Privacy Policy

Last updated: December 01, 2025

This Privacy Policy outlines how Merlion BTT (“we”, “us”, or “our”) collects, uses, discloses, and protects your Personal Data in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

By accessing or using our website, you agree to the collection and use of information in accordance with this policy.

1. Collection of Personal Data

We may collect the following types of Personal Data:

  • Voluntarily Provided Information: Personal Data that you voluntarily provide to us, such as your email address or name when you contact us via email, feedback forms, or subscribe to our newsletter (if applicable).
  • Automatically Collected Information: Data collected automatically when you visit our website, including:
    • IP address
    • Browser type and version
    • Device information
    • Operating system
    • Pages visited and time spent on the site
    • Cookies and usage data

2. Purpose of Collection and Use

We collect and use your Personal Data for the following purposes:

  • To Provide and Maintain our Service: Ensuring the website functions correctly and delivering the content you request.
  • To Improve our Service: Analyzing usage trends to enhance user experience, functionality, and content.
  • To Communicate with You: Responding to your inquiries, feedback, or support requests.
  • Security: Detecting, preventing, and addressing technical issues or fraudulent activities.
  • Legal Compliance: Complying with applicable laws, regulations, and legal processes.

3. Disclosure of Personal Data

We do not sell your Personal Data to third parties. However, we may disclose your information in the following circumstances:

  • Service Providers: We may engage third-party companies and individuals to facilitate our Service (“Service Providers”), such as hosting providers (e.g., Vercel, Netlify), analytics providers (e.g., Google Analytics), and email services. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
  • Legal Requirements: We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
  • Business Transfers: In the event of a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

4. Transfer of Data Outside Singapore

Our website and services may be hosted on servers located outside of Singapore. If we transfer your Personal Data to countries outside of Singapore, we will take steps to ensure that your Personal Data continues to receive a standard of protection that is at least comparable to that provided under the PDPA.

5. Cookies and Tracking Technologies

We use Cookies and similar tracking technologies to track the activity on our Service and store certain information.

  • Cookies: Small files placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
  • Analytics: We may use third-party Service Providers to monitor and analyze the use of our Service.

6. Retention of Data

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Under the PDPA, you have the following rights:

  • Access: You have the right to request access to the Personal Data we hold about you and inquire about how we have used or disclosed it in the past year.
  • Correction: You have the right to request the correction of any error or omission in your Personal Data.
  • Withdrawal of Consent: You may withdraw your consent for the collection, use, or disclosure of your Personal Data at any time by giving us reasonable notice.

To exercise these rights, please contact our Data Protection Officer (DPO) using the contact details provided below. We will respond to your request as soon as reasonably possible.

8. Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

10. Contact Us (Data Protection Officer)

If you have any questions about this Privacy Policy or wish to exercise your rights under the PDPA, please contact our Data Protection Officer (DPO):

11. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.