Privacy Policy

01Introduction

VOX GLOBAL PTE. LTD. (UEN 202112832Z) is a company incorporated in Singapore at 20 Temple Street, Singapore 058565. We are committed to protecting personal data in compliance with the Singapore Personal Data Protection Act 2012 (PDPA).

This Policy applies to both:

• This website — voxglobal.ltd — which presents company information and accepts business enquiries.
• The VoxSG Android application published on Google Play, package com.voxglobal.sg, which provides a public business directory and a private staff badge area for VOX GLOBAL employees.

Where the website and the app differ in data practices, the difference is stated explicitly in the relevant section below.

02Data We Collect (Public Users)

When you submit our enquiry form — on either the website or inside the VoxSG app's Contact screen — we collect only the data you provide:

• Full name (required)
• Company name (required)
• Email address (required)
• Country / region (optional)
• Enquiry type (selection from a fixed list)
• Message — free-text content of your enquiry (required)

What we do NOT collect from public users: location, device contacts, camera, microphone, advertising identifiers, browsing history outside this site, biometric data, financial data, health data.

The website additionally records standard server-side technical metadata for analytics (page URL, referrer, anonymised IP, user-agent) via Google Analytics 4. The mobile app does NOT include Google Analytics or any other analytics SDK.

03Data We Collect (Employees, VoxSG App Only)

Sign-in to the staff area of the VoxSG app requires:

• Corporate email address
• Password — stored only as a salted cryptographic hash by Firebase Authentication, never accessible to VOX GLOBAL personnel or anyone else.

Once signed in, the employee badge profile displays the following stored data (created and managed by an administrator in Firebase Console — employees do not register through the app):

• Display name
• Job title
• Department
• Corporate email
• Start date

Firebase SDK also generates a Firebase Installation ID per app installation — a technical identifier used only to make Firebase Authentication and Firestore function. This is not an advertising identifier.

04How We Use Data

• Enquiries — solely to respond to your trade or partnership request, typically within one business day. We do not contact you again for marketing without further consent.
• Employee data — solely to authenticate access to the staff badge area and to display the employee's own corporate profile to them.
• Website analytics — to measure aggregate page popularity and improve the site. Individual visitor profiles are not built.

We do NOT sell, rent, or share personal data with any third party for marketing purposes.

05Data Storage & Security

All app and enquiry data is stored using Google Firebase services — Authentication for sign-in records, Firestore for profile and enquiry records. Firebase infrastructure runs on Google Cloud Platform, with preference for the Singapore region or the nearest Asia-Pacific region where available.

The website is hosted on a separate commercial hosting service in the EU.

Data is encrypted in transit using TLS 1.2 or higher, and at rest by Google Cloud's encryption layer. Access to Firestore data is restricted to authorised VOX GLOBAL personnel and is governed by Firestore Security Rules that block any client-side access except by the data owner.

No security measure is absolute. We will notify affected users in the event of a personal data breach, as required by PDPA.

06Your Rights & Account Deletion

Under Singapore PDPA you may, at any time, request:

• Access to the personal data we hold about you.
• Correction of inaccurate data.
• Withdrawal of consent, which may end your ability to use the relevant service.
• Account deletion — see below.

Self-service deletion (employees, in the app): open My Badge → tap Delete Account → re-enter your password to confirm. Your Firestore profile and Firebase Authentication record are removed immediately.

Email request: If you cannot access the in-app option, or you submitted only a public enquiry through the website, email vox-global@voxglobal.ltd with the subject Account deletion request. We act on verified requests within 7 business days.

Step-by-step deletion instructions are also published at voxglobal.ltd/delete-account.

You may also lodge a complaint with the Personal Data Protection Commission of Singapore. We respond to verified requests within 30 days.

07Mobile Application Data Safety

The VoxSG Android app does NOT contain:

• Any advertising SDK
• Any third-party analytics SDK (no Firebase Analytics, no AppsFlyer, no Adjust, no Facebook SDK)
• In-app purchases or subscription billing
• Any tracking SDK

The app requests only two Android permissions:

• INTERNET — to communicate with Firebase
• ACCESS_NETWORK_STATE — to detect when the device is offline and show appropriate UI

The app does NOT request: location, contacts, camera, microphone, calendar, SMS, phone, biometric, or the advertising ID permission (com.google.android.gms.permission.AD_ID).

The Google Play Data Safety declaration reflects these actual practices.

08Third-Party Services

VoxSG mobile app uses one sole third-party service: Google Firebase (Authentication and Cloud Firestore). Firebase acts as our service provider (data processor) and is bound by Google's data processing terms. No other third-party services, SDKs, or trackers are present in the app.

The website (voxglobal.ltd) additionally uses:

• Google Analytics 4 — for aggregate visitor analytics. Anonymised IP is used; no cross-site tracking; no advertising features enabled.
• The commercial hosting provider on whose servers this website is delivered.

We do not sell personal data to any third party.

09Data Retention

• Public enquiry data (from website or app contact form): retained for up to 2 years from last contact, then deleted automatically.
• Employee profile data: retained while the employee account exists. Deleted within 90 days of an account deletion request, or immediately when the employee uses in-app self-service deletion.
• Firebase Authentication records: removed when the corresponding employee account is deleted.
• Website analytics data (Google Analytics): retained for 26 months per Google Analytics default settings, then deleted automatically.

10Children's Privacy

Neither the VoxSG app nor this website is directed at persons under the age of 13. We do not knowingly collect personal data from minors. If we discover that we have collected data from a child, we will delete it promptly.

11International Transfers

VOX GLOBAL operates from Singapore. Cloud infrastructure for the app uses Singapore-region Firebase servers where available; otherwise the nearest Asia-Pacific region. Website data may transit through EU-based servers operated by our hosting provider. Cross-border transfers comply with PDPA Schedule 1 (contractual protection of personal data).

12Policy Updates

This Policy may be updated as required. The effective date at the top of this page is revised whenever material changes occur. For substantive changes affecting your rights, users will be notified via a notice on the website or by email. Continued use of the website or the VoxSG app after an update constitutes acceptance of the revised Policy.

13Contact & Data Requests

Company: VOX GLOBAL PTE. LTD. — Data Protection
Email: vox-global@voxglobal.ltd
Phone: +65 8453 5286
Address: 20 Temple Street, Singapore 058565
Hours: Mon–Fri · 09:00–18:00 SGT

For account or data deletion requests, please write Account deletion request in the email subject line.