Privacy Policy

Last updated: 18 October 2026

This policy explains what personal data Roquepress Pte. Ltd. (UEN 201904482D) ("Roquepress", "we", "us") collects, why, who we share it with, how long we keep it, and the choices you have. We follow Singapore's Personal Data Protection Act 2012 (PDPA).

It applies when you:

• visit roquepress.com;
• contact us by our website form, WhatsApp, phone or email;
• become a client, or work for one;
• join our referral programme, or are referred to us;
• receive business outreach from us; or
• are a customer or lead of one of our clients, and we handle your data for that client (see section 8).

Mulacan is Roquepress's own software and a division of Roquepress Pte. Ltd. Mulacan products have their own privacy notices on mulacan.com, which apply to those products.

1. The short version

• We collect only what we need to answer you, deliver our services, run our referral programme and run our business.
• We don't sell your personal data.
• We use trusted service providers (such as hosting, CRM, email, messaging and AI providers). Some store data outside Singapore, and we require them to protect it to a standard comparable to the PDPA.
• You can ask to see or correct your data, or withdraw your consent, at any time. Contact our Data Protection Officer at nazreen@roquepress.com.

2. Our two roles

• When the data is about our own enquiries, clients, referrers and contacts, Roquepress decides how it's used. We're responsible for it under the PDPA.
• When we handle data for a client (for example the leads in a CRM we run for them, or the people their AI agent talks to), the client decides how it's used. We act as the client's data intermediary and follow their instructions. Section 8 explains this.

3. What we collect

When you make an enquiry

• Your name, email address, phone or WhatsApp number, business name and website.
• What you're looking for (for example a new website, a revamp, monthly support, SEO, software development or an AI agent) and anything else you tell us.
• If you message us on WhatsApp or call us, your number, the messages you send and notes of the call. If we ever record or transcribe a call or meeting, we'll tell you first.

When you become a client

• Business contact details of the people we work with, and billing details (company name, billing address, invoice and payment records).
• Project materials you share, such as content, images, brand assets and business information.
• Access details for accounts you ask us to manage (for example domain, hosting, analytics or business profiles). We store these securely and use them only for your project.

When you join our referral programme

• Your name, email address and, optionally, phone or WhatsApp number.
• Your country, so we can pay rewards in your local currency.
• Payout details (such as bank account details) when a reward is due.
• A record of the referrals linked to you and the rewards paid.

When someone refers you to us

• The details the referrer gives us, such as your name, business name and contact details. Referrers must only share your details if they've told you, or you're happy for them to do so. We'll tell you how we got your details when we first contact you.

When we contact businesses about our services

• Business contact information, such as a work name, job title, business email, business phone number and business address, usually from public sources such as company websites and business directories.

When you visit roquepress.com

• Technical data such as your IP address, browser and device type, and the pages you view. See section 11 on cookies.

What we don't collect

• We don't ask for NRIC or other national ID numbers, and we don't need sensitive data such as health or financial account details to provide our services. Please don't send them to us unless we specifically ask.
• We never see or store your full card number. Any card payments are handled by our payment provider.

4. Why we use it

We use your personal data to:

1. reply to your enquiry and send you information or quotes you've asked for;
2. deliver, support and improve the services you've bought, including onboarding, project updates, reports and support by email or WhatsApp;
3. send invoices, take payments and keep accounting records;
4. run the referral programme: send your referral link, track referrals, confirm rewards and pay them;
5. contact businesses that may benefit from our services, using business contact details;
6. send you updates and offers about our services, if you've agreed or the law allows (see section 6);
7. keep our website, systems and accounts secure and working, and understand how our website is used;
8. meet our legal, tax and regulatory obligations, and protect our legal rights.

We won't use your personal data for a new purpose without telling you, and asking for consent where the law requires it.

5. Consent, and when we rely on other grounds

We usually ask for your consent, or rely on consent you give by your actions. For example, when you fill in our contact or referral form, you agree that we may use your details to respond and, for the referral form, to run the referral programme.

In some cases the PDPA allows us to use personal data without asking each time, for example:

• where it's needed to carry out a contract with you or your business;
• where we've told you we intend to use it and given you a reasonable chance to opt out (deemed consent by notification);
• for our legitimate interests, such as preventing fraud or keeping our systems secure, where this doesn't adversely affect you; or
• where the law requires or allows it.

Business contact information (such as a work email used for business purposes) is largely outside the PDPA's main consent rules. We still treat it with care and stop contacting you if you ask.

Withdrawing consent: you can withdraw your consent at any time by emailing nazreen@roquepress.com. We'll tell you what that means for you (for example, we may not be able to keep providing a service or pay a referral reward without your contact or payout details), and then act on it within 10 business days. Withdrawing consent doesn't affect what we did before, and we may keep data where the law requires us to.

6. Marketing messages and the Do Not Call Registry

• We send marketing by email or WhatsApp only where you've agreed, or where the law allows (for example to business contacts).
• Every marketing email includes a way to unsubscribe. You can also reply "STOP" to a WhatsApp message, or email hello@roquepress.com. We act on unsubscribe requests within 10 business days.
• Before we send marketing calls or text messages to a Singapore phone number, we check Singapore's Do Not Call (DNC) Registry where the law requires it, unless you've given us clear consent in writing or another form we can keep on record.
• We don't buy or rent personal mailing lists.

7. Who we share it with

We don't sell your personal data. We share it only where needed, with:

• Service providers who help us run our business, such as:
  • website hosting and cloud infrastructure providers;
  • CRM and marketing automation software;
  • business email, calendar and document providers;
  • messaging and phone services (such as WhatsApp) and email-sending services;
  • AI model providers that power our AI tools and agents;
  • analytics tools;
  • banks and payment providers; and
  • accountants, auditors, lawyers and other professional advisers.
• Our contractors who help deliver client work, under confidentiality obligations.
• Our clients, where you've been referred to them or have asked us to put you in touch.
• Authorities, where the law requires it, or to protect our rights or someone's safety.
• A buyer or successor, if our business (or part of it) is sold or reorganised. They must protect your data in line with this policy.

Our service providers may only use your data to provide services to us, and must protect it.

8. Data we handle for our clients

Many of our services involve handling personal data for our clients, for example:

• leads and enquiries captured by websites and forms we build;
• contacts, conversations and pipeline data in CRM systems we set up or manage;
• WhatsApp, email and other messages handled by systems we run;
• inbound calls and enquiries answered by Agent Tuah, our AI agent, including call recordings, transcripts and summaries where the client has enabled them;
• prospects contacted by Agent Tuah's outbound outreach on behalf of a client; and
• website analytics for client websites.

For this data, our client is responsible for deciding how it's used, telling people about it and getting any consent needed. We act as the client's data intermediary: we use the data only to provide our services to that client, keep it secure, keep it only as long as needed, and tell the client without undue delay if we become aware of a data breach.

If you're a customer or lead of one of our clients and want to access, correct or delete your data, please contact that business directly. If you contact us, we'll pass your request to them and help them respond.

9. AI tools

We use AI tools to help with research, writing, design, coding and to run AI agents such as Agent Tuah. This can mean personal data in a message, enquiry or file is processed by an AI model provider.

• We choose providers that commit not to use business customers' data to train their models, or we use settings that switch this off, wherever available.
• We give AI tools only the data needed for the task.
• People at Roquepress review AI-assisted work, and clients can approve outreach before it's sent (co-pilot mode).
• If an automated agent is answering you, it is set up to say so where required.

10. Transfers outside Singapore

Some of our service providers store or process data outside Singapore, for example in the United States, the European Union or other countries where their servers are located.

When we transfer personal data overseas, we take appropriate steps to make sure the recipient is bound to protect it to a standard at least comparable to the PDPA, for example through contracts with data protection terms, or the provider's recognised certifications. Where a transfer is needed to provide a service you've asked for, or to carry out a contract with you, we may also rely on that, as the PDPA allows.

11. Cookies and similar technologies

Cookies are small files stored by your browser.

• Essential cookies: roquepress.com currently uses a small number of essential cookies set by our hosting and security providers, to deliver the site and protect it from bots and abuse. These don't identify you personally and the site can't work properly without them.
• Analytics cookies: we don't currently use analytics cookies on roquepress.com. If we add any, we'll update this policy first.
• Third-party content: some pages show content from other sites, such as fonts, a review-platform badge, map links, social media links and the WhatsApp chat button. When your browser loads or you click these, the other site may receive technical data such as your IP address, under its own privacy policy.

You can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site from working.

12. How long we keep it

We keep personal data only for as long as we need it for the purposes above, or as long as the law requires. As a guide:

When we no longer need data, we delete it or anonymise it so it can no longer identify you.

13. How we protect it

We use reasonable security arrangements for the kind of data we hold, including:

• encrypted (HTTPS) connections on our website and forms;
• access limited to people who need it, with strong passwords and two-factor authentication on our key accounts;
• reputable providers with their own security controls; and
• regular backups for the client websites we look after.

No system is completely secure, but we work to protect your data and review our arrangements regularly.

14. If there's a data breach

If we believe a data breach has happened, we'll act quickly to contain it and assess it. Under the PDPA, if the breach is likely to cause you significant harm, or affects 500 or more people, we'll notify the Personal Data Protection Commission (PDPC) within 3 calendar days of making that assessment and, where required, tell the people affected as soon as practicable. If the breach affects data we handle for a client, we'll tell that client without undue delay so they can take the required steps.

15. Your rights

You can ask us to:

• access the personal data we hold about you, and tell you how it has been used or disclosed in the past year;
• correct personal data that's wrong or incomplete; and
• withdraw consent or stop marketing messages.

How to ask: email our Data Protection Officer at nazreen@roquepress.com with enough detail for us to find your data. We may need to confirm your identity first.

How long it takes: we'll respond as soon as reasonably possible, and within 30 days. If we need more time, we'll tell you within that period when we expect to respond.

Fees: correction requests are free. For access requests, we may charge a reasonable fee to cover our costs. If so, we'll tell you the amount before we start. In some cases the PDPA allows or requires us to refuse an access request (for example where it would reveal someone else's personal data). If so, we'll explain why.

Please keep us informed if your details change, so the data we hold stays accurate.

16. Children

Our services are for businesses. We don't knowingly collect personal data from children under 18. If you think we have, please contact us and we'll delete it.

17. Other websites

Our website links to other sites, including Mulacan and social media. Their privacy practices are their own, so please read their policies.

18. Changes to this policy

We may update this policy from time to time and will change the "Last updated" date at the top. If a change significantly affects how we use your data, we'll tell clients and referrers by email before it takes effect.

19. Contact us and our Data Protection Officer

Data Protection Officer: Nazreen Daud Email: nazreen@roquepress.com

Roquepress Pte. Ltd. (UEN 201904482D) 60 Paya Lebar Road #06-28, Singapore 409051 Email: hello@roquepress.com Phone and WhatsApp: +65 8899 7513

If you're unhappy with how we've handled your personal data, please tell us first so we can put it right. You can also contact the Personal Data Protection Commission at www.pdpc.gov.sg.