Privacy & data protection
How the association collects, uses, and protects your personal data under Singapore's Personal Data Protection Act (PDPA).
What we collect
When you apply for membership or contact us, we collect the details you provide — your name, NRIC or passport number, date of birth, citizenship, contact details, and ancestral information. For members, we also keep membership status and payment records.
Why we collect it
We use your data only to assess eligibility, manage membership and subscriptions, maintain the clan genealogy, and contact you about the association. We do not sell your data or use it for unrelated purposes.
Consent
We collect and use your data with your consent, given when you submit a form. You may withdraw consent at any time, subject to legal and record-keeping obligations.
Where your data is held & how it is protected
Member data is hosted in Singapore (AWS, ap-southeast-1). It is encrypted at rest, passwords are hashed, and access is restricted to authorised officers. Payments are handled by HitPay, a MAS-licensed provider; we never store card details.
Genealogy & public search
Public genealogy search shows only limited fields — name, generation, ancestral village, and life years. Full records and the records of living people are not shown publicly. You may ask us to remove your details from public search.
Retention
We keep your data for as long as you are a member, and afterwards only as long as needed for the association's records and legal obligations.
Your rights
You may ask to access or correct your data, or withdraw consent. See how to make a data request →
Contact
For any question about your personal data, contact the association's data protection officer at phuaclan.sg@gmail.com.