Legal
Privacy policy
Version: [VERSION] · Effective: [EFFECTIVE DATE]
The short version: Rovakit is a content site. We collect very little: your email if you subscribe, business contact details if you list a space, and analytics only if you agree to cookies. We never sell your data.
1. Who we are
Rovakit (rovakit.com) is run by Alderloft Pte. Ltd. (UEN 202645601D), a Singapore company ("we", "us"). We handle personal data in line with Singapore's Personal Data Protection Act (PDPA) and, where it applies to you, the EU/UK GDPR. We are the data controller.
2. What we collect and why
- Newsletter: your email address, to send the newsletter you asked for. Legal basis (GDPR): consent. Unsubscribe any time via the link in every email.
- Listing submissions ("list your space" / featured listings): business name, contact name, business email, phone, and listing details you provide, to review, publish and manage your listing and contact you about it. Legal basis: performing our agreement with you / taking steps at your request.
- Payments: featured listings are paid through Airwallex payment links/checkout. Airwallex collects and processes your card details; we never see or store them. We receive a payment record (name, email, amount, status). Legal basis: contract; legal obligation (tax records).
- Analytics (only with consent): pages viewed, referrer and campaign tags, approximate location from IP, browser and device type. Legal basis: consent.
- Messages you send us. Legal basis: legitimate interests in responding.
- Server logs (IP address, request details) kept by our host for security. Legal basis: legitimate interests in keeping the site secure.
We don't sell your personal data or use it for targeted advertising.
3. Cookies and consent
- Essential: a small cookie/local-storage entry remembering your cookie choice. No consent needed.
- Analytics (PostHog): set only after you accept in our cookie banner. If you decline, PostHog doesn't load.
- Affiliate links: some links to products and services are affiliate links. We don't set cookies for them, but if you click through, the partner's site may set its own cookies under its own privacy policy.
- No advertising cookies on Rovakit.
You can change or withdraw consent at any time via the "Cookie settings" link in the footer, or by clearing cookies in your browser.
4. Who we share data with
Only these service providers, acting on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Render | Website hosting and server logs | [REGION: confirm] |
| Resend | Sending the newsletter and emails | United States |
| Airwallex | Payments for featured listings | Airwallex (Singapore) Pte Ltd, Singapore; data is primarily hosted in Singapore and may also be stored or processed in other countries where Airwallex operates (including Australia, Japan, Malaysia, Belgium, the Netherlands and the United States), with safeguards for cross-border transfers. |
| PostHog | Analytics (with consent) | United States |
We may also disclose data if the law requires it, or to a buyer of the business who must keep protecting it under this policy. Published listings are, by design, visible to the public.
5. International transfers
Some providers process data outside Singapore and your country. PostHog analytics, when you consent, is processed in the United States. Where the PDPA or GDPR requires it, we rely on safeguards such as standard contractual clauses so your data is protected to a comparable standard.
6. How long we keep data
- Newsletter email: until you unsubscribe (then deleted or kept on a suppression list so we don't email you again).
- Listing details: while the listing is live, plus [12 months] after it ends.
- Payment records: 5 years, for Singapore tax rules.
- Analytics: [up to 12 months: confirm PostHog setting].
- Server logs: up to [90 days].
We protect data with encryption in transit and access limited to people who need it. If a breach puts your data at risk, we'll notify you and the authorities as the law requires.
7. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent at any time. Email info@alderloft.com; we'll reply within 30 days (we may need to verify your identity).
If you're unhappy, please tell us first. You can also complain to Singapore's Personal Data Protection Commission, or your local data protection authority in the EU/UK.
8. Data Protection Officer
Alderloft Pte. Ltd., Singapore · [DPO NAME] · info@alderloft.com
9. Children
Rovakit isn't aimed at children under 13 (or the age of digital consent where they live, if higher), and we don't knowingly collect their data. If you think a child has given us data, contact us and we'll delete it.
10. Changes
We'll post changes here with a new version and effective date. For significant changes we'll also tell newsletter subscribers by email.