Privacy Policy

1. Two roles we play

When the data is ours to decide about. For people who visit our website, request a trial, contact us, or hold a Pagsun Green user account, we decide why and how the personal data is used. This policy applies in full.

When we hold data for our customers. Organisations that subscribe to Pagsun Green (“Customers”) store their own records in it: their clients, properties, trees, assessments, photos, reports, quotations, purchase orders and, if they use the HR module, their employees' records. For this “Customer Data” the Customer decides what is collected and why, and we process it only on their behalf and on their instructions, as a data intermediary under the PDPA. If your personal data is in a Customer's records, for example as their employee or their client, please contact that organisation first. We will help them answer your request.

2. Personal data we collect

When you request a free trial

• Your name, work email, phone number, company name and business address.
• What you tell us about your business, such as team size, number of sites and any notes.
• How you found us: campaign tags (UTM parameters), referral codes, the website that linked to us and the page you landed on.

When you use Pagsun Green

• Account details: your name, email address, phone number, role and the organisation you belong to.
• Profile details you choose to add for your reports, such as professional certification numbers, badges and a signature image.
• Location: when you use a feature that asks for it, such as placing a tree, mapping a site or recording attendance, your device's location is used for that feature. Photos you upload may contain the time and place they were taken.
• Technical data: sign-in and security logs, browser and device type, and anonymous performance measurements.

When you contact us

• What you send us by email, WhatsApp or other channels, and our replies.

3. How we use it

• To set up and run your trial and your subscription, and to provide the Service.
• To sign you in, keep accounts secure, and prevent spam, fraud and abuse.
• To answer your questions and give support.
• To bill Customers and keep business and tax records.
• To understand how people find us and to improve the Service.
• To send you news about Pagsun products, only where you have agreed to it. You can stop these at any time.
• To meet our legal obligations and protect our rights.

We collect, use and disclose personal data with your consent, or where the PDPA otherwise allows it, such as when it is needed to provide something you asked for or for our legitimate interests. You may withdraw your consent at any time by writing to us (see section 10). We will tell you what that means for the Service before acting on it; for example, we cannot run an account without an email address.

We do not sell personal data, and we do not use Customer Data to advertise.

4. Who we share it with

We share personal data only with service providers who help us run the Service, under contracts that require them to protect it and use it only for us:

• Cloud hosting and database providers: to host the Service and store its data and files.
• Security and anti-spam services: to check that forms are sent by a person, not a bot. They receive your IP address and browser signals for that check.
• Map and satellite imagery providers: your browser requests map images from them for the area you are viewing.
• Email and communication providers: to send and receive messages.

We choose these providers carefully and remain responsible for how they handle your personal data. Customers who need to review the providers that process their data, for their own compliance, may ask us for the list under a confidentiality agreement.

We may also disclose personal data when the law requires it, to protect people or our rights, or to a buyer or successor if our business is reorganised or sold, who must then protect it as this policy does.

5. Where your data is kept

Primary location: Singapore. Our database, file storage and application servers run in Singapore.

Disaster recovery copies: European Union or United States. So that the Service can be restored after a serious outage or disaster, we keep a mirrored copy of the database and stored files in the European Union or the United States. These copies are used only to recover the Service, not for day-to-day operation.

Other transfers. Our content delivery network may serve pages from a location near you. Security checks on forms and map imagery are handled by providers outside Singapore.

Whenever personal data leaves Singapore, we make sure it is protected to a standard comparable to the PDPA, through contractual obligations with each provider and the same security controls that apply in Singapore.

6. How long we keep it

We keep personal data only as long as it is needed for the purposes above or required by law. Trial requests that do not become customers are deleted or anonymised when they are no longer needed. Customer Data is kept for the length of the subscription and then deleted or returned as set out in our Terms of Service. Billing records are kept for as long as Singapore law requires.

7. How we protect it

Access to data is checked on our servers for every request, and each organisation can see only its own records. Data is encrypted in transit, photos and documents are kept in private storage reached through short-lived links, and staff access is limited to what their work needs. No system is perfectly secure, but we work to keep the risk low.

If a data breach is likely to cause significant harm, or affects a large number of people, we will notify the Personal Data Protection Commission and, where required, the people affected, as the PDPA requires. Where Customer Data is involved, we will tell the Customer without undue delay so they can do the same.

8. Cookies and similar technologies

We use only what the Service needs to work:

• Sign-in cookies that keep you logged in.
• Your theme choice, remembered in your browser.
• How you arrived at our site (campaign tags and referrer), kept in your browser for that visit only and sent to us when you request a trial.

We do not use advertising cookies or cross-site tracking.

9. Children

The Service is for businesses and is not meant for children. We do not knowingly collect personal data from anyone under 18.

10. Your choices and rights

Under the PDPA, you may ask us to:

• give you access to the personal data we hold about you and how it has been used;
• correct personal data that is wrong or incomplete; and
• stop using your personal data for a purpose you have consented to.

Write to green@pagsun.com. We may need to confirm your identity first. We aim to respond within 30 days, and will tell you if we need longer. We may charge a reasonable fee for an access request, and will tell you the amount before we start.

11. Changes to this policy

We may update this policy as the Service or the law changes. The date at the top shows the latest version. If a change is significant, we will tell account holders by email or in the Service before it takes effect.

12. Contact us

Questions, requests and complaints about personal data go to our Data Protection Officer:

Data Protection Officer, Pagsun Pte. Ltd.
320 Serangoon Road, #10-09, Centrium Square, Singapore 218108
Email: green@pagsun.com

If you are not satisfied with our reply, you may contact Singapore's Personal Data Protection Commission.