Introduction
Sightpedia is committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, store, and protect information about you when you use our platform, whether you are a consumer searching for eyecare services, an eyecare professional or business listing your practice, or a visitor browsing our content.
This policy applies to all users of the Sightpedia platform, including our website, directory services, enquiry tools, and professional features. We operate in compliance with the Singapore Personal Data Protection Act 2012 (PDPA), as amended in 2020, and maintain readiness for the General Data Protection Regulation (GDPR) for users in the European Union.
Throughout this policy, "personal data" means any information that can identify you, either on its own or when combined with other information. This includes your name, contact details, account information, and usage data.
Information We Collect
We collect different categories of information depending on how you interact with Sightpedia. The following describes what we collect and why it is necessary for the services we provide.
Account and Profile Information
For consumers: name, email address, phone number, location data, and search preferences.
For providers: practice name, professional credentials, verification documents, service descriptions, contact details, and business registration information.
For profile claims: proof of ownership documentation to verify your association with a listed practice.
Usage and Technical Information
- IP address, browser type, device information, and operating system
- Pages visited, search queries, features used, and time spent
- Referral sources and interaction patterns
Enquiry and Communication Data
- Messages sent to providers through our platform
- Appointment request details
- Customer support interactions
Marketing and Preference Data
- Communication preferences and newsletter subscriptions
- Interest categories such as myopia, presbyopia, or specific services
- Your response to promotional campaigns
AI and Analytics Data
Interaction data used to improve Hashmeta AI marketing services and platform optimization. Where possible, this data is processed in aggregate or non-identifiable form to protect your privacy.
How We Use Information
We use your personal data only for specific, legitimate purposes. The table below outlines each purpose and the legal basis that supports it.
| Purpose | Legal Basis |
|---|---|
| Provide directory search and matching services | Performance of contract / legitimate interest |
| Process profile claims and provider verification | Performance of contract / legal obligation |
| Facilitate consumer enquiries and referrals | Performance of contract / consent |
| Send service notifications and updates | Legitimate interest / consent |
| Deliver personalized content and recommendations | Consent / legitimate interest |
| Improve platform and AI services | Legitimate interest |
| Marketing communications (with opt-out) | Consent / legitimate interest |
| Legal compliance and fraud prevention | Legal obligation / legitimate interest |
Legal Basis for Processing
For users in the European Union, GDPR requires us to identify a legal basis for each processing activity. We rely on the following bases:
- Performance of contract: Processing necessary to provide the services you have requested, such as directory search or profile management.
- Consent: Processing based on your explicit agreement, such as marketing communications or personalized recommendations. You may withdraw consent at any time.
- Legitimate interest: Processing that supports our business operations, platform improvement, and security, balanced against your privacy rights.
- Legal obligation: Processing required to comply with applicable laws, regulations, or court orders.
To withdraw consent, contact us using our contact form (choose "Privacy request") or adjust your preferences in your account settings. Withdrawal does not affect the lawfulness of processing before your request.
Data Sharing and Disclosure
We share personal data only where necessary and with appropriate safeguards. We do not sell your personal data to third parties for unrelated marketing.
- Eyecare Providers: When you submit an enquiry, relevant data is shared with the intended provider so they can respond.
- Service Providers: Hosting, analytics, email delivery, and verification services operate under strict data processing agreements.
- Hashmeta AI: For platform operation and AI marketing service delivery.
- MAXIGHT: Where partnership services are integrated into the platform.
- Legal Requirements: Courts, regulators, or law enforcement when legally required.
- Business Transfers: In the event of a merger, acquisition, or asset sale, with notice provisions to protect your data.
International Transfers
Your data is primarily stored in Singapore. Our cloud infrastructure may involve servers in Singapore and AWS Asia-Pacific regions. As we expand globally, data may be transferred to jurisdictions with adequacy decisions or protected by standard contractual clauses. We apply appropriate safeguards to ensure your data remains protected regardless of location.
Data Security
We implement technical and organizational measures to protect your personal data:
- Encryption in transit using TLS 1.3 and encryption at rest for stored data
- Access controls and authentication requirements for staff
- Regular security assessments and vulnerability monitoring
- Staff training on data protection and limited access principles
- Incident response procedures to address potential breaches promptly
Provider verification documents are handled with additional access restrictions and stored securely. While we take these measures seriously, no system can guarantee absolute security.
Data Retention
We retain your personal data only as long as necessary for the purposes described in this policy:
- Consumer accounts: Until you request deletion or after 2 years of inactivity
- Enquiry records: 3 years for dispute resolution and service improvement
- Provider profiles: Duration of active listing plus 1 year
- Analytics data: Aggregated after 2 years; individual logs retained for 1 year
Legal hold exceptions may apply where we are required to retain data for regulatory or litigation purposes.
Your Rights and Choices
Depending on your location and applicable law, you have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you.
Correction
Update or correct inaccurate or incomplete information.
Deletion
Request removal of your account and associated data, subject to legal exceptions.
Restriction
Limit certain processing activities while we resolve a dispute or verify your request.
Portability
Receive your data in a structured, machine-readable format.
Objection
Opt out of certain processing, including direct marketing.
Withdraw Consent
Withdraw consent for processing based on consent at any time.
Complaint
Lodge a complaint with the Personal Data Protection Commission of Singapore or your local supervisory authority.
To exercise your rights, use our contact form (choose "Privacy request") or use the settings in your account. We respond within 30 days for standard requests and up to 90 days for complex cases. Identity verification is required to protect your data.
Children's Privacy
Sightpedia is not intended for users under the age of 16. We do not knowingly collect personal data from children. If we discover that we have collected data from a child under 16, we will delete it promptly. Parents or guardians who believe their child has provided personal data should contact us using our contact form (choose "Privacy request").
Our educational content is general information and not tailored as pediatric-specific medical service.
Third-Party Links
Our directory listings may link to external provider websites, and our educational content may reference third-party sources. We do not control the privacy practices of these external sites and encourage you to review their privacy policies before sharing any personal data.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified to registered users by email. Minor changes will be reflected by an updated date on this page. Continued use of Sightpedia after changes constitutes acceptance of the revised policy. Previous versions are available on request.
Contact Us
Data Protection Officer
Contact: our contact form (choose "Privacy request")
We will respond as soon as practicable and within the time allowed by law.
Regulatory authority: Personal Data Protection Commission, Singapore