Privacy Policy
Updated 15th February, 2025
At STIXCOLLECTIVE PRIVATE LIMITED ("we," "our," or "us"), we are dedicated to safeguarding your privacy and ensuring compliance with the Singapore Personal Data Protection Act (PDPA). This Privacy Policy outlines how we collect, use, disclose, and protect your personal data when you engage with our services.
1. Information We Collection
We collect personal data to deliver and enhance our services effectively. This includes:
1.1 Information You Provide to Us
• Account Information: Name, email address, phone number, and other details when you create an account.
• Payment Information: Billing address, payment method details, and transaction history.
• Support Information: Information you provide when contacting customer support, including chat logs and issue descriptions.
1.2 Information We Collect Automatically
• Device Information: IP address, browser type, operating system, and device identifiers.
• Usage Information: Data on your interaction with our platform, including pages visited and features used.
• Cookies and Similar Technologies: Used to enhance user experience and track session data. You can manage cookie preferences through your browser settings.
1.3 Information from Third Parties
• Integration Services: Data retrieved from third-party applications linked to your account.
• Marketing Partners: Information provided by third parties to personalize communications and offers.
2. How We Use Your Information
Your personal data is used to:
Deliver and improve our services to meet your needs.
• Process transactions, manage billing, and fulfill your requests.
• Communicate updates, promotions, or account-related information.
• Customise user experiences through targeted content and recommendations.
• Detect, prevent, and address fraudulent or security-related issues.
• Comply with legal obligations as stipulated by the PDPA.
• Improve automation processes and optimize system performance.
3. Third-Party Data Processing & Integrations
3.1 GoHighLevel Integration
Our CRM platform is powered by a white-labeled solution from GoHighLevel. By using our services, you acknowledge that certain data processing activities are handled by GoHighLevel, and their Privacy Policy applies in addition to this policy.
We utilize GoHighLevel as our service provider for CRM functionalities. While we take reasonable steps to ensure data security, GoHighLevel manages the underlying infrastructure, and we are not responsible for their internal policies or any data breaches on their platform.
Our CRM services are provided "as is" and "as available", without warranties of any kind. We do not guarantee uninterrupted service and shall not be held liable for any losses, damages, or data breaches caused by GoHighLevel or any third-party providers.
• As part of our CRM services, user data may be processed and stored on servers managed by GoHighLevel, which may be located outside Singapore. By using our services, you consent to such transfers in compliance with the Personal Data Protection Act (PDPA).
3.2 Boomerangme Integration
We also utilise Boomerangme for digital loyalty and rewards management. By using our services, you acknowledge that Boomerangme may process certain data, and their Privacy Policy applies in addition to this policy.
Boomerangme handles loyalty program functionalities, including the management of digital cards and rewards.
While we implement security measures to protect your data, Boomerangme operates its own infrastructure, and we are not responsible for their internal policies or any security incidents that occur on their platform.
• Data processed through Boomerangme may be transferred outside Singapore to facilitate service operations. By using our services, you consent to such data transfers in accordance with PDPA requirements.
• For more information on how Boomerangme manages data, please review their Privacy Policy.
4. Disclosure of Your Information
Your personal data may be shared with:
• Service Providers: Third-party vendors providing payment processing, hosting, analytics, and support services under strict confidentiality agreements.
Affiliates: Entities within our corporate group for shared administrative purposes.
Legal Authorities: To comply with legal obligations or respond to lawful requests.
Business Transfers: Relevant parties in cases of mergers, acquisitions, or sales of assets.
With Your Consent: For specific use cases such as testimonials or case studies.
5. Your Rights and Choices
You have the following rights concerning your personal data:
• Access and Correction: Request access to your personal data and rectification of inaccuracies.
Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
Account Management: Update or delete your account and associated data.
Marketing Preferences: Opt out of promotional communications through account settings or by contacting us.
Cookie Preferences: Manage cookies via browser settings or platform tools provided.
6. Data Security & Breach Notification
We implement reasonable and appropriate technical, organisational, and administrative measures to safeguard your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Encryption Protocols: For secure transmission of personal data.
Access Control: Role-based access to personal data within our organisation.
Regular Audits: To ensure the integrity of our security measures.
In the event of a data breach that poses a significant risk to your personal data, we will take immediate action and notify affected individuals and relevant authorities in accordance with applicable legal requirements.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law.
Upon account deletion, we will retain your personal data for up to 2 months for compliance, fraud prevention, and dispute resolution before securely deleting or anonymising it.
8. Cross-Border Data Transfers
As part of our services, your personal data may be processed and stored on GoHighLevel's and Boomerangme’s servers, which may be located outside Singapore, including in the United States and other jurisdictions where they operate.
By using our services, you acknowledge and consent to the international transfer of your personal data as required to provide and improve our CRM and loyalty services. While we take reasonable measures to ensure data security, we are not responsible for any actions, policies, or breaches by GoHighLevel, Boomerangme, or their third-party affiliates.
For further details on how they handle cross-border data transfers, please refer to their respective Privacy Policies
9. Children’s Privacy
Our services are not intended for individuals under the age of 13, and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete such data as soon as possible.
10. Third-Party Websites
Our website and services may contain links to third-party websites or services that are not operated or controlled by us. We are not responsible for the privacy practices or content of these third-party sites. We recommend that you review the privacy policies of any third-party websites before providing them with your personal data.
11. Policy Changes
We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technologies, or legal requirements. Any changes will be posted on this page with an updated "Effective Date". If the changes are significant, we will notify you by email or through a prominent notice on our website.
By using our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.