Privacy Policy — Singapore
Last updated: 7 October 2026 · This page sets out how QUIKFORGE LIMITED handles personal data under Singapore's Personal Data Protection Act 2012 (PDPA). We update this policy whenever what we collect, why we collect it, or who receives it changes, and we change the date above on the same day. Where a change materially alters the purposes for which we use personal data, we notify affected users rather than edit this page silently
Who we are
Sitetals.com is operated by QUIKFORGE LIMITED (trading as Sitetals), a company incorporated in Hong Kong (BR No. 79555262). Registered office: Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy, Central, Hong Kong S.A.R. Director: Olivier Jobert. Contact: legal@sitetals.com
Sitetals provides compliance scanning services for websites operating in Singapore. Our offering is addressed exclusively to businesses (B2B).
Data Protection Officer (DPO)
Data Protection Officer (DPO). Pursuant to section 11(3) of the Personal Data Protection Act 2012 ("PDPA"), QUIKFORGE LIMITED has designated Olivier Jobert as its Data Protection Officer. In accordance with section 11(5) of the PDPA, the DPO's business contact information is published here: legal@sitetals.com. We respond to access and correction requests as soon as reasonably possible, and where a request cannot be answered within 30 days we will notify you of the time by which we will respond.
What personal data we collect and why
We collect, use and disclose personal data only for purposes that a reasonable person would consider appropriate in the circumstances, and only as notified in this policy (PDPA notification and purpose limitation obligations, ss. 13–20):
- Domain names you submit for scanning — to perform the compliance check you requested.
- Email address — when you order a report, to deliver your access key and invoice. Those emails are sent through Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, which also hosts this website.
- Company name and billing address — collected at the time of purchase to issue a compliant invoice.
- Payment data — card payments are processed by Stripe, Inc. (USA); bank transfers are processed by Wise. We do not store card numbers or bank account details other than the payout details of partners, described in the Partners section.
- Contact-form messages — if you write to us, we process your email address and message to reply. Providing a name is optional; any name you give is used only to address our reply and is never added to invoices.
- Technical logs — we do not record the IP addresses of visitors to this website. Our web server log keeps only the date and time, the page requested, the referring page and the browser type, and is deleted after 14 days; our application logs contain no IP addresses. Separately, our server's firewall and login security logs record the IP address of connection attempts to the server itself (not visits to the website); we use them only to protect the server against intrusion and delete them after 14 days. We count use of the service (for example a scan started or an order placed) by date, selected country and domain only, without any IP address.
- Agency dashboard (app.sitetals.com) — if your business subscribes to an Agency Plan, we hold the name and email address of each dashboard user (the person who subscribed and anyone added to the team), the company name, the websites added to the dashboard with their scan results and reports, any logo and colours uploaded for white-label reports, and a record of each sign-in with its date, IP address and browser type. We also keep a record of which user added each website and when, because adding a website is the confirmation of authorisation described in section 6.3.6 of our Terms of Use; if the operator of a website tells us that it did not authorise its audit, we may tell it the name of the business that added it. We use them to provide the dashboard, send one-time sign-in links, protect accounts against misuse and manage the subscription. The card used for renewals is held by Stripe, Inc. (USA), which charges the renewals; we never see or store the card number. Dashboard emails are sent through Hostinger International Ltd.
Providing this data is voluntary, but without it we cannot provide the service or issue an invoice. We do not sell personal data or disclose it for any other party's marketing.
What we do NOT collect
- No analytics tracking (no Google Analytics, no Matomo, no tracking pixels)
- No advertising cookies
- No social media tracking buttons
Cookies
By default we store one entry in your browser's localStorage (not an HTTP cookie) to remember your cookie-notice choice. No tracking, no analytics, no third-party cookies. If you open a partner referral link, we ask separately whether we may set one optional first-party cookie, sitetals_ref, holding only the partner's code for 30 days; it is set only if you click Allow, and you can withdraw at any time on our Cookie Policy. Partners who sign in also receive two strictly necessary session cookies. Users who sign in to the agency dashboard at app.sitetals.com receive strictly necessary sign-in cookies. See our Cookie Policy (SG).
Our policies and practices (section 12 PDPA)
We have developed and implemented the data-handling, retention and security practices described in this policy to meet our obligations under the PDPA. Information about our policies and practices, and about our complaint process, is available on request from the DPO. Complaints about our handling of personal data may be addressed to the DPO at legal@sitetals.com.
Data retention (section 25 PDPA)
We cease to retain personal data, or anonymise it, as soon as it is reasonable to assume the purpose of collection is no longer served and retention is no longer necessary for legal or business purposes:
- Free scan results — retained for 90 days for operational purposes, then automatically deleted.
- Paid reports bought with an access key — available for download for up to 24 hours after generation, then deleted from our servers.
- Email addresses and invoicing data — retained for the duration of the contractual relationship plus 10 years to meet legal accounting and record-keeping obligations.
- Contact-form messages — retained until the enquiry is fully resolved, then no longer than necessary.
- Agency dashboard — dashboard accounts, websites, scan results and reports are kept while the subscription runs and for 12 months after it ends, then deleted; records of sign-ins are deleted after 12 months. Invoices and order records follow the invoicing period above.
Withdrawing consent (section 16 PDPA)
You may withdraw any consent you have given us for the collection, use or disclosure of your personal data at any time, on reasonable notice, by writing to legal@sitetals.com. Before we act on a withdrawal we will tell you the likely consequences of it. Withdrawal stops further use of your personal data for the purpose concerned; it does not require us to delete records we are required to keep, such as invoicing data retained to meet accounting and record-keeping obligations (see Data retention above).
Protection and overseas transfers (sections 24 and 26 PDPA)
We apply reasonable technical and organisational safeguards against unauthorised access, collection, use, disclosure, copying, modification or disposal of personal data.
This website is hosted on a Hostinger VPS located in Paris, France; hosting is governed by Hostinger's Data Processing Agreement (rev. 2026-04-15), which imposes legally enforceable data-protection obligations on Hostinger. Payment processing is handled by Stripe, Inc. (USA). Where personal data is transferred outside Singapore (including to France), we take contractual and organisational measures to ensure the transferred data is protected to a standard comparable to the PDPA (section 26).
Access and correction (sections 21–22 PDPA)
You may request access to, and correction of, the personal data we hold about you by contacting the DPO at legal@sitetals.com. A reasonable fee may be charged for complying with a data access request, as permitted by the PDPA. We respond to access and correction requests as soon as reasonably possible, and where a request cannot be answered within 30 days we will notify you of the time by which we will respond.
Complaints to the PDPC
If you have concerns about how we handle your personal data that we have not resolved, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.
Partners
Partners (referral and partner programme). If you apply to our partner programme, QuikForge Limited collects, uses and discloses your name, company, email address, country, postal address, tax identification and GST number, your issued code, your acceptance of the partner terms with its date and text version, commission statements and their lines, your payout (bank) details, sign-in events and our log of actions on your account, for these purposes: to run the programme, calculate and pay commission, keep accounting and tax records, and prevent misuse of codes. You give this information to enter the partner agreement with us; where you decline to provide it we cannot approve or pay you. We disclose it to Hostinger International Ltd. (hosting in Paris, France; sends your sign-in code and statements by email; data intermediary), Wise (executes the bank transfer to you), and authorities where the law requires. Your data is held in France and administered from Hong Kong; we make sure it receives a standard of protection comparable to the PDPA through our contracts with these providers. Payout details are stored encrypted. Statements identify our customers only by invoice number. Statements, their lines and the action log are kept for 10 years for accounting and record-keeping obligations; payout details are erased when you ask, or 90 days after your account closes with nothing owed (if something is owed when you ask, we keep them until it is paid and erase them within 30 days after). Sign-in uses a one-time code and a 24-hour session; see the cookie policy for the referral and session cookies. To access or correct your data, withdraw consent where we rely on it, or contact our Data Protection Officer, write to legal@sitetals.com.