Privacy Policy

1. Who We Are

Maxifi Digital is a Singapore-registered Answer Engine Optimisation (AEO) consultancy.

• Registered address: 60 Paya Lebar Road, #07-54, Paya Lebar Square, Singapore 409051
• Contact for privacy matters: privacy@maxifidigital.com
• Data Protection Officer / Privacy contact: hello@maxifidigital.com

2. What Personal Data We Collect

We collect personal data only when you voluntarily submit it through our forms or contact channels:

• Contact form: Name, organisation, email, message content
• Visibility Snapshot request: Website URL, business category, buyer question, email address
• Scorecard request: Website, category, buyer question, email
• Automatically collected: IP address, browser type, pages visited, referring URL, device type (via standard web server logs and optional analytics)
• Cookies: Session cookies (Netlify), optional analytics cookies if enabled

3. Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Article 6):

• Legitimate interest (Article 6(1)(f)): Delivering the Visibility Snapshot report, responding to inquiries, improving our services
• Consent (Article 6(1)(a)): Marketing communications and optional analytics — only with explicit opt-in
• Contract (Article 6(1)(b)): If you enter a service agreement with Maxifi Digital

4. How We Use Your Data

We use the personal data you provide for the following purposes:

• Delivering your requested Visibility Snapshot or Scorecard report
• Responding to your inquiry or support request
• Sending you follow-up communications about our services (only with your consent)
• Improving our website, tools, and services based on usage patterns
• Complying with legal obligations (e.g. tax, audit)
• Fraud prevention and security

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes listed above:

• Snapshot/Scorecard requests: 12 months, or until you request deletion
• Contact form inquiries: 12 months from last contact, then deleted
• Marketing consent: Until you withdraw consent or unsubscribe
• Server logs (IP, browser): 30 days, then automatically purged

6. Third Parties & Sub-Processors

We may share your personal data with the following third-party service providers:

• Netlify: Website hosting and form handling (GDPR compliant, DPA in place)
• Email service provider (if applicable): SendGrid, Mailgun, or similar for transactional and marketing emails
• CRM / business tools: HubSpot or equivalent for managing inquiries and follow-up
• Analytics (optional): Plausible Analytics or similar (privacy-focused, no cookies, EU-based)

All sub-processors are required to maintain GDPR compliance and execute Data Processing Agreements (DPAs).

7. Your Rights Under GDPR

If you are located in the EU or UK, you have the following rights regarding your personal data:

• Right of access: Request a copy of the data we hold about you
• Right of rectification: Correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): Request deletion of your data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Opt out of marketing and certain processing activities
• Right to withdraw consent: Withdraw marketing consent at any time

To exercise any of these rights, email privacy@maxifidigital.com with "Data Subject Request" in the subject line. We will respond within 30 days.

8. International Data Transfers

Maxifi Digital is based in Singapore. If you are located in the EU/UK and provide personal data to us, your data may be transferred to Singapore or other jurisdictions where our service providers operate.

We ensure adequate safeguards via:

• Standard Contractual Clauses (SCCs) for transfers outside the EEA
• Data Processing Agreements with all sub-processors
• Privacy-by-design principles in our systems

9. Cookies & Tracking

Our website uses minimal cookies:

• Session cookies: Netlify form handling (essential, no consent required)
• Analytics cookies (optional): Only if you opt in; we use privacy-focused tools that do not require cookie consent

You can disable cookies in your browser settings at any time. This may affect form submission.

10. Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Secure hosting on Netlify (SOC 2 Type II certified)
• Access controls and regular security audits

However, no system is 100% secure. If you believe your data has been compromised, contact us immediately at privacy@maxifidigital.com.

11. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect data from minors. If we discover we have collected data from a child, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by email (if you have provided one) or by posting the updated policy here with a new "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data:

• Email: privacy@maxifidigital.com
• General inquiries: hello@maxifidigital.com
• Postal address: 60 Paya Lebar Road, #07-54, Paya Lebar Square, Singapore 409051