Privacy Policy

Privacy Policy

Effective Date: May 19, 2026
Last Updated: May 19, 2026

Funeral Compass (“we,” “us,” “our”) operates funeralcompass.com.sg (the “Website”). We are committed to protecting the privacy and personal data of our users, platform visitors, and vendor partners in strict compliance with the Singapore Personal Data Protection Act 2012 (PDPA).

This Privacy Policy outlines how we collect, use, disclose, manage, and protect your personal information within our digital ecosystem.

Information We Collect

We collect information that identifies or can reasonably be used to identify an individual (“Personal Data”). This falls into two categories:

A. Information You Voluntarily Provide

  • Waitlist Sign-ups & Ecosystem Registration: Email address and user classification data (e.g., distinguishing between a “Family / User” or a “Funeral Professional / Vendor”) collected via our footer enrollment engines.
  • Inquiries and Submissions: Any communication sent through our administrative portals, contact forms, or direct questionnaire submissions.

B. Automatically Collected Information & Security Telemetry

To maintain platform integrity and defend our proprietary database against malicious exploits, our security systems (including Cloudflare and local firewall tools) automatically log transaction metadata:

  • IP addresses, browser user-agent signatures, hardware configurations, and geolocation data.
  • Device behavior logs, entry/exit page sequences, time stamps, and API access tracking rates.

Purposes of Data Collection and Processing

We utilize collected information strictly for the following operational and defensive mandates:

  • Ecosystem Sorting & Service Delivery: To classify and process waitlist registrants so we can deliver targeted notifications when new service directory categories or professional vendor options launch.
  • Platform Security & Anti-Bot Infrastructure: To run automated JavaScript challenge verifications (via Cloudflare Turnstile) and execute rate-limiting protocols. This prevents bot infrastructure or headless browsers from degrading site performance or extracting information.
  • Legal Compliance & Enforcement: To establish evidentiary timelines in the event of unauthorized server requests, database security breaches, or contract violations.

Lawful Basis for Processing

We process personal data based on your explicit consent (given when subscribing via our waitlist forms) and our legitimate interests. Our legitimate interests include securing our intellectual property, preventing data theft via screen scraping, ensuring stable hosting performance for mourning families, and enforcing our standard contractual provisions.

Disclosure and Transfer of Personal Data

We do not sell, rent, or lease your personal data to third parties. Your data is only shared with trusted service providers operating under strict confidentiality mandates:

  • Infrastructure Hosts: Secure data centers and cloud services used to run our portal layout and storage frameworks.
  • Security & Mitigation Processors: Infrastructure solutions (such as Cloudflare) that handle IP screening, threat mitigation, and automated bot prevention tests.
  • Legal and Regulatory Bodies: When strictly mandated under Singapore law, or to defend against contract violations or database theft.

Security Safeguards and Data Protection

We employ a robust, multi-layered defensive matrix to safeguard personal data and platform assets:

  • Encryption: Full SSL/TLS encryption covering all inbound and outbound web traffic.
  • Access Control: Restricting access to internal form entries to audited administrative accounts using multi-factor authentication.
  • Active Security Monitoring: Network firewalls and hidden backdoor defenses (including WordPress REST API obfuscation) to prevent unauthorized automated data pulls or bulk JSON downloads.

Your Rights Under the PDPA

In accordance with the provisions of the PDPA, Singapore residents possess specific statutory privileges regarding their personal information:

  • Right to Access: You may request access to any personal records or user classification logs we hold about you.
  • Right to Correction: You may request the update or amendment of incorrect or incomplete information.
  • Right to Withdrawal of Consent: You may withdraw your consent for email updates or waitlist inclusion at any time by contacting our Data Protection Officer (DPO) at [email protected] or clicking the unsubscribe links in our emails.

Updates to This Privacy Policy

We reserve the right to amend this policy to reflect platform updates or changes to Singapore law. Any updates will be published directly to this page with a revised effective timestamp.