Privacy Policy

1. Introduction and Scope

Verticle Pte. Ltd. (UEN: 202627719N) (UEN: [UEN]) ("Verticle", "we", "our", "us"), incorporated in Singapore, is committed to protecting the personal data of all individuals who interact with us. This Privacy Policy governs the collection, use, disclosure, retention, and protection of personal data in connection with our website at verticle.com.sg, our software products and services, and all related business activities. This Policy is made in compliance with the Personal Data Protection Act 2012 (No. 26 of 2012) of Singapore ("PDPA") and its associated regulations and advisory guidelines. By accessing our website or engaging our services, you acknowledge that you have read, understood, and agreed to this Policy. If you do not agree with any part of this Policy, you must not use our website or services.

2. Personal Data We Collect

We collect personal data that you voluntarily provide to us, including but not limited to: your full name, company name and UEN, email address, telephone number, job title, and business address. We also collect data automatically when you access our website, including your IP address, browser type and version, operating system, referring URL, pages visited, time and date of access, and session duration. This technical data is collected through cookies and standard server logging. We do not collect sensitive personal data as defined under the PDPA unless expressly required and with your explicit consent.

3. Purpose of Collection and Use

We collect and use your personal data only for purposes that a reasonable person would consider appropriate in the circumstances, including: responding to your enquiries and service requests; providing, managing, and improving our products and services; processing your enrolment in the Verticle Growth Package and managing your account; preparing and issuing certifications and publications on your behalf; sending you communications you have consented to receive; conducting internal analytics to improve our website and services; and complying with our legal, regulatory, and contractual obligations. We will not use your personal data for any purpose that is incompatible with the purposes stated above without first obtaining your consent.

4. Disclosure to Third Parties

We do not sell, rent, trade, or otherwise transfer your personal data to third parties for commercial gain. We may disclose your personal data to: Data Bureau (Singapore), in connection with the processing of Certification of Verified Business Entity applications on your behalf; third-party service providers engaged by Verticle to assist in delivering our services, subject to contractual obligations of confidentiality and data protection no less stringent than those set out in this Policy; regulatory or government authorities where required by law, court order, or lawful authority; and any successor entity in the event of a merger, acquisition, or transfer of business, subject to equivalent data protection commitments. We require all third parties to whom we disclose personal data to treat it with the same level of protection as set out in this Policy.

5. Retention of Personal Data

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. Once personal data is no longer required for any business or legal purpose, we will securely destroy, delete, or anonymise it in accordance with our internal data retention procedures. Client records are retained for a minimum of 5 years from the date of last engagement, in compliance with applicable commercial and regulatory requirements in Singapore.

6. Protection of Personal Data

We implement and maintain reasonable technical, administrative, and physical security measures to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include, but are not limited to, access controls, encryption, secure server infrastructure, and staff training on data protection obligations. However, no method of transmission over the internet or electronic storage is completely secure. While we endeavour to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is notifiable under the PDPA, we will take all steps required by law, including notifying the Personal Data Protection Commission and affected individuals where applicable.

7. Your Rights Under the PDPA

Under the PDPA, you have the right to: (a) access personal data about yourself that is in our possession or control; (b) correct any personal data about yourself that is inaccurate, incomplete, misleading, or not up to date; and (c) withdraw consent for our use of your personal data, subject to legal or contractual restrictions. Requests to exercise any of these rights must be submitted in writing to [email protected]. We will respond to all valid requests within 30 calendar days. We reserve the right to charge a reasonable administrative fee for access requests in accordance with the PDPA. We may decline requests in circumstances permitted by law, including where compliance would reveal personal data of another individual or would interfere with legal proceedings.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and support the functioning of our website. Cookies are small text files placed on your device. By continuing to use our website, you consent to our use of cookies in accordance with this Policy. You may disable or delete cookies through your browser settings at any time, though doing so may affect the functionality of certain parts of our website. We do not use cookies to collect personally identifiable information without your consent.

9. Links to Third-Party Websites

Our website may contain links to third-party websites that are not operated or controlled by Verticle. The inclusion of any link does not imply endorsement, approval, or control by Verticle of the linked website or its content. This Policy does not apply to third-party websites. We strongly encourage you to review the privacy policies of any third-party websites you visit. Verticle accepts no liability for the privacy practices or content of third-party websites.

10. Transfer of Personal Data Outside Singapore

Where we transfer personal data to recipients outside Singapore, we will ensure that the recipient provides a standard of protection comparable to the protection afforded under the PDPA, in accordance with Section 26 of the PDPA and any applicable advisory guidelines issued by the Personal Data Protection Commission.

11. Changes to This Policy

Verticle Pte. Ltd. reserves the right to update, amend, or replace this Privacy Policy at any time. Any changes will be published on this page with an updated effective date. Your continued use of our website or services following the posting of any changes constitutes your acceptance of those changes. We encourage you to review this Policy periodically.

12. Governing Law and Jurisdiction

This Privacy Policy is governed by and shall be construed in accordance with the laws of Singapore. Any dispute arising from or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Singapore.

13. Contact and Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us at:

Verticle Pte. Ltd. 35 Kallang Pudding Road, Blk A #05-01, Singapore (349314) [email protected] +65 9178 0146

We will acknowledge receipt of all written data protection enquiries within 3 business days.