Privacy Policy | SG Domain Registry

Singapore Domain Registration ("we", "our", "us") is committed to protecting the privacy of our customers and users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).

1. Data We Collect

When you use our services, we may collect the following personal data:

Account information - name, email address, password (hashed)
Registrant details - full legal name, NRIC/FIN/UEN, mailing address, phone number (required for .sg domain registration by SGNIC)
Billing information - payment card details (processed securely by Stripe - we do not store card numbers)
Communication records - support tickets and replies
Technical data - IP address, browser type, access logs

2. How We Use Your Data

We use your personal data to:

Process domain registrations, renewals, and transfers
Submit required registrant information to SGNIC for .sg domains
Send transactional emails (order confirmations, renewal reminders, support replies)
Provide customer support
Comply with legal and regulatory obligations
Improve our platform and services

3. Disclosure to Third Parties

We do not sell your personal data. We may share it with:

SGNIC - registrant details are required for .sg domain registration and appear in the public WHOIS database unless WHOIS Privacy is enabled
Stripe - payment processing (governed by Stripe's own privacy policy)
Hosting and infrastructure providers - solely for service delivery
Legal authorities - when required by Singapore law

4. WHOIS Privacy

By default, your registrant contact details are published in the public WHOIS database as required by SGNIC policy. You may enable WHOIS Privacy from your dashboard to replace your personal details with proxy information. Note that SGNIC may still require disclosure of registrant details in cases of legal dispute or abuse.

5. Data Retention

We retain your personal data for as long as your account is active or as required to fulfil our legal obligations. Domain registration records may be retained for up to 7 years after expiry in compliance with SGNIC requirements.

6. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords, and access controls. Payment data is handled exclusively by Stripe and is never stored on our servers.

7. Your Rights Under PDPA

You have the right to:

Access your personal data held by us
Correct inaccurate personal data
Withdraw consent for non-essential data processing
Request deletion of your data (subject to legal retention requirements)

To exercise these rights, contact us at support@singaporedomainregistration.com.

8. Cookies

We use session cookies required for authentication and CSRF protection. We do not use third-party tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related enquiries, contact our Data Protection Officer at support@singaporedomainregistration.com.