Privacy Policy

1.Introduction

This Privacy Policy explains how Wonder Capital Pte Ltd ("Company", "we", "us", or "our") collects, uses, discloses, and protects personal data when you visit our website, contact us, or engage our services.

We handle personal data in accordance with the Personal Data Protection Act 2012 of Singapore (PDPA). By using our website or providing personal data to us, you consent to the collection, use, and disclosure of your personal data as described in this Policy.

2.Personal Data We Collect

We may collect the following personal data:

• Contact details, such as your name, work email address, telephone number, and company name.
• Project information you share with us, such as project requirements, briefs, and correspondence.
• Billing and business details needed to issue quotations, contracts, and invoices.
• Technical information sent automatically by your browser when you visit our website, such as your IP address, browser type, device type, and pages viewed.

We only collect personal data that is reasonably necessary for the purposes set out in this Policy.

3.How We Collect Personal Data

We collect personal data when you:

• Submit an enquiry or project brief through our website.
• Contact us by email, telephone, messaging, or in person.
• Request a quotation, sign a service agreement, or make payment.
• Visit and browse our website.

4.Purposes of Use

We use personal data to:

• Respond to enquiries and prepare quotations and proposals.
• Plan, deliver, and support the services you engage us for.
• Communicate with you about your project, including updates, approvals, and support requests.
• Issue invoices, process payments, and maintain business records.
• Operate, secure, and improve our website.
• Comply with legal, regulatory, and accounting obligations.

We will not use your personal data for marketing purposes without your consent, and you may withdraw that consent at any time.

5.Disclosure of Personal Data

We do not sell personal data. We may disclose personal data only where reasonably necessary to:

• Service providers who support our operations, such as website hosting, email, cloud storage, and payment processing providers, subject to appropriate confidentiality and security obligations.
• Third-party platforms engaged for your project, such as domain registrars, hosting providers, or payment gateways, where this is required to deliver the agreed services.
• Professional advisers, such as accountants, auditors, and lawyers.
• Government or regulatory authorities, where required or permitted by law.

6.Personal Data Processed on Behalf of Clients

Where we build or maintain a website or system that collects personal data of a Client's own customers or users, we process that data on the Client's behalf and in accordance with the Client's instructions. The Client remains responsible for its own privacy notice and for obtaining any necessary consents. Processing instructions and security responsibilities are agreed with the Client for each project, as set out in our Terms & Conditions.

7.Cookies and Third-Party Resources

Our website does not use advertising or tracking cookies. To display the website correctly, our pages load fonts and icons from third-party providers (Google Fonts and cdnjs), which receive your IP address and browser information when your browser requests these resources. Our hosting provider may also keep standard server logs for security and operational purposes.

If we introduce analytics or other cookies in the future, we will update this Policy accordingly.

8.Transfers Outside Singapore

Some of our service providers may store or process personal data outside Singapore. Where personal data is transferred overseas, we take reasonable steps to ensure that it receives a standard of protection comparable to that under the PDPA.

9.Protection of Personal Data

We make reasonable security arrangements to protect personal data in our possession or control against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. However, no method of transmission over the internet or electronic storage is completely secure.

10.Retention of Personal Data

We retain personal data only for as long as it is needed for the purposes for which it was collected, or as required for legal, regulatory, accounting, or business purposes. When personal data is no longer needed, we will securely delete or anonymise it.

11.Your Rights

Subject to the PDPA, you may:

• Request access to the personal data we hold about you and information on how it has been used or disclosed in the past year.
• Request correction of any error or omission in your personal data.
• Withdraw your consent to the collection, use, or disclosure of your personal data.

Withdrawing consent may affect our ability to provide services to you, and we will explain the likely consequences before acting on your request. We will respond to requests within a reasonable time and may charge a reasonable fee for access requests, as permitted by law.

12.Data Breach Notification

If a data breach occurs that is likely to result in significant harm to affected individuals, we will notify the Personal Data Protection Commission and the affected individuals as required under the PDPA.

13.Contact Us

For questions, access or correction requests, or to withdraw consent, please contact our Data Protection Officer:

14.Changes to This Policy

We may update this Privacy Policy from time to time. The updated Policy will be published on this page with a revised effective date.