Politique de confidentialité | SingaporeDigitalCard

Effective Date: October 2, 2026
Last Updated: October 2, 2026

SingaporeDigitalCard.com ("we," "us," or "our") operates an independent, paid assistance service for the Singapore SG Arrival Card (SGAC). This Privacy Policy explains how we collect, use, disclose, store and protect your personal data, and the choices and rights you have under Singapore's Personal Data Protection Act 2012 (PDPA) and, where it applies to you, the EU General Data Protection Regulation (GDPR) and the UK GDPR.

IMPORTANT: We are NOT affiliated with, endorsed by, or connected to the Immigration & Checkpoints Authority of Singapore (ICA) or the Singapore Government. The official SG Arrival Card is free: you can submit it yourself on ICA's website or in the MyICA mobile app. When you use our service, we collect your details and submit them to ICA on your behalf, as described below.

1. Who We Are and How to Contact Us

SingaporeDigitalCard.com is responsible for the personal data described in this policy (the "controller" under the GDPR). For any privacy question or request, including those addressed to our data protection contact under the PDPA, email support@singaporedigitalcard.com with the subject line Privacy Inquiry — [Your Order Reference] (order references start with SDC-).

2. Information We Collect

2.1 Information You Provide

When you prepare an order, you provide, for yourself and for each traveler in the order, the details ICA asks for in the SG Arrival Card:

Passport and identity details: full name, any previous name used, passport number and expiry date, sex, date of birth, nationality, country of birth, and country, state and city of residence
Contact information: email address and mobile phone number
Travel information: arrival and departure dates, purpose of travel, last place of embarkation and next destination, mode of transport and flight, vehicle or vessel details
Accommodation in Singapore: hotel, residential address or other arrangement (for example a day trip or transit)
Health declaration: each traveler's answers to ICA's health questions (see section 2.2)
Eligibility answers: each traveler's status (for example foreign visitor or In-Principle Approval holder) and whether they will clear Singapore immigration
Declaration records: that ICA's declaration was accepted for each traveler, when, and whether the lead applicant confirmed it on a companion's behalf
Order and support information: your order reference, selected service speed, price and payment status, correction requests, and the messages you send us by email or chat

We also hold the acknowledgement ICA issues for each submitted SG Arrival Card, so that you can download it through order tracking.

2.2 Health Declaration Data

ICA requires every traveler to answer health questions: whether they currently have certain symptoms (such as fever, cough, shortness of breath, headache, vomiting, dizziness or rash), and whether they recently visited countries or regions that ICA lists (such as yellow fever risk countries in the last 6 days, or other listed regions in the last 21 days). Health data is sensitive personal data (a "special category" of data under the GDPR). We collect these answers only to file them with ICA exactly as given. They never change eligibility, price or processing, we never use them for any other purpose, and we do not give medical advice.

2.3 Information Collected Automatically

Device data: browser type, operating system and device type
Usage data: pages visited, language, referral source and campaign tags, recorded with a session identifier by our own first-party measurement
IP address: for security, rate limiting, fraud prevention and Cloudflare Turnstile bot verification, and in our usage and technical error records
Browser storage: a working copy of your form on your device, your cookie choice, the session identifier of our measurement and, if you accept them, analytics cookies (see section 12)

2.4 Payment Information

Payment is processed entirely by Stripe, Inc. (PCI DSS Level 1 certified). We do not store, process, or have access to your full card number, CVV, or billing address. We only receive a transaction confirmation and payment amount from Stripe.

3. How We Use Your Information

We use your personal data exclusively to:

Check each traveler's eligibility for our service and show you the price before you pay
Review your details and submit your SG Arrival Card to ICA within ICA's submission window
Send service emails: payment confirmation, requests for missing details, the request to confirm health answers when ICA's window opens, filing updates and ICA's acknowledgement
Let you track your order, correct details and download ICA's acknowledgement
Provide customer support and handle correction, cancellation and refund requests
Prevent fraud, abuse and unauthorized access, and keep our service secure
Keep transaction records and comply with applicable legal obligations

We do NOT sell your personal data, and we do NOT use it for marketing, advertising or profiling. Our eligibility check is a simple rule applied to your answers (for example, Singapore citizens are directed to ICA's free service); it does not make any decision about your entry to Singapore, and you can contact us if you think it is wrong.

4. Consent and Legal Bases

4.1 Under the PDPA

We collect, use and disclose your personal data with your consent for the purposes in section 3, which you give when you provide your details and place an order, and otherwise as the PDPA permits. When you provide the personal data of other travelers, you confirm that you are authorized to do so (for example as their parent or legal guardian) and that each of them has agreed to our collecting, using and disclosing their data as described in this policy, including its submission to ICA.

You may withdraw your consent at any time by emailing support@singaporedigitalcard.com. We will tell you the likely consequences first: if we can no longer use the details ICA requires, we cannot file your SG Arrival Card, and our Refund Policy applies to the order. Withdrawal does not affect a submission already made to ICA.

4.2 Under the GDPR and the UK GDPR

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

Performance of a contract (Article 6(1)(b)): to provide the service you order, including submitting your details to ICA
Legal obligation (Article 6(1)(c)): to keep transaction records and meet legal requirements
Legitimate interests (Article 6(1)(f)): to keep our service secure and prevent fraud and abuse
Consent (Article 6(1)(a)): for optional analytics cookies, which you can decline or withdraw at any time

4.3 Explicit Consent for Health Data

Where the GDPR or the UK GDPR applies, we process health declaration answers only on the basis of explicit consent (Article 9(2)(a)). Each traveler, or the person submitting the order with that traveler's permission, gives it by entering the health answers and confirming them, together with ICA's declaration, in the review step before payment. You can withdraw this consent at any time before your SG Arrival Card is submitted by emailing support@singaporedigitalcard.com; we will then not submit the answers, which means we cannot file your SG Arrival Card (ICA requires them), and our Refund Policy applies. Withdrawal does not affect processing that took place before it, including a submission already made to ICA.

5. Data Sharing

We share your personal data only with:

ICA (Immigration & Checkpoints Authority of Singapore) — the details, health answers and declaration required for your SG Arrival Card, submitted through ICA's official channel. ICA handles them under Singapore law, and ICA's declaration explains that Singapore government agencies may verify and share this information.
Stripe, Inc. — for payment processing
Cloudflare, Inc. — infrastructure provider (hosting, database and file storage, Turnstile verification, sending our emails through Cloudflare Email Service and receiving yours through Cloudflare Email Routing)
Analytics and chat providers we enable — consent-controlled website analytics and, where offered, a live chat widget (see section 12)
Authorities and professional advisers — where the law requires it, or where needed to establish, exercise or defend legal claims

We do NOT sell, rent, or trade your personal data to any third party.

6. International Transfers

Our service runs on Cloudflare's global network, and our providers process data in several countries, including the United States. Your personal data may therefore be stored or processed outside Singapore and outside your own country. We transfer it only to recipients bound by contractual data protection commitments that give it a standard of protection comparable to the PDPA, and, for data covered by the GDPR or the UK GDPR, through a lawful transfer mechanism such as the European Commission's Standard Contractual Clauses. All transfers are protected by encryption in transit.

7. Data Storage & Security

7.1 Encryption

Traveler details, including passport numbers and health declaration answers, are encrypted at rest using AES-GCM encryption
To find and manage your order, the lead applicant's name, email address, travel dates and the number of travelers are stored without that additional encryption layer
All data in transit is protected by TLS/SSL encryption
ICA acknowledgements are stored in encrypted cloud storage (Cloudflare R2)

7.2 Infrastructure

Our service runs on Cloudflare Workers with data stored in Cloudflare D1 (database) and R2 (file storage), on secure, SOC 2 Type II certified infrastructure.

7.3 Access Controls

Access to personal data is restricted to authorized staff members with role-based permissions. Status changes and edits that staff make to an order are recorded with the staff member's identity.

8. Data Retention

Order records (traveler details, health answers, declaration records, ICA acknowledgements, payment records, the emails we have sent you and support messages) are kept for as long as we need them to provide the service and to handle corrections, support requests, refunds and disputes, and to meet legal and transaction record obligations. You can ask us to delete your data at any time (section 9); legal and transaction record obligations may limit deletion.
Unpaid orders are kept so that you can return to them. You can ask us to delete an unpaid order at any time.
Usage and email delivery records, including IP addresses and browser details, are scheduled for automatic deletion after 18 months. We may keep aggregated statistics that do not identify you.
Security and rate-limiting records containing your IP address expire automatically within one hour, and email verification codes within 60 minutes at most.
Technical error reports, which can include your IP address and browser details, are kept only as long as we need them to diagnose and fix problems.
The working copy of your form stays in your browser's storage on your device until you clear it.

You may request early deletion by contacting support@singaporedigitalcard.com.

9. Your Rights

Under the PDPA, you may ask us to:

Access the personal data we hold about you and learn how it has been used or disclosed in the past year
Correct an error or omission in your personal data
Withdraw consent to our collecting, using or disclosing your personal data (section 4)

If the GDPR or the UK GDPR applies to you, you may also ask us to:

Delete your data (subject to legal retention requirements)
Export your data in a portable format
Restrict or object to certain processing, including processing based on our legitimate interests

To exercise any of these rights, email us at support@singaporedigitalcard.com with your order reference. To protect your data, we may ask you to confirm your identity, for example with the email address used for the order. We respond to access and correction requests within 30 days; if we need longer, we will tell you when we expect to respond.

If you are not satisfied with our response, you may complain to Singapore's Personal Data Protection Commission (PDPC) or, in the EEA or the UK, to your local data protection supervisory authority.

10. Data Breaches

If a data breach affects your personal data, we will notify you and the relevant authorities, such as the PDPC, where the PDPA, the GDPR or the UK GDPR requires it.

11. Children's Privacy

Our service is not directed at children under 13. While SG Arrival Cards may be submitted for minors by their parents or legal guardians, we do not knowingly collect information from children without parental consent.

12. Cookies and Similar Technologies

We use essential storage and, when you select Accept All, optional analytics cookies:

Essential storage — remembers your cookie choice and keeps a working copy of your form on your device
Cloudflare Turnstile — bot protection verification
First-party measurement — a session identifier in your browser's session storage links the usage records described in section 2.3, kept on our own systems to operate and secure the service and never used for advertising
Optional analytics — if we enable them, Microsoft Clarity (which, without your consent, runs in cookieless mode), Google Analytics, Yandex Metrica and Cloudflare Web Analytics (cookieless) measure how the site is used; the cookie-based tools set cookies only after you select Accept All
Live chat — if we offer it, the chat widget is provided by Tawk.to, which processes the messages you send in the chat

You can decline optional analytics cookies by selecting Essential Only. We do not use advertising cookies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last Updated" date.

14. Contact Us

For privacy-related inquiries or to exercise your data rights:

Email: support@singaporedigitalcard.com
Subject line: Privacy Inquiry — [Your Order Reference]

SingaporeDigitalCard.com is an independent paid assistance service and is not affiliated with or endorsed by the Immigration & Checkpoints Authority of Singapore (ICA) or the Singapore Government. The official SG Arrival Card is free on ICA's website and in the MyICA mobile app.

SingaporeDigitalCard prepares and submits SG Arrival Cards on your instruction; ICA and Singapore's immigration officers make every decision on the SG Arrival Card and on entry to Singapore.