Privacy Policy

On this page

• Who we are
• What we collect
• Why we use it
• WhatsApp, SMS and email
• Who handles data for us
• Data stored outside Singapore
• Data we handle for our clients
• AI tools
• Cookies and logs
• How long we keep it
• Keeping it safe
• Your rights
• Children
• Changes
• Contact and complaints

Who we are

Nasar Digital is the trading name of Nasar Pte Ltd (UEN 202534841E), a company registered in Singapore at 114 Lavender Street #07-83, CT Hub 2, Singapore 338729. In this policy, "we", "us" and "our" mean Nasar Pte Ltd.

This policy explains what personal data we collect through nasardigital.com, our forms, booking pages, messages and client work, and how we look after it under Singapore's Personal Data Protection Act 2012 (PDPA). Personal data means any information that can identify you, such as your name, phone number or email address.

What we collect, and when

Things you give us

• Enquiry and booking forms: your name, business name, phone number, email address, and what you tell us about your business.
• Booking a call: your name, email, phone number and the time you choose.
• Newsletter (The Playbook) and free growth diagnostic: your email address, and your diagnostic answers and result if you ask us to send it to you.
• "Prefer to type it out?" form: your name, business name and message. This form opens WhatsApp with your message ready, and you choose whether to send it.
• WhatsApp, SMS, email and phone calls: what you send us, and a record of our conversation.
• Client work: when you hire us, your business details, billing contact, logins and access you share, and the content and files we need to do the work.
• Payments: your name, billing details and payment reference. Card details are handled by our payment providers. We do not see or store your full card number.

Things collected automatically

• Server logs: like every website, our host records basic technical data such as your IP address, browser type, the page you visited and the time. We use this only to keep the site running and secure.
• Form and message records: when you fill in one of our forms or reply to a message, our customer system records the date, time and source (for example, which form or ad you came from) and whether you opted in or out.

We may also note information that is already public, such as your business website, Google Business Profile and public reviews, when we prepare a review or proposal for your business.

Why we use it

• To reply to your enquiry, arrange calls and send you what you asked for.
• To prepare quotes, proposals and agreements.
• To deliver, support and report on the work you hire us for.
• To send reminders, updates and follow-ups about an enquiry or project you started.
• To send you marketing, such as the newsletter or offers, only if you agreed to it.
• To invoice you, take payment and keep proper business and tax records.
• To keep our website and systems secure, and to meet our legal obligations.

We only use your data for these purposes, or for another purpose we tell you about and you agree to. We never sell personal data.

WhatsApp, SMS and email

When you fill in a form, book a call or message us, you agree that we can contact you by WhatsApp, SMS, email or phone about that enquiry. If you tick a box or otherwise agree to marketing, we may also send you occasional tips, news and offers.

• What you get: replies to your enquiry, booking confirmations and reminders, project updates, invoices and receipts, and marketing only if you opted in.
• How often: it depends on your enquiry or project. Marketing messages are usually no more than a few a month.
• Opt out at any time: reply STOP to any SMS or WhatsApp message, click "unsubscribe" in any email, or email hello@nasardigital.com. Reply HELP for help. We act on opt-outs promptly, and confirm by one final message.
• Costs: message and data rates from your mobile provider may apply.
• Do Not Call Registry: we check Singapore's DNC Registry before sending marketing to a Singapore number, unless you have given us clear consent or we already have an ongoing relationship with you as the PDPA allows.

After you opt out of marketing, we may still contact you about work in progress, invoices or your account.

Your phone number stays with us. We do not share or sell mobile numbers or SMS opt-in consent with third parties or affiliates for their marketing or promotional purposes. Text messaging opt-in data and consent are excluded from every kind of sharing described in this policy. They are only handled by the service providers that send the messages for us.

Who handles data for us

We use trusted service providers to run our business. They handle personal data only on our instructions and only for the purposes in this policy.

• HighLevel, Inc. (USA): our customer system for enquiries, forms, bookings, WhatsApp, SMS and email messages, and reviews. Data is stored in the United States.
• Meta (WhatsApp): carries WhatsApp messages.
• Hostinger: hosts this website.
• EmailJS: delivers newsletter sign-ups and diagnostic results to our inbox.
• TidyCal: handles some call bookings.
• Stripe and HitPay: process card and online payments.
• Xero: our accounting and invoicing system.
• BreezeDoc: e-signing for proposals and agreements.
• Google Fonts and jsDelivr: supply fonts and code to your browser. They see your IP address, as any website you load does.

We may also share personal data with our professional advisers (such as our accountant or lawyer), or when the law requires it. If Nasar Pte Ltd or its business is ever sold or merged, personal data may pass to the new owner, who must keep protecting it under this policy.

Data stored outside Singapore

Some of our providers store data outside Singapore, mainly in the United States. When this happens, we take steps under the PDPA to make sure your data gets protection comparable to the PDPA, for example by choosing providers with recognised security standards and contract terms that protect personal data.

Data we handle for our clients

When we build or run websites, forms, chat, booking or messaging systems for a client, we may handle personal data about that client's own customers. In that case, the client decides how the data is used and is responsible for it under the PDPA, and we act on the client's instructions as their service provider (a "data intermediary"). If you are a customer of one of our clients, please contact that business first about your data. We will help them answer you.

AI tools

We use AI tools to help us draft copy, summarise meeting notes and handle routine admin. A person on our team reviews AI output before it is used, and no decision that significantly affects you is made by AI alone. We avoid putting sensitive personal data, such as NRIC numbers or financial details, into AI tools.

Cookies and logs

This website does not use advertising trackers or analytics cookies. Forms, chat and booking pages that run on our customer system may use cookies that are needed for them to work, such as remembering that you already filled in a form. If we add analytics or advertising cookies later, we will update this policy first.

How long we keep it

• Enquiries that do not become work: up to 2 years after our last contact, then deleted, unless you ask us to delete them sooner.
• Client records, invoices and agreements: at least 5 years, as Singapore law requires for business and tax records.
• Logins and access you shared: removed or handed back when the work or care plan ends.
• Marketing opt-outs: we keep a note of your number or email on our do-not-contact list, so we do not message you again by mistake.

Keeping it safe

We take reasonable steps to protect personal data from loss, misuse and unauthorised access. These include two-step login on our main systems, giving access only to the people who need it, and sharing client logins only with the people doing the work.

No system is completely secure. If a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commission as the PDPA requires.

Your rights

• See your data: ask what personal data we hold about you and how we have used it in the past year.
• Correct it: ask us to fix anything wrong or out of date.
• Withdraw consent: ask us to stop using your data. We will tell you what that means for any work in progress, then stop.
• Stop marketing: opt out at any time, as explained above.

Write to hello@nasardigital.com. We may ask you to confirm who you are first. We reply within 30 days. If we need longer, we will tell you why and when to expect an answer. We do not charge for correcting data. For a large access request, we may charge a reasonable fee and will tell you the amount first.

Children

Our services are for businesses and adults. We do not knowingly collect personal data from anyone under 18 without a parent's or guardian's consent.

Changes to this policy

If we change this policy, we will update this page and the date at the top. If a change is significant, we will also tell clients and subscribers by email or message.

Contact and complaints

Data Protection Officer: Muhammad Aarif Bin Raziff
Email: hello@nasardigital.com
Post: Nasar Pte Ltd, 114 Lavender Street #07-83, CT Hub 2, Singapore 338729

If you are unhappy with how we handled your data, please tell us first so we can put it right. We will look into it and reply in writing. You can also contact the Personal Data Protection Commission (PDPC).

See also our Terms and Conditions and Acceptable Use Policy.