Privacy Policy

1. Overview

SGP Directory (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website or use our services. By using SGP Directory, you agree to the practices described in this policy.

2. Information We Collect

We may collect the following types of information:

• Usage Data: Pages visited, search queries entered, time spent on pages, referral URLs, and browser/device information collected via analytics tools.
• Account Information: If you register for an account or API access, we collect your email address and any profile information you provide.
• API Usage Logs: For API users, we log request metadata (timestamps, endpoints accessed, response codes) to enforce rate limits and monitor for abuse.

We do not collect sensitive personal information such as national identity numbers, financial account details, or health information.

3. How We Use Your Information

We use the information we collect to:

• Operate and improve the SGP Directory platform
• Respond to enquiries and provide customer support
• Monitor usage patterns to prevent abuse and ensure service reliability
• Send service-related communications (e.g., API key notifications)
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience and collect analytics data. This includes:

• Essential cookies: Required for the platform to function correctly (e.g., session management for console users).
• Functional cookies: Short-lived cookies (30-minute expiry) prefixed with vc_ used to deduplicate entity page view counts. These are set server-side, are not accessible to JavaScript, and contain no personal identifiers.
• Analytics cookies: Set by Google Tag Manager (container ID: GTM-PZJMJBW7) and Google Analytics to understand how visitors interact with our site. Google Analytics data is retained for up to 26 months in accordance with Google's default retention settings.

You can configure your browser to refuse cookies, though some features of the Service may not function correctly without them.

5. Data Sharing and Third Parties

We work with the following third-party service providers to operate the platform:

• Cloudflare — hosting infrastructure, edge network, and database services (Cloudflare Workers, D1, KV).
• Google (Tag Manager / Analytics) — website analytics and usage measurement.
• Resend — transactional email delivery (e.g., API key notifications, contact form replies).

These providers are contractually obligated to handle your data securely and only for the purposes we specify. We may also disclose information if required to do so by law or in response to valid legal requests from public authorities in Singapore.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law:

• API usage logs: up to 90 days.
• Account information: retained until you request deletion.
• Google Analytics data: up to 26 months (Google's default retention period).
• Functional cookies (vc_*): expire after 30 minutes.

7. Security

We implement industry-standard security measures to protect your information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

8. Your Rights

Under the Singapore Personal Data Protection Act (PDPA), you have the right to access and correct personal data that we hold about you. To exercise these rights, please contact us through the information provided on our website.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last updated” date at the top of this page. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

10. Contact

If you have any questions or concerns about this Privacy Policy, please reach out through the contact information provided on our website. For our terms governing use of the Service, please refer to our Terms of Service.