Privacy Policy

1. Personal Data We Collect

"Personal data" means data, whether true or not, about an individual who can be identified from that data alone or together with other information. To provide and maintain our services we may collect the following categories of personal data:

1. Account data: the username, password, email address and contact number you provide at registration;

2. Domain registrant data: only when you register a domain, we collect the registrant name or organisation, address, telephone number and email address you enter, and submit them to the domain registrar as registry rules require. We do not carry out identity verification and do not collect identity document numbers or images;

3. Transaction data: order records, billing address, invoice details and payment records processed by third-party payment providers (we never store your full card number or payment password);

4. Technical data: IP address, browser type, operating system, access logs, cookie identifiers and other information generated automatically while you use the services;

5. Communication data: the content you provide when contacting us via tickets, email or instant messaging (such as Telegram).

2. Purposes of Collection, Use and Disclosure

In line with the PDPA's purpose limitation and notification obligations, we collect, use and disclose your personal data only for the following reasonable purposes that have been notified to you:

1. to create and manage your account, and to provide, maintain and improve our products and services;

2. to process orders, payments, renewals, refunds, invoicing and related financial matters;

3. to complete service processes that must be submitted to third parties, such as domain registration, SSL certificate issuance and hosting or server provisioning;

4. to send you necessary notices about service changes, expiry reminders, security alerts and technical support;

5. to prevent fraud, abuse and unlawful activity and to safeguard network and information security;

6. to comply with applicable laws, regulations and the requirements of regulators.

If we intend to use your personal data for a new purpose not listed above, we will notify you of that purpose and obtain your consent first.

3. Consent and Withdrawal of Consent

When you register an account, place an order or otherwise provide personal data to us, you consent to our collecting, using and disclosing that data for the purposes set out in this policy. Where data is reasonably necessary to complete a transaction or provide a service, your voluntary provision of it constitutes deemed consent under the PDPA.

You may withdraw your consent at any time by giving us reasonable notice through the contact details at the end of this policy. After withdrawal we will cease the relevant collection, use or disclosure. Please note that where the data is necessary for providing a service, withdrawing consent may mean we can no longer provide some or all of the services to you; we will inform you of the likely consequences before acting on your request.

4. Cookies and Similar Technologies

This website uses two types of cookies and similar technologies:

1. Necessary cookies: keep you signed in, remember your language, protect your account, and record your cookie choice. They are required for the site to work and cannot be turned off;

2. Analytics and advertising cookies: Google Analytics / Google Ads and the X (Twitter) ad pixel, used to understand site traffic and measure sign-ups and top-ups from our ads. These services are provided by third parties, which process data under their own privacy policies.

For visitors from the EU, the EEA, the UK and Switzerland, analytics and advertising cookies are enabled only after you click "Accept all"; elsewhere they are enabled by default. You can change or withdraw your choice at any time via "Cookie Settings" in the site footer, or refuse or delete cookies in your browser settings, although some features (such as signing in) may then not work properly.

Open Cookie Settings

5. Disclosure to Third Parties

We do not sell your personal data. We disclose necessary personal data to third parties only in the following circumstances:

1. Service providers and data intermediaries: third parties we must engage to deliver the services, such as domain registries and registrars, certificate authorities (CAs), payment providers, SMS and email providers and data centre operators, limited to what is necessary to provide the service;

2. Legal requirements: to comply with the law, a court order or a lawful request from a government or regulatory authority;

3. Protection of rights: to prevent fraud and to protect the legitimate rights, interests and safety of us, our users or the public;

4. With your consent: in any other case where you have given your express consent.

Where a data intermediary processes personal data on our behalf, we require it by contract to protect and retain that data to a standard no lower than this policy and the PDPA.

6. Transfer of Personal Data Outside Singapore

Our servers and some of our service providers are located outside Singapore (for example in Hong Kong, Japan, Korea and the United States). When your personal data must be transferred outside Singapore to provide the services, we take reasonable steps in accordance with the PDPA's transfer limitation obligation, including contractual undertakings, to ensure the recipient provides a standard of protection comparable to the PDPA.

7. Protection of Personal Data

In accordance with the PDPA's protection obligation, we implement reasonable technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), hashed password storage, access controls, firewalls and intrusion prevention, to prevent unauthorised access, collection, use, disclosure, copying, modification or disposal of personal data and the loss of any storage medium.

No transmission over the Internet is completely secure, however, so please keep your account and password safe and never share them with others.

8. Accuracy of Personal Data

We take reasonable steps to ensure that the personal data we collect is accurate and complete, particularly where it is likely to be used to make a decision that affects you or to be disclosed to another organisation. Please update your details in the user centre or contact us to correct them whenever they change.

9. Retention of Personal Data

Under the PDPA's retention limitation obligation, we cease to retain personal data, or anonymise it, once it no longer serves the purpose for which it was collected and retention is no longer necessary for legal or business purposes. When your account is closed or the data is no longer needed, we delete or anonymise your personal data subject to legal and compliance requirements such as the keeping of financial and tax records.

10. Marketing Messages

If we intend to send you marketing messages such as promotions or new product information by email, instant messaging or telephone, we will obtain your consent first. You may ask us to stop at any time free of charge and we will cease that use on receipt of your request. For marketing messages sent to Singapore telephone numbers we also comply with the Do Not Call Registry provisions of the PDPA.

11. Your Rights: Access and Correction

Under the PDPA's access and correction obligations, you have the right to:

1. request access to the personal data we hold about you and information on how it has been used or disclosed within the past year;

2. request the correction of any error or omission in your personal data;

3. withdraw your consent (see section 3).

You may make these requests through the contact details at the end of this policy. We will respond within 30 days of receiving a request; if we cannot complete it within 30 days we will tell you when we expect to do so. We may charge a reasonable fee for access requests and will inform you of any fee beforehand. Where the PDPA permits, we may decline part of an access or correction request and will give reasons.

12. Data Breach Notification

If a breach involving your personal data occurs, we will assess it promptly. Where the breach is likely to result in significant harm to affected individuals or is of a significant scale, we will, in accordance with the PDPA's data breach notification obligation, notify the Personal Data Protection Commission (PDPC) within 3 calendar days of our assessment and, where applicable, notify you in a reasonable manner.

13. Third-Party Links

This website may contain links to third-party websites. Those sites have their own privacy policies and we are not responsible for their content or data practices; please review their policies before submitting personal data.

14. Minors

Our services are intended for users with full legal capacity. If you are under 18, please use the services and provide personal data only under the guidance of a parent or guardian.

15. Changes to This Policy

We may update this policy from time to time to reflect changes in law, our business or technology. The updated version will be published on this page and takes effect immediately. Please review it periodically to stay informed of our current data practices.

16. Contact Us

In accordance with the PDPA's accountability obligation we have appointed a Data Protection Officer. If you have any question or complaint about this policy, or wish to exercise your rights of access, correction or withdrawal of consent, please contact our Data Protection Officer:

Organisation: ORVIX CLOUD PTE. LTD.

Registered address: 3 Gambas Crescent, #04-01, Nordcom One, Singapore 757088

Email: [email protected]

Live support: Telegram @HK_8U

If you are not satisfied with how we handle your complaint, you may lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC, www.pdpc.gov.sg).