Privacy Policy

MemberGuard is a product of Magnified Technologies Pte. Ltd. ("Magnified", "we", "us"). This Privacy Policy explains how we handle personal data that we collect through the MemberGuard website at memberguard.co (the "Website") and our member management platform (the "Service"). We comply with Singapore's Personal Data Protection Act 2012 ("PDPA") in our handling of personal data.

This policy covers personal data of prospective customers, customers, and visitors to the Website. If you are a member of an organisation that uses MemberGuard as its member management platform, the organisation is the data controller for your data and its own privacy policy applies. This policy covers only the processing we do on our own behalf, or as a processor at the direction of that organisation.

Information we collect

We collect personal data in the following ways:

• Information you give us — name, email, organisation, phone number, and any other details you submit through our contact forms, demo requests, or sign-up flow
• Information we collect automatically — IP address, browser type, device information, pages viewed, referrer, and similar technical data via cookies and analytics
• Information from customers — if you are a member of an organisation that uses the Service, we process your data on the organisation's behalf as a data intermediary under the PDPA

How we use personal data

• To respond to enquiries and provide demos or quotes
• To deliver and improve the Service
• To send service notifications, security alerts, and customer support communications
• To send marketing communications — only with your consent, and you may withdraw at any time
• To comply with our legal obligations

Disclosure of personal data

We do not sell personal data. We disclose personal data only in these circumstances:

• To service providers who help us run the Website and Service (for example, cloud hosting, email delivery, analytics) — these providers are contractually bound to handle data confidentially and in line with the PDPA
• To payment processors, where you make a payment
• Where required by law, regulation, or a lawful request from a public authority
• In connection with a business transfer, merger, or acquisition, subject to appropriate confidentiality protections

International transfers

Some of our service providers may process data outside Singapore. Where this is the case, we ensure equivalent protection to Singapore's PDPA through contractual safeguards and, where applicable, binding corporate rules or standard contractual clauses.

Retention

In line with Section 25 of the PDPA (the Retention Limitation Obligation), we cease to retain personal data, or anonymise it, as soon as it is reasonable to assume that the purpose for which the data was collected is no longer served by retention, and retention is no longer necessary for legal or business purposes.

In practice, we apply the following retention periods:

• Prospect and enquiry data — up to 24 months from your last meaningful interaction with us, then deleted or anonymised
• Customer account and member data — for the duration of your subscription; we retain data for 30 days after termination so you can export it, then delete production data
• Financial and billing records — 5 years, as required under the Income Tax Act 1947 and the Companies Act 1967
• Unsubscribe and consent withdrawal records — retained indefinitely, to demonstrate compliance with the PDPA and the Spam Control Act
• Backups — data in routine backups is purged on our ordinary rotation cycle (approximately 30 to 35 days) and is not actively accessible during that window

Where personal data must be retained to defend potential legal claims, we may retain it up to the limitation period of 6 years under the Limitation Act 1959.

Your rights under the PDPA

• Access — you may ask us what personal data we hold about you
• Correction — you may ask us to correct inaccurate data
• Withdrawal of consent — you may withdraw consent to our use of your data; some processing may continue where permitted by law
• Complaint — you may contact our Data Protection Officer or the Personal Data Protection Commission (PDPC)

Security

We apply reasonable security arrangements to protect personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These include encryption in transit and at rest, access controls, and regular review of our security practices.

Cookies

We use cookies for essential site functions and analytics. See our Cookie Policy for details.

Data Protection Officer

Our Data Protection Officer can be reached at hi@magnified.com.sg for any questions about this policy or requests relating to your personal data.

Changes to this policy

We may update this policy from time to time. Material changes will be notified on the Website and, where appropriate, by email. The "last updated" date at the top shows when the policy was last revised.