Privacy Policy

1. Who we are

This Privacy Policy describes how impactnet (“impactnet”, “we”, “us”, “our”) collects, uses, and protects personal data in connection with the website at www.impactnetsg.com and our services (Emplace and Empower). impactnet is based in Singapore. This policy is written to comply with the Personal Data Protection Act 2012 (“PDPA”) and is administered by our designated Data Protection Officer, contactable at info@impactnetsg.com.

2. What we collect

When you use the contact form on this website, we collect the personal data you choose to provide:

• Your name
• Your email address
• The category you select (Student, Social Service Agency, Partner, Other)
• The contents of your message

We do not collect any sensitive personal data (as defined under the PDPA) through this website.

3. Why we collect it

We use the personal data you provide solely to:

• Respond to your inquiry, feedback, or partnership request
• Add you to the Emplace waitlist if you have asked to be notified at launch
• Communicate with social service agencies who have expressed interest in early access to Empower

We will not use your personal data for any other purpose without separately seeking your consent. If you withdraw consent (see Section 7), we may no longer be able to respond to your inquiry or retain you on a waitlist, and we will inform you of any such consequences before acting on your withdrawal.

4. Cookies

We do not use analytics cookies, advertising cookies, or any cookies that track you across other websites.

Our hosting provider, Vercel, may set essential technical cookies to deliver the website reliably and protect against abuse (for example, to manage load balancing and prevent bot traffic). These cookies are strictly necessary for the site to function and are not used to identify you personally or to build a profile of your behaviour. They are typically session-based and expire when you close your browser.

Because we use no non-essential cookies, we do not present a cookie consent banner. If this changes, we will update this policy and implement appropriate consent mechanisms before doing so.

5. Who else processes your data

We rely on a small number of trusted third-party processors to operate this site. They process personal data on our behalf, under written terms requiring confidentiality and appropriate security measures.

• Formspree — receives and forwards contact-form submissions to our team inbox. Formspree is based in the United States. Privacy policy.
• Vercel — hosts the website and may briefly process request logs (IP address, user agent) for security and reliability purposes. Vercel is based in the United States. Privacy policy.

Both processors are located outside Singapore. In transferring personal data to them, we take steps to ensure that comparable standards of protection apply, including reviewing and relying on their published data protection commitments and contractual obligations, in accordance with PDPA Part X (Transfer Limitation).

We do not sell or rent your personal data, and we do not share it with advertisers or any other third parties beyond those named above.

6. How long we keep it

We retain contact-form submissions for no longer than 12 months from the date of receipt, or until the purpose for which they were collected has been fulfilled, whichever comes first. After that period, submissions are deleted or anonymised. If you have joined a waitlist and asked to be kept informed, we retain your contact details until the relevant product launches or you ask us to remove you, whichever is earlier.

7. Your rights under the PDPA

You have the right, at any time, to:

• Access the personal data we hold about you (PDPA s. 21)
• Correct any inaccurate or incomplete personal data (PDPA s. 22)
• Withdraw consent for us to use your personal data, on reasonable notice, subject to any legal or contractual restrictions

To exercise any of these rights, email us at info@impactnetsg.com. We aim to respond within 7 days.

8. Security

We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, use, disclosure, alteration, or loss. Specific measures include serving the site exclusively over HTTPS (encryption in transit) and restricting access to submitted data to team members who require it to respond to your inquiry.

9. Data breaches

In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify the PDPC and, where required under the PDPA, the affected individuals, in accordance with the mandatory breach notification obligations under Part VIA of the PDPA. We maintain an internal process for detecting, assessing, and responding to such incidents.

10. Young persons and minors

Emplace is also intended for use by students, including those who may be under 18 years of age. We welcome young persons on the platform and take our responsibilities in handling their personal data seriously.

If you are under 18, you should obtain the consent of a parent or guardian before registering on Emplace or submitting any personal data through this website. By completing registration, a user under 18 confirms that they have done so.

Where students access Emplace through their school or an organisation, the school or organisation is responsible for ensuring that appropriate consent and authorisation has been obtained before student personal data is submitted to us. We will treat personal data submitted via a school as having been collected with the school's authority and in accordance with the school's own data protection obligations to its students.

If we become aware that personal data has been submitted by a person under 18 without appropriate parental, guardian, or school consent, we will take prompt steps to delete that data and, where relevant, notify the school or parent or guardian concerned.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be flagged on the site or communicated by email where appropriate.

12. Contact us

For any questions about this policy, to exercise your rights under the PDPA, or to reach our Data Protection Officer, email us at info@impactnetsg.com.