EverAfter

Privacy Policy

Last updated: December 2024

1. Introduction

EverAfter Pte. Ltd. ("EverAfter", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in compliance with Singapore's Personal Data Protection Act 2012 ("PDPA") and other applicable laws.

By using our website, mobile application, or services (collectively, the "Platform"), you consent to the collection, use, and disclosure of your personal data as described in this Privacy Policy.

2. Key Definitions

  • "Personal Data" means data about an individual who can be identified from that data or from that data and other information
  • "Processing" means any operation performed on personal data, including collection, use, disclosure, and storage
  • "Platform" means EverAfter's website, mobile application, and related services
  • "Services" means the wedding vendor matching and related services we provide

3. Data Controller Information

EverAfter Pte. Ltd.
Company Registration Number: [Registration Number]
Address: [Company Address]
Email: privacy@everafter.sg
Phone: +65 [Phone Number]

4. Personal Data We Collect

4.1 Information You Provide Directly

We collect personal data when you:

  • Create an account on our Platform
  • Complete your profile or preferences
  • Contact vendors through our Platform
  • Submit vendor applications
  • Contact our customer support
  • Subscribe to our newsletter or marketing communications

This may include:

  • Contact Information: Name, email address, phone number
  • Profile Information: Wedding date, location, budget, style preferences
  • Account Information: Username, password, account settings
  • Communication Data: Messages, inquiries, support requests
  • Business Information: (For vendors) Business name, services, portfolio, pricing

4.2 Information We Collect Automatically

When you use our Platform, we automatically collect:

  • Technical Information: IP address, browser type, device information, operating system
  • Usage Data: Pages visited, time spent, features used, click patterns
  • Location Data: General location based on IP address (with consent for precise location)
  • Cookies and Tracking Data: As described in our Cookie Policy

4.3 Information from Third Parties

We may receive personal data from:

  • Social Media Platforms: When you connect your social media accounts
  • Analytics Providers: To understand Platform usage and performance
  • Marketing Partners: For lead generation and advertising effectiveness
  • Payment Processors: For transaction processing (if applicable)

5. Legal Basis for Processing (PDPA Compliance)

Under Singapore's PDPA, we process your personal data based on:

5.1 Consent

We obtain your consent for:

  • Marketing communications and promotional materials
  • Use of cookies and tracking technologies
  • Sharing your contact information with matched vendors
  • Processing sensitive personal data (if any)

5.2 Legitimate Interests

We may process your data for legitimate business interests, including:

  • Providing and improving our Services
  • Ensuring Platform security and preventing fraud
  • Analyzing usage patterns and user behavior
  • Developing new features and services

5.3 Contractual Necessity

We process data necessary to:

  • Provide our Services as agreed in our Terms and Conditions
  • Manage your account and relationship with us
  • Process transactions and provide customer support

5.4 Legal Compliance

We process data to:

  • Comply with Singapore laws and regulations
  • Respond to legal requests and court orders
  • Protect our legal rights and interests

6. How We Use Your Personal Data

6.1 Primary Purposes

We use your personal data to:

  • Provide Services: Match you with suitable vendors based on your preferences
  • Account Management: Create and maintain your account and profile
  • Communication: Send service-related notifications and respond to inquiries
  • Customer Support: Provide assistance and resolve issues
  • Platform Improvement: Analyze usage to enhance user experience and functionality

6.2 Secondary Purposes (With Consent)

With your consent, we may also use your data for:

  • Marketing: Send promotional materials, newsletters, and updates about our Services
  • Personalization: Customize content and recommendations based on your preferences
  • Research: Conduct surveys and market research to improve our Services
  • Analytics: Generate insights about user behavior and Platform performance

7. How We Share Your Personal Data

7.1 Vendor Matching

When you express interest in a vendor, we share your:

  • Contact information (name, email, phone)
  • Wedding requirements and preferences
  • Budget range (if provided)
  • Wedding date and location

7.2 Service Providers

We may share your data with trusted third parties who provide services on our behalf:

  • Technology Providers: Web hosting, data storage, and Platform maintenance
  • Analytics Companies: To understand user behavior and improve our Services
  • Customer Support Tools: To provide efficient customer service
  • Marketing Services: For email campaigns and advertising (with consent)

7.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the new entity, subject to the same privacy protections.

7.4 Legal Requirements

We may disclose your data if required by:

  • Singapore law or regulation
  • Court orders or legal proceedings
  • Government authorities or regulatory bodies
  • Protection of our legal rights or safety

7.5 Data We Do Not Share

We do not sell, rent, or trade your personal data to third parties for their marketing purposes without your explicit consent.

8. Data Retention

8.1 Retention Periods

We retain your personal data for as long as:

  • Your account remains active
  • Necessary to provide our Services
  • Required by Singapore law or regulation
  • Needed to resolve disputes or enforce our agreements

8.2 Specific Retention Periods

  • Account Data: Retained while account is active plus 2 years after deletion
  • Communication Records: Retained for 3 years for customer service purposes
  • Marketing Data: Retained until you unsubscribe or withdraw consent
  • Legal Documents: Retained for 7 years as required by Singapore law

8.3 Data Deletion

After the retention period expires, we securely delete or anonymize your personal data unless:

  • Legal obligations require longer retention
  • Data is needed for legitimate business purposes
  • You have consented to longer retention

9. Your Rights Under Singapore PDPA

9.1 Access Rights

You have the right to:

  • Request access to your personal data we hold
  • Obtain a copy of your personal data
  • Understand how your data is being processed

9.2 Correction Rights

You can:

  • Request correction of inaccurate personal data
  • Update your account information at any time
  • Ask us to complete incomplete data

9.3 Withdrawal of Consent

You may:

  • Withdraw consent for marketing communications
  • Opt out of non-essential data processing
  • Modify your privacy preferences

9.4 Data Portability

Upon request, we will provide your personal data in a structured, commonly used format for transfer to another service provider.

9.5 Exercising Your Rights

To exercise these rights, contact us at:

  • Email: privacy@everafter.sg
  • Online: Through your account settings
  • Mail: [Company Address]

We will respond to your request within 30 days as required by the PDPA.

10. Data Security

10.1 Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

  • Encryption: Data is encrypted in transit and at rest
  • Access Controls: Limited access to personal data on a need-to-know basis
  • Security Monitoring: Regular monitoring for unauthorized access or breaches
  • Staff Training: Regular training on data protection and security practices

10.2 Data Breach Response

In the event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify the Personal Data Protection Commission (PDPC) within 72 hours
  • Inform affected individuals without undue delay
  • Take immediate steps to mitigate the breach
  • Conduct a thorough investigation and implement corrective measures

10.3 International Transfers

If we transfer your personal data outside Singapore, we ensure adequate protection through:

  • Adequacy decisions by Singapore authorities
  • Standard contractual clauses approved by the PDPC
  • Certification schemes and codes of conduct
  • Your explicit consent for the transfer

11. Cookies and Tracking Technologies

11.1 Types of Cookies

We use various types of cookies:

  • Essential Cookies: Necessary for Platform functionality
  • Performance Cookies: Help us understand how you use our Platform
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Used for advertising and marketing purposes (with consent)

11.2 Cookie Management

You can manage cookies through:

  • Your browser settings
  • Our cookie preference center
  • Third-party opt-out tools

For detailed information, please refer to our Cookie Policy.

12. Third-Party Links and Services

Our Platform may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those external sites or services. We encourage you to review their privacy policies before providing any personal data.

13. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information.

14. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by:

  • Posting the updated policy on our Platform
  • Sending email notification to registered users
  • Displaying a prominent notice on our Platform

Your continued use of our Platform after the effective date constitutes acceptance of the updated Privacy Policy.

15. Contact Information

For questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

Data Protection Officer
EverAfter Pte. Ltd.
Email: privacy@everafter.sg
Address: [Company Address]
Phone: +65 [Phone Number]

Complaints
If you believe we have not handled your personal data properly, you may file a complaint with:

  • EverAfter's Data Protection Officer (contact details above)
  • Personal Data Protection Commission Singapore: https://www.pdpc.gov.sg

16. Language

This Privacy Policy is written in English. In case of any discrepancy between the English version and any translated version, the English version shall prevail.

This Privacy Policy is effective as of [Date] and governs the collection, use, and disclosure of personal data by EverAfter Pte. Ltd.