Privacy Policy

This Privacy Policy describes how Wafra Business Solutions handles personal data collected through our website, enquiries, discovery calls, communications and business relationships.

Where applicable, personal data will be handled in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA") and other applicable requirements.

This page sets out Wafra's website privacy framework. It is not a substitute for legal review, and its wording may be amended following review by Wafra's legal or data protection adviser.

Depending on how you interact with Wafra, the personal data we may collect can include:

Personal & Contact Information

• Name
• Email address
• Telephone number
• WhatsApp number
• Job title or role, where relevant

Business Information

• Company name
• UEN
• Industry
• Business size or approximate revenue range
• GST registration status
• Accounting requirements
• Services you are interested in

Discovery Call Information

Information submitted when booking a Discovery Call, including:

• Preferred appointment date and time
• Preferred consultation method
• Accounting or financial challenges described by you
• Information voluntarily provided about your business

Communications

Information contained in:

• Emails
• Contact forms
• WhatsApp communications
• Enquiries
• Feedback
• Other correspondence with Wafra

Website & Technical Information

Where the relevant functionality applies, the website may collect information such as:

• IP address
• Browser type
• Device type
• Pages visited
• Referral source
• Website interaction information
• UTM campaign parameters
• Cookie or similar technology information

We may collect personal data when you:

• Submit an enquiry
• Book a Discovery Call
• Contact Wafra
• Subscribe to Wafra Insights
• Engage Wafra for services
• Provide accounting or business information
• Communicate with us through email, telephone or WhatsApp
• Interact with our website
• Voluntarily provide information for another business purpose

Information may also be received from authorised representatives or other parties where appropriate and permitted.

Wafra may use personal data for purposes such as:

• Responding to enquiries
• Arranging and managing Discovery Calls
• Understanding prospective client requirements
• Preparing service proposals
• Providing agreed accounting or business services
• Communicating with clients
• Managing client relationships
• Maintaining business and accounting records
• Processing billing and payments
• Supporting applicable regulatory or legal obligations
• Improving Wafra's services and website
• Analysing website usage and enquiry sources
• Sending requested Wafra Insights or communications
• Preventing misuse, fraud or security incidents
• Managing Wafra's legitimate business operations

Personal data should only be used for purposes reasonably connected with the purposes for which it was collected, subject to applicable requirements.

As part of providing accounting and financial management services, clients may provide Wafra with confidential business and financial information.

Depending on the agreed scope of services, this may include accounting records, invoices, expense records, bank-related records, financial statements, supplier information, customer information and other business documents.

Wafra recognises the confidential nature of this information and will handle such information for purposes connected with the agreed services and other permitted or required purposes.

Client financial information should never be displayed publicly through the Wafra website unless specifically intended and authorised for public disclosure.

Wafra does not disclose personal data unnecessarily. Information may be disclosed where appropriate to:

• Technology and hosting providers
• Accounting software providers
• Communication providers
• Payment service providers
• Cloud storage providers
• Professional advisers
• Contractors or service providers supporting Wafra's operations
• Government agencies or regulatory authorities, where required
• Other parties authorised by you or your business

Where third-party service providers process information on Wafra's behalf, reasonable steps are taken to seek to ensure that information is handled appropriately in accordance with applicable requirements and contractual arrangements.

Some technology, cloud or service providers used by Wafra may process or store information outside Singapore.

Where personal data is transferred outside Singapore, Wafra will take appropriate steps as required under applicable Singapore data protection requirements.

Wafra takes reasonable administrative, technical and organisational measures to protect personal and business information against risks such as unauthorised access, collection, use, disclosure, copying, modification, loss or similar risks.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

Wafra may retain personal data for as long as reasonably necessary for the purposes for which it was collected, to provide services, maintain appropriate business records, fulfil legal or regulatory requirements, resolve disputes or protect legitimate business interests.

When personal data is no longer required for legal or business purposes, reasonable steps may be taken to securely dispose of it or anonymise it, where appropriate.

The Wafra website may use cookies or similar technologies to:

• Enable website functionality
• Remember preferences
• Understand website usage
• Measure website performance
• Understand referral sources
• Measure marketing campaigns

Where non-essential cookies or marketing technologies are implemented, appropriate consent controls will be provided where required.

Where permitted and where appropriate consent has been obtained, Wafra may send information about:

• Wafra Insights
• Accounting updates
• Business financial education
• Wafra services
• Relevant company announcements

You can unsubscribe from marketing emails using the unsubscribe option provided or by contacting Wafra. Unsubscribing from marketing communications does not prevent Wafra from sending necessary service-related or transactional communications.

You may contact Wafra regarding:

• Access to your personal data
• Correction of inaccurate information
• Withdrawal of consent, where applicable
• Questions about how your personal data is handled
• Other applicable data protection requests

Requests will be considered and handled in accordance with applicable Singapore requirements. Please note that Wafra may have legitimate or legal obligations to retain certain records even where a request for deletion is made.

Where Wafra relies on consent for the collection, use or disclosure of personal data, you may request to withdraw that consent by contacting Wafra.

Withdrawal of consent may affect Wafra's ability to continue providing certain services where the information is necessary to perform those services.

The Wafra website may contain links to external websites or third-party services.

Wafra is not responsible for the privacy practices or content of third-party websites. Visitors should review the privacy policies of those third parties before providing personal information.

Wafra may update this Privacy Policy from time to time to reflect changes to its services, technology, business practices or applicable requirements.

The latest version will always be published on this page.