Privacy Policy

This Privacy Policy explains how Support Path Pro ("we", "us", or "our") handles personal data when you visit supportpathpro.life, submit an enquiry about social assistance programmes, communicate with us by email or phone, or attend a consultation at our Tiong Bahru guidance office. We operate from Singapore and process data in accordance with the Personal Data Protection Act 2012 (PDPA) and related guidance issued by the Personal Data Protection Commission (PDPC).

1. Data controller

The organisation responsible for personal data processed through this website and our guidance intake process is:

Support Path Pro
298 Tiong Bahru Road, #05-01, Singapore 168730
hello@supportpathpro.life
+65 6226 3159

Privacy-related questions may be sent to the email address above. We aim to respond within thirty calendar days.

2. Scope

This policy applies to personal data collected through:

• Pages hosted at supportpathpro.life and its subpaths;
• The contact and enquiry form on contact.php;
• Email and telephone communication initiated via the site or sent directly to our office;
• In-person consultations at our Tiong Bahru office;
• Optional functional features such as embedded Google Maps on the contact page, loaded only after you accept functional cookies.

It does not govern third-party websites linked from our content, including government agency portals, Family Service Centre sites, or charity pages. When you leave supportpathpro.life, review the destination site's privacy practices separately.

3. Personal data we collect

3.1 Information you provide

When you enquire about social assistance guidance, we may collect:

• Your name and contact details (email address, telephone number);
• Your residential address or general location within Singapore;
• Household composition including number of dependants and their relationship to you;
• Income sources, employment status, and housing situation described during consultations;
• Health or disability information you voluntarily share to help us identify relevant caregiving or medical assistance programmes;
• Documents you voluntarily attach or bring to consultation — bank statements, tenancy agreements, medical summaries, correspondence from agencies;
• Notes from guidance sessions prepared by our advisors to track programme recommendations discussed with you.

We do not request passwords, Singpass credentials, payment card numbers, CVV codes, or one-time passwords through the public contact form or during standard guidance sessions.

3.2 Information we do not collect through the website

Our public website does not operate user accounts, payment processing, or newsletter subscriptions that require persistent login credentials. We do not collect NRIC numbers through the online enquiry form. If NRIC copies are needed for document preparation support, we handle physical copies during in-person appointments under staff supervision rather than through unsecured web uploads.

3.3 Technical data

Our hosting provider may process server logs containing IP addresses, browser type, referring URLs, timestamps, and requested pages. These logs support security monitoring, spam detection, and error diagnosis. We do not use server logs to build advertising profiles or sell data to data brokers.

3.4 Cookies and local storage

We use minimal cookies and browser storage. Your cookie consent choice is stored locally in your browser. Google Maps may set third-party cookies only after you accept functional cookies on the cookie banner. See our Cookie Policy for details. We do not deploy advertising pixels, social media tracking widgets, or analytics cookies on this website.

4. How we use personal data

We process personal data for the following purposes:

• Responding to enquiries: Reviewing your message, scheduling consultations, and providing guidance on relevant social assistance programmes;
• Delivering guidance services: Preparing document checklists, programme summaries, and referral notes during and after consultations;
• Follow-up communication: Contacting you about appointment reminders, programme updates relevant to your case, or responses to questions raised during prior sessions;
• Service improvement: Analysing anonymised patterns in enquiry topics to improve website content and internal training materials;
• Legal compliance: Retaining records where required by law or to establish, exercise, or defend legal claims;
• Site security: Detecting spam submissions through honeypot fields, identifying abusive traffic patterns, and maintaining form submission logs.

We do not sell personal data. We do not add enquiry contacts to unrelated marketing lists. Occasional service updates are sent only in connection with an active enquiry or where you have explicitly asked to receive programme update summaries.

5. Legal bases under the PDPA

We rely on:

• Consent — for optional functional cookies (Google Maps) and where you explicitly agree to specific processing such as follow-up emails;
• Legitimate interests — operating a social assistance guidance service, responding to enquiries, maintaining website security, and improving our services based on aggregated feedback;
• Contractual necessity — where processing is required to deliver guidance services you have requested;
• Legal obligation — where retention or disclosure is required by court order, regulator, or applicable law.

You may withdraw consent for optional processing without affecting essential communication about an active enquiry. Withdrawal does not invalidate processing that was lawful when collected. Where we rely on legitimate interests, you may object on grounds relating to your situation and we will assess whether our interests override your privacy rights.

6. Sharing and disclosure

We may share personal data with:

• Service providers who host our website, store backups, or provide secure email — bound by confidentiality obligations and data processing agreements where applicable;
• Professional advisers (accountants, IT security consultants) where necessary for business operations;
• Government agencies, Social Service Offices, or Family Service Centres only when you explicitly request a referral and authorise us to share specific information;
• Law enforcement or regulators when legally compelled by valid court order or statutory requirement.

We do not transfer personal data outside Singapore unless necessary for your matter and protected by appropriate safeguards, or where you have been informed and applicable law permits. Our hosting infrastructure is located within Singapore or jurisdictions with comparable data protection standards.

7. Retention

Enquiry messages that do not proceed to a consultation are typically retained for up to twenty-four months unless you ask for earlier deletion. Consultation notes and document copies are retained for up to thirty-six months after your last contact with us, unless a longer period is required for dispute resolution or regulatory compliance. Server logs are rotated on a short cycle consistent with hosting configuration, generally not exceeding ninety days.

If you request deletion of enquiry data before the standard retention period ends, we will comply unless a legal hold or ongoing matter requires continued storage. Deletion requests should identify the email address or phone number used so we can locate records accurately.

8. Security

We implement reasonable administrative and technical measures including access controls on consultation records, secure hosting with HTTPS encryption, and staff confidentiality obligations. Contact form submissions are logged locally in a protected directory blocked from public web access via server configuration. We review hosting configurations periodically and restrict access to consultation files to personnel who need them for guidance delivery.

No transmission over the internet is completely secure. Please avoid sending highly sensitive documents via email until we confirm a secure channel. You should avoid transmitting full NRIC numbers, complete bank account numbers, or medical diagnosis details through the public enquiry form — share these during in-person consultations instead.

9. Your rights

Under the PDPA you may request access to, correction of, or withdrawal of consent for your personal data, subject to legal exceptions. You may also ask how your data has been used or disclosed within the past year. Submit requests using the contact details in section 1. We may need to verify your identity before responding — typically by confirming details you previously provided during an enquiry.

If you believe we have handled your data incorrectly, you may contact the Personal Data Protection Commission after first giving us an opportunity to address your concern.

10. Children and vulnerable adults

Our services address household situations that may involve children or vulnerable adults as dependants rather than as direct enquirers. When a minor's data appears in household documentation, we process it solely for the purpose of identifying relevant assistance programmes and protect it with the same safeguards applied to adult data.

Parents or legal guardians who submit enquiries on behalf of dependants should ensure they have authority to share household information. We do not knowingly collect data directly from children under thirteen through the website contact form.

11. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals. Programme eligibility assessments are conducted by government agencies and community partners, not by Support Path Pro through automated systems.

12. Data breach notification

In the unlikely event of a personal data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission as required under the PDPA. Our incident response procedure includes isolating affected systems, assessing scope, and implementing remedial measures before resuming normal operations.

13. Changes to this policy

We may update this Privacy Policy when our practices change or when new legal requirements take effect. The "Last updated" date at the top reflects the most recent revision. Material changes will be noted on this page. Continued use of the website after updates constitutes acknowledgment of the revised policy for new interactions.

14. Contact

For privacy questions, access requests, or complaints, contact our guidance office using the details below. We treat all privacy enquiries confidentially and respond within the timeframe stated in section one.

Support Path Pro
298 Tiong Bahru Road, #05-01, Singapore 168730
hello@supportpathpro.life
+65 6226 3159