Privacy Policy

How we collect, use, and protect information when you use CarFin SG.

Summary

This Privacy Policy explains how CarFin SG collects, uses, and protects information when you use the website. This is a general template for an MVP guide site; adjust it to match your actual implementation.

Implementation note: If you add analytics, forms, newsletters, or ads, update this policy and list the exact vendors used.

Scope and minimization

CarFin SG is an informational site focused on auto financing in Singapore. We aim to minimize data collection:

No account required: reading guides, tools and checklists does not require login.
No sensitive data: please do not submit NRIC/FIN, bank account details, or documents through this site.
Forms are optional: if you contact us, we only use the information to respond to your request.

Last reviewed: 2026-01-18. Update this policy if you enable analytics vendors, newsletters, or user accounts.

Information we collect

Usage data: pages viewed, referring pages, approximate device/browser info, and timestamps (typically via server logs or analytics).
Cookies: small files used for basic functionality, preferences, and (if enabled) analytics.
Information you provide: if you contact us or submit a form, we may collect the information you enter (e.g., email, message content).

How we use information

Operate and secure the site (fraud prevention, rate limiting, abuse detection).
Improve content and navigation (e.g., which guides or checklists are most useful).
Respond to messages or requests you send us.
Measure performance (e.g., page speed, errors) and improve reliability.

Consent and choices

If you enable non-essential cookies (such as analytics), you should provide a cookie consent banner and allow users to opt out where required by law.

For MVP: keep analytics minimal, avoid collecting sensitive personal information, and do not require logins.

Sharing and third parties

We may share information with service providers that help operate the site (hosting, CDN, analytics, email). These providers process data on our behalf and are expected to protect it.

We do not sell personal information.

Vendors (if enabled)

If we enable third-party services (analytics, email, hosting/CDN), we will list them here with links to their privacy policies. For MVP, keep vendors minimal.

Hosting/CDN: (add provider name)
Analytics: (add provider name) — optional
Email/contact: (add provider name) — optional

Data retention

We retain information only as long as needed for the purposes described above. Server logs are typically retained for a limited period for security and troubleshooting.

Security

We use reasonable administrative and technical measures to protect information (e.g., HTTPS, access controls, monitoring). No method of transmission or storage is 100% secure.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of personal information. You may also object to certain processing or request portability.

To make a request, contact us and include sufficient information to verify your request.

International transfers

Your information may be processed in countries where our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

Changes to this policy

We may update this policy from time to time. The latest version will be posted on this page with an updated "Last updated" date.

Last updated: 2026-01-18