Privacy Policy

01Who we are

Ribbet Interactive Pte. Ltd. (UEN 201007039N), a company incorporated in Singapore, operates this website and the WhatsApp workflow services described on it. In this policy, "we", "us" and "our" mean that company.

For anything to do with personal data, including a request under the Personal Data Protection Act 2012 ("PDPA"), write to hello@ribbet.asia.

02What this policy covers

This policy covers this website and your dealings with us as a visitor or prospective client — browsing ribbet.asia, and contacting us by WhatsApp, email or phone.

It does not govern personal data that flows through a workflow we build and operate for a client — a store supervisor's phone number, for instance, inside that client's daily reporting system. In that situation we act on the client's instructions and the client's own agreement with us governs the handling. Section 9 explains the distinction.

03What this website collects

Nothing. Specifically, this website:

• sets no cookies of any kind — not for analytics, not for advertising, not for preferences;
• runs no analytics — no Google Analytics, no tag manager, no advertising or tracking pixels;
• writes nothing to your browser's local or session storage;
• has no accounts, no logins and no forms — there is nowhere to type personal data into it;
• builds no profile of you and does not track you across other sites.

Every link that lets you contact us — WhatsApp, email, telephone — hands you to an app you already control. We learn nothing until you actually send something.

04What happens automatically

Two things happen simply because the page loads. Neither is something we collect for our own purposes, but you should know about both.

Hosting logs

The site is hosted on Vercel. Like any web host, Vercel records requests — typically IP address, browser user-agent, the page requested and a timestamp — to serve the page, keep the service running and defend against abuse. These logs are held by Vercel under its own privacy terms; we do not use them to identify individual visitors, and we do not combine them with anything else.

Web fonts

The page's typefaces are served by Google Fonts. Your browser requests those font files directly from Google, which means Google receives your IP address and user-agent as part of that request. We receive nothing from it and set no Google cookie. If you would rather this did not happen, blocking fonts.googleapis.com and fonts.gstatic.com leaves the site fully readable in a fallback typeface.

05When you contact us

If you message us on WhatsApp, email hello@ribbet.asia or call, we will hold whatever you chose to send: typically your name, the contact details you used, your company, and what you told us about your operation.

We use it to reply, to prepare a quotation, and to keep an ordinary record of our dealings with you. Nothing else.

06What we never do

• We never sell, rent or trade personal data. There is no circumstance in which we would.
• We never add you to a marketing list because you enquired. If we send you something, it is because you asked for it or because it concerns work we are doing for you.
• We never use client operational data — sales figures, receipts, submissions — to advertise, to train models, or for any purpose other than running that client's workflow.
• We never disclose personal data to third parties except as described in this policy, or where the law requires it.

07How long we keep things

We keep enquiry correspondence for as long as there is a business reason to — an active conversation, a live engagement, or a legal or accounting obligation that requires the record. When that reason ends, we delete it or anonymise it.

Records we are obliged to retain, such as those supporting invoices and accounts, are kept for the period the relevant Singapore law requires and no longer.

08Data held outside Singapore

Our hosting and email providers operate globally, so data may be processed on servers outside Singapore. Where that happens we take reasonable steps to satisfy ourselves that the recipient is bound to a standard of protection comparable to the PDPA, as section 26 of the Act requires.

09Data inside a workflow we run

When we build and operate a workflow for a client, personal data belonging to that client's staff passes through it — names, WhatsApp numbers, submitted reports, and photographs of receipts.

For that data the client is the organisation responsible for it and we act on the client's instructions, in the role the PDPA describes as a data intermediary. We process it only to run the workflow the client engaged us to run, we keep it separated per client, and we do not use it for any other purpose.

If you are a store supervisor or employee whose data is in a system we operate, the organisation to approach is your employer, since it decides what is collected and why. Tell us and we will point you to the right contact, but we cannot make decisions about your data on our own.

The specific commitments — retention, security, deletion on termination — are set out in each client's written agreement with us.

10Your rights under the PDPA

In respect of personal data we hold about you, you may:

• Ask for access — what we hold about you, and how it has been used or disclosed in the past year;
• Ask for correction — have an error or omission put right;
• Withdraw consent — tell us to stop using or disclosing it, which we will honour, though it may mean we can no longer provide something you have asked for.

Email hello@ribbet.asia. We will respond as soon as we reasonably can, and in any event within the timeframe the PDPA requires. We may need to verify your identity first, and there are narrow circumstances in which the Act permits us to decline a request — if so we will tell you which and why.

If you are not satisfied with how we have handled a request, you may raise it with Singapore's Personal Data Protection Commission.

11Security

We apply security measures appropriate to the sensitivity of what we hold: encrypted transport, access limited to the people who need it, credentials kept out of source control, and separation between client deployments.

No system is perfectly secure, and we will not pretend otherwise. What we undertake is to take reasonable and appropriate care, and to tell you promptly if a breach occurs that affects you and meets the notification thresholds under the PDPA.

12Changes to this policy

If this policy changes, the revised version will be published on this page with a new effective date. Where a change materially affects how we handle personal data we already hold, we will take reasonable steps to tell the people affected rather than relying on you to notice.

13How to reach us

Ribbet Interactive Pte. Ltd. — UEN 201007039N, Singapore
Email hello@ribbet.asia
Or message us on WhatsApp

Mark anything to do with personal data for the attention of our data protection contact, and it will be routed correctly.