Privacy policy
Who we are. Party Action People Pte. Ltd. (UEN 202111913D), 51 Goldhill Plaza #07-07, Singapore 308900, is responsible for the personal data described here. We follow Singapore's Personal Data Protection Act 2012 (PDPA) and, where they apply to you, the EU GDPR and the UK GDPR and Data Protection Act 2018.
Data Protection Officer: Zachary John. Contact: info@partyactionpeople.com.
This website
This site sets no cookies, runs no analytics and loads nothing from other companies. You can read every page without us learning who you are.
| When you… | What we keep | Why | How long |
|---|---|---|---|
| read the site | Nothing. Our host, Vercel, handles each request, and that includes your IP address. We add no tracking. | To deliver the page and keep the site secure | Kept by Vercel under its own policy. We don't copy or keep request logs. |
| check someone with Verify | A keyed hash of the handle, email, number, LinkedIn link or code you entered, the result, and the time. Rate limits use a hash of your IP address with a salt that changes daily. We never store what you typed or your IP address itself. | To stop people trawling the checker, and to spot impersonation | 24 hours, then deleted |
| email us | Your message and contact details, in our email system (Google Workspace) | To reply and to work with you | As long as the conversation or relationship needs, then deleted, or longer where the law requires |
Verify runs a small proof of work in your browser instead of a captcha. It needs no account and sets no cookie.
Staff only. PAP staff who sign in to manage this site get a session cookie on the admin area, nowhere else. Staff register their work handles, emails and numbers for Verify. We store them as keyed hashes, never in plain text, and delete them when someone leaves. When one of our team gives you a verify code, we record your name and company as its recipient, who requested it and who approved it, so we can audit our own staff. We keep this for 12 months, then delete it.
Our events and our business
When you register for or attend one of our events, or sponsor, speak or work with us, we collect what that needs:
- name, email, phone, company and role;
- registration and ticket details, plus any dietary or access needs you tell us;
- your messages to us;
- billing details. Card payments are handled by our payment providers, including Wise. We never store full card numbers.
Each event's own site may have its own privacy notice for its ticketing and apps.
Why we use it, and on what legal basis:
- to run your registration, ticket, sponsorship or agreement — contract;
- to reply to you and keep you informed about events you're part of — legitimate interest;
- to send you marketing, but only if you agreed — consent, which you can withdraw at any time;
- to meet legal, tax and accounting duties — legal obligation.
Sponsors. We pass your contact details to a sponsor only if you opted in to sharing them, at registration or at the event, for example by letting a sponsor scan your badge. We never sell personal data. Where we describe who comes to our events, we name organisations and give counts, not people.
Who processes data for us:
- Vercel (website hosting);
- Supabase (the site's database: Verify records and site content; hosted in Tokyo, Japan);
- Google Workspace (email, and staff sign-in);
- our registration, ticketing and payment providers, including Wise;
- our CRM and email providers.
Beyond them, we share data only with event co-hosts and partners where your participation needs it, and with our advisers, or authorities where the law requires it.
Where it goes. Singapore, Japan (where this site's database and servers run), the EU and UK, and the US. Transfers rely on appropriate safeguards, such as standard contractual clauses.
How long. Only as long as the purposes above need it, or as the law requires: tax and accounting records are kept for at least five years, as Singapore law requires. Then we delete or anonymise it.
Your rights. You can ask to see, correct or delete your data, to restrict or object to how we use it, to withdraw consent, and to take a copy. You can also complain to the PDPC in Singapore or to the data protection authority where you live. Email info@partyactionpeople.com and we'll reply within 30 days.
Security. We protect data with technical and organisational measures appropriate to it. To report a security issue or someone impersonating us, see our security policy at /security.
Changes. The version and effective date are at the top of this page, and every change is listed in the changelog.