected] with the subject “Personal data request”.

You may also contact Singapore’s Personal Data Protection Commission at www.pdpc.gov.sg.

13. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, data handling practices or legal requirements.

The latest version will be published on our website with its effective date.