Privacy Policy

Overview

At Simplyfi TrustPal, your privacy and data protection are our top priorities.
We comply with:
    •    The Personal Data Protection Act (PDPA) of Singapore,
    •    The Personal Data Protection Act 2010 (Malaysia), and
    •    The Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.

This policy explains how we collect, use, store, and protect your information across all regions we operate in.

Information We Collect

We may collect and process:

• Personal Details: name, email, phone number, company, and role.

• Usage Data: browser type, device info, IP address, and activity logs.

• Financial or Case Data: submitted voluntarily by licensed advisers or institutions through secure encrypted forms.

How We Use Your Data

Your information is used to:
    •    Provide secure access to TrustPal tools and modules.
    •    Improve user experience and product functionality.
    •    Facilitate safe data exchange between financial institutions, advisers, and trustees.
    •    Communicate platform updates, regulatory notices, and support responses.

We do not sell or rent your data to third parties.
All use is restricted to operational, compliance, and support purposes.

Data Hosting & Security

All platform data is securely hosted on Amazon Web Services (AWS) infrastructure located in Singapore, with regional redundancy available for Malaysia and Hong Kong.

AWS maintains compliance with ISO 27001, SOC 2, and GDPR standards.
Security controls implemented by TrustPal include:
    •    HTTPS / TLS 1.2+ encryption
    •    Multi-Factor Authentication (MFA)
    •    Role-based access control
    •    Encrypted data backups and audit trails
    •    24/7 monitoring and breach response protocols

Third-Party Integrations

TrustPal integrates securely with select third-party solutions such as HubSpot, DocuSign, and Slack to enhance operational efficiency and compliance workflows.
Each integration complies with applicable privacy laws and is governed by formal data-protection agreements.

Cross-Border Data Transfers

When data is transferred between Singapore, Malaysia, and Hong Kong, we ensure appropriate safeguards are applied, including:
    •    Encryption of all transferred data
    •    Use of secure, PDPA- and GDPR-compliant service providers
    •    Contractual clauses ensuring equivalent protection standards

Your Rights

You have the right to:
    •    Request access to your personal data.
    •    Correct or update your personal information.
    •    Withdraw consent for data processing (subject to legal obligations).
    •    Request deletion of data, where permissible.

For privacy-related requests, please contact: support@trustpal.co

Data Retention

We retain personal and operational data only as long as necessary for the purposes stated or as required by regional regulatory frameworks.

Updates to This Policy

This policy may be updated periodically to reflect regulatory, operational, or technological changes.
The latest version will always be available on this page with a revised effective date.

Last Updated: 27th Oct 2025