Privacy Policy
Who we are and what this policy covers
This Privacy Policy explains how Penacle Finspere (“we”, “us”, “our”) collects, uses, discloses, stores, and protects personal data when you visit https://penaclefinspere.org, create an account, use our dashboards and market tools, or contact support. It also describes the choices and rights available to you under Singapore’s Personal Data Protection Act 2012 (“PDPA”), where applicable.
Contact details and data protection point of contact
Support contact
- Email: [email protected]
- Phone: +65 6908 2741
- Address: 79 Robinson Road, #20-01, Singapore 068897
Privacy requests
To make a privacy request (access, correction, deletion where applicable, or withdrawal of consent), email us from the address linked to your account and include: your full name, 2) account email, 3) request type, 4) what data or activity it relates to, and 5) any relevant dates or screenshots. For safety, we may ask for additional verification before we act on a request.
What personal data we collect
We collect personal data in a few common ways:
Data you provide directly
- Account and profile details (e.g., name, email, country/region, age confirmation 18+)
- Support messages and attachments you send to us
- Preferences you configure in the platform (e.g., alerts, watchlists, notification settings)
Data collected automatically
- Device and log data (IP address, browser type, device identifiers, language, timestamps, pages visited)
- Usage and interaction data (feature usage, clicks, session duration, error logs)
- Cookie and similar technology data (see “Cookies and similar technologies”)
Data from verification and service partners (where applicable)
Depending on the features you use and the partners involved, we may receive information needed to enable access, prevent fraud, and meet compliance expectations. This can include identity verification results, screening outcomes, or payment status indicators, typically provided by third-party vendors or execution partners.
Why we use personal data (purposes)
We use personal data for the following operational purposes:
Providing and improving the platform
- Create and administer accounts
- Provide access to dashboards, analytics, alerts, and other tools
- Maintain service performance, troubleshoot issues, and improve features
Safety, integrity, and compliance
- Detect, prevent, and investigate fraud, misuse, security incidents, and policy violations
- Enforce our Terms and Conditions and protect our users and systems
- Respond to lawful requests from competent authorities, where required
Communications
- Send service messages (e.g., security notices, account notifications, policy updates)
- Respond to support inquiries and user requests
- Provide product-related updates you choose to receive (you can opt out where available)
Legal bases and consent (Singapore)
Under the PDPA, we generally rely on consent, deemed consent (where applicable), and other lawful grounds such as legitimate interests, contractual necessity, and legal obligations depending on the context. You may withdraw consent by contacting us; however, withdrawal can affect our ability to provide certain services.
How we share personal data
We do not “sell” personal data as a business model. We may disclose personal data to:
Service providers (processors)
Vendors that help us operate the platform (hosting, analytics, customer support tools, security monitoring, email delivery, identity verification where applicable). They are expected to handle data under contractual confidentiality and security obligations.
Execution, liquidity, or brokerage partners (where applicable)
If certain functionality involves third parties, limited data may be shared to support account linkage, transaction routing, or operational reconciliation. The exact data fields depend on the feature and partner requirements.
Legal and safety disclosures
We may disclose data if we believe it is reasonably necessary to comply with applicable law, respond to legal process, enforce agreements, or protect rights, safety, and security.
Cross-border transfers
Our service providers may process data outside Singapore. When we transfer personal data internationally, we take reasonable steps to ensure the recipient provides a standard of protection comparable to the PDPA (for example, through contractual safeguards and due diligence).
Data retention
We keep personal data only as long as necessary for the purposes described in this policy, including for dispute handling, security investigations, and compliance needs. Retention periods vary depending on the data type and context. When data is no longer needed, we take steps to delete or anonymize it, where feasible.
Security measures and your responsibilities
We use administrative, technical, and organizational controls designed to reduce the risk of unauthorized access, alteration, disclosure, or loss. No system is perfectly secure, so you also play a role:
Account security expectations
- Use a strong, unique password and do not share it
- Enable any available security features (e.g., multi-factor authentication, if offered)
- Keep your email account secure (it can be used to reset access)
- Notify us promptly if you suspect unauthorized activity
Incident response
If we detect a security incident that may affect your account, we may notify you through the platform or by email with practical steps to protect yourself.
Cookies and similar technologies
We use cookies and similar tools to:
- keep you signed in (where applicable),
- remember preferences,
- measure performance and usage, and
- detect abuse.
You can control cookies through your browser settings. Disabling certain cookies may limit some site functionality.
Your rights and choices (PDPA)
Depending on your situation and applicable law, you may request:
- access to personal data we hold about you,
- correction of inaccurate or incomplete data,
- information about how your data has been used or disclosed (where required), and
- withdrawal of consent for certain processing.
If you believe we have not handled your personal data appropriately, you may also contact Singapore’s Personal Data Protection Commission (PDPC).
Children and age limits
Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18.
Third-party links
Our website may contain links to third-party sites or services. Their privacy practices are governed by their own policies, and we are not responsible for their content or handling of personal data.
Updates to this Privacy Policy
We may update this policy to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will post the updated version on the website and may provide additional notice through the platform or email. The “effective” date will be shown at the top of the published policy page (where displayed).
How to contact us
For privacy questions or requests, contact:
Email: [email protected]
Phone: +65 6908 2741
Address: 79 Robinson Road, #20-01, Singapore 068897