Privacy & Data Protection Policy
1. Who we are
MerlAIon Advisory Pte Ltd, 160 Robinson Road, #14-04, Singapore Business Federation Center, Singapore 068914. We are the data controller for personal data collected through cambium.work.
2. Personal data we collect
| When | Data |
|---|---|
| You contact us | Name, organisation, email address and the content of your message. |
| You subscribe / check out | Contact name, position, work email, phone; organisation legal name, tax/VAT/GST ID, billing address, PO number and billing email. |
| You make a payment | Payment is processed by our payment provider (Airwallex). We do not collect or store full card numbers; we retain references such as a customer ID and payment/subscription identifiers. |
| You browse the site | Technical data such as IP address and approximate country, used by our hosting/CDN provider for delivery and security. |
3. Purposes and legal basis
We use personal data to: respond to enquiries; provide, administer and renew your subscriptions; issue invoices and process payments; provide support; maintain security and prevent fraud; and comply with legal obligations. We rely on your consent and on the legitimate interests permitted under the PDPA. You may withdraw consent at any time (this may affect our ability to provide the Services).
4. Disclosure to third parties
We share personal data only with service providers who process it on our behalf, under appropriate safeguards:
- Cloudflare — website hosting, content delivery and database (subscription and billing records).
- Airwallex — payment processing and recurring billing.
- Web3Forms — delivery of contact-form submissions to us by email.
Some providers may process data outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure it is protected to a standard comparable to the PDPA. We do not sell personal data.
5. Retention
We keep personal data only for as long as necessary for the purposes above or as required by law (for example, tax and accounting records), after which it is securely deleted or anonymised.
6. Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, use or disclosure, including encryption in transit and access controls.
7. Your rights
Under the PDPA you may request access to, or correction of, the personal data we hold about you, and ask about how it has been used or disclosed. To make a request, contact our Data Protection Officer below.
8. Data Protection Officer & contact
Data Protection Officer, MerlAIon Advisory Pte Ltd — [email protected] · +65 6929 8272.
9. Changes
We may update this policy from time to time; the latest version will always be published on this page.