Privacy Policy

MemberGuard is a product of Magnified Technologies Pte. Ltd. ("Magnified", "we", "us"). This Privacy Policy explains how we handle personal data that we collect through the MemberGuard website at memberguard.co (the "Website") and our member management platform (the "Service"). We comply with Singapore's Personal Data Protection Act 2012 ("PDPA") in our handling of personal data.

This policy covers personal data of prospective customers, customers, and visitors to the Website. If you are a member of an organisation that uses MemberGuard as its member management platform, the organisation is the data controller for your data and its own privacy policy applies. This policy covers only the processing we do on our own behalf, or as a processor at the direction of that organisation.

Information we collect

We collect personal data in the following ways:

• Information you give us — name, email, organisation, phone number, and any other details you submit through our contact forms, demo requests, or sign-up flow
• Information we collect automatically — IP address, browser type, device information, pages viewed, referrer, and similar technical data via cookies and analytics
• Information from customers — if you are a member of an organisation that uses the Service, we process your data on the organisation's behalf as a data intermediary under the PDPA

How we use personal data

• To respond to enquiries and provide demos or quotes
• To deliver and improve the Service
• To send service notifications, security alerts, and customer support communications
• To send marketing communications — only with your consent, and you may withdraw at any time
• To comply with our legal obligations

Disclosure of personal data

We do not sell personal data. We disclose personal data only in these circumstances:

• To service providers who help us run the Website and Service (for example, cloud hosting, email delivery, analytics) — these providers are contractually bound to handle data confidentially and in line with the PDPA
• To payment processors, where a payment is made through the Service: AXS Pte Ltd (AXS Checkout) or Stripe, whichever the organisation has chosen. Each organisation uses its own account with that processor
• Where required by law, regulation, or a lawful request from a public authority
• In connection with a business transfer, merger, or acquisition, subject to appropriate confidentiality protections

Where data is stored

Data held in the Service, including members' personal data, is stored on Amazon Web Services in Singapore (ap-southeast-1), and email from the Service is sent through Amazon Web Services in Singapore.

International transfers

Some processing happens outside Singapore, and only for the purposes below:

• Stripe — if an organisation chooses Stripe for online payments, payments are processed by Stripe on infrastructure outside Singapore, under that organisation's own agreement with Stripe. Card details go directly from the payer to Stripe
• Xero — if an organisation connects its own Xero account, member names, email addresses, membership numbers and invoice and payment details are sent to Xero, which operates outside Singapore, as that organisation's own supplier
• Apple Wallet and Google Wallet — if a member chooses to add a membership card to their phone's wallet, the card's contents are sent to Apple or Google
• Website analytics and other service providers that help us run the Website

Where personal data is transferred outside Singapore, we take steps to ensure it receives protection comparable to the PDPA, through contractual safeguards and, where applicable, binding corporate rules or standard contractual clauses.

Retention

In line with Section 25 of the PDPA (the Retention Limitation Obligation), we cease to retain personal data, or anonymise it, as soon as it is reasonable to assume that the purpose for which the data was collected is no longer served by retention, and retention is no longer necessary for legal or business purposes.

In practice, we apply the following retention periods:

• Prospect and enquiry data — up to 24 months from your last meaningful interaction with us, then deleted or anonymised
• Customer account and member data — for the duration of your subscription; we retain data for 30 days after termination so you can export it, then delete production data
• Financial and billing records — 5 years, as required under the Income Tax Act 1947 and the Companies Act 1967
• Unsubscribe and consent withdrawal records — retained indefinitely, to demonstrate compliance with the PDPA and the Spam Control Act
• Backups — data in routine backups is purged on our ordinary rotation cycle (approximately 30 to 35 days) and is not actively accessible during that window

Where personal data must be retained to defend potential legal claims, we may retain it up to the limitation period of 6 years under the Limitation Act 1959.

Your rights under the PDPA

• Access — you may ask us what personal data we hold about you
• Correction — you may ask us to correct inaccurate data
• Withdrawal of consent — you may withdraw consent to our use of your data; some processing may continue where permitted by law
• Complaint — you may contact our Data Protection Officer or the Personal Data Protection Commission (PDPC)

Security

We apply reasonable security arrangements to protect personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These include encryption in transit and at rest, access controls, and regular review of our security practices.

Cookies

We use cookies for essential site functions and analytics. See our Cookie Policy for details.

Data Protection Officer

Our Data Protection Officer can be reached at hi@magnified.com.sg for any questions about this policy or requests relating to your personal data.

Changes to this policy

We may update this policy from time to time. Material changes will be notified on the Website and, where appropriate, by email. The "last updated" date at the top shows when the policy was last revised.