Effective Date: October 2, 2026
Last Updated: October 2, 2026
SingaporeDigitalCard.com ("we," "us," or "our") operates an independent, paid assistance service for the Singapore SG Arrival Card (SGAC). This Privacy Policy explains how we collect, use, disclose, store and protect your personal data, and the choices and rights you have under Singapore's Personal Data Protection Act 2012 (PDPA) and, where it applies to you, the EU General Data Protection Regulation (GDPR) and the UK GDPR.
IMPORTANT: We are NOT affiliated with, endorsed by, or connected to the Immigration & Checkpoints Authority of Singapore (ICA) or the Singapore Government. The official SG Arrival Card is free: you can submit it yourself on ICA's website or in the MyICA mobile app. When you use our service, we collect your details and submit them to ICA on your behalf, as described below.
SingaporeDigitalCard.com is responsible for the personal data described in this policy (the "controller" under the GDPR). For any privacy question or request, including those addressed to our data protection contact under the PDPA, email support@singaporedigitalcard.com with the subject line Privacy Inquiry — [Your Order Reference] (order references start with SDC-).
When you prepare an order, you provide, for yourself and for each traveler in the order, the details ICA asks for in the SG Arrival Card:
We also hold the acknowledgement ICA issues for each submitted SG Arrival Card, so that you can download it through order tracking.
ICA requires every traveler to answer health questions: whether they currently have certain symptoms (such as fever, cough, shortness of breath, headache, vomiting, dizziness or rash), and whether they recently visited countries or regions that ICA lists (such as yellow fever risk countries in the last 6 days, or other listed regions in the last 21 days). Health data is sensitive personal data (a "special category" of data under the GDPR). We collect these answers only to file them with ICA exactly as given. They never change eligibility, price or processing, we never use them for any other purpose, and we do not give medical advice.
Payment is processed entirely by Stripe, Inc. (PCI DSS Level 1 certified). We do not store, process, or have access to your full card number, CVV, or billing address. We only receive a transaction confirmation and payment amount from Stripe.
We use your personal data exclusively to:
We do NOT sell your personal data, and we do NOT use it for marketing, advertising or profiling. Our eligibility check is a simple rule applied to your answers (for example, Singapore citizens are directed to ICA's free service); it does not make any decision about your entry to Singapore, and you can contact us if you think it is wrong.
We collect, use and disclose your personal data with your consent for the purposes in section 3, which you give when you provide your details and place an order, and otherwise as the PDPA permits. When you provide the personal data of other travelers, you confirm that you are authorized to do so (for example as their parent or legal guardian) and that each of them has agreed to our collecting, using and disclosing their data as described in this policy, including its submission to ICA.
You may withdraw your consent at any time by emailing support@singaporedigitalcard.com. We will tell you the likely consequences first: if we can no longer use the details ICA requires, we cannot file your SG Arrival Card, and our Refund Policy applies to the order. Withdrawal does not affect a submission already made to ICA.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:
Where the GDPR or the UK GDPR applies, we process health declaration answers only on the basis of explicit consent (Article 9(2)(a)). Each traveler, or the person submitting the order with that traveler's permission, gives it by entering the health answers and confirming them, together with ICA's declaration, in the review step before payment. You can withdraw this consent at any time before your SG Arrival Card is submitted by emailing support@singaporedigitalcard.com; we will then not submit the answers, which means we cannot file your SG Arrival Card (ICA requires them), and our Refund Policy applies. Withdrawal does not affect processing that took place before it, including a submission already made to ICA.
We share your personal data only with:
We do NOT sell, rent, or trade your personal data to any third party.
Our service runs on Cloudflare's global network, and our providers process data in several countries, including the United States. Your personal data may therefore be stored or processed outside Singapore and outside your own country. We transfer it only to recipients bound by contractual data protection commitments that give it a standard of protection comparable to the PDPA, and, for data covered by the GDPR or the UK GDPR, through a lawful transfer mechanism such as the European Commission's Standard Contractual Clauses. All transfers are protected by encryption in transit.
Our service runs on Cloudflare Workers with data stored in Cloudflare D1 (database) and R2 (file storage), on secure, SOC 2 Type II certified infrastructure.
Access to personal data is restricted to authorized staff members with role-based permissions. Status changes and edits that staff make to an order are recorded with the staff member's identity.
You may request early deletion by contacting support@singaporedigitalcard.com.
Under the PDPA, you may ask us to:
If the GDPR or the UK GDPR applies to you, you may also ask us to:
To exercise any of these rights, email us at support@singaporedigitalcard.com with your order reference. To protect your data, we may ask you to confirm your identity, for example with the email address used for the order. We respond to access and correction requests within 30 days; if we need longer, we will tell you when we expect to respond.
If you are not satisfied with our response, you may complain to Singapore's Personal Data Protection Commission (PDPC) or, in the EEA or the UK, to your local data protection supervisory authority.
If a data breach affects your personal data, we will notify you and the relevant authorities, such as the PDPC, where the PDPA, the GDPR or the UK GDPR requires it.
Our service is not directed at children under 13. While SG Arrival Cards may be submitted for minors by their parents or legal guardians, we do not knowingly collect information from children without parental consent.
We use essential storage and, when you select Accept All, optional analytics cookies:
You can decline optional analytics cookies by selecting Essential Only. We do not use advertising cookies.
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last Updated" date.
For privacy-related inquiries or to exercise your data rights:
Email: support@singaporedigitalcard.com
Subject line: Privacy Inquiry — [Your Order Reference]
SingaporeDigitalCard.com is an independent paid assistance service and is not affiliated with or endorsed by the Immigration & Checkpoints Authority of Singapore (ICA) or the Singapore Government. The official SG Arrival Card is free on ICA's website and in the MyICA mobile app.
SingaporeDigitalCard prepares and submits SG Arrival Cards on your instruction; ICA and Singapore's immigration officers make every decision on the SG Arrival Card and on entry to Singapore.
注文番号を添えてサポートにお問い合わせいただき、必要な内容をご説明ください。カード情報や非公開のアクセスリンクは送らないでください。
support@singaporedigitalcard.com