Privacy Notice

Bumpcube Pte. Ltd. (UEN 202229369W), 7 Temasek Boulevard, #12-07, Suntec Tower 1, Singapore 038987, provides business communications services. This notice explains how we handle personal data in connection with our website, enquiries, accounts and services. To contact us about personal data, use our Contact form and select “Privacy request”. You may also write to our postal address, marked “Data Protection”.

For our own enquiries, business administration, billing and security, Bumpcube determines the relevant purposes of processing. When a business customer supplies recipient data and message content for delivery, we process that data to provide the agreed service under the customer’s instructions and applicable contract. A recipient should normally contact the business that sent the message first. We will assist with requests relating to data we handle and, where appropriate, refer them to that business.

Depending on the service used, information may include contact names, company details, email addresses, telephone numbers, enquiries and support correspondence; account identifiers and authorized-user details; billing and transaction records; recipient numbers, message content or templates, delivery results and verification status; and technical information such as IP addresses, browser details, timestamps and security events. Connected messaging services may provide business account, sender and permission identifiers. We do not require passwords or verification codes in sales enquiries.

We receive information directly from visitors and customers, through their use of our services, from their authorized users, and from relevant communications providers. We use it to answer enquiries; set up and support services; deliver and troubleshoot communications; administer contracts and payments; prevent abuse; maintain security; and meet applicable obligations. We obtain consent where required or rely on another permitted basis. Optional marketing consent is separate from submitting an enquiry. You may ask us to stop marketing or withdraw consent; we will explain any resulting service limitations.

We share information where necessary with authorized personnel and providers supporting business email, hosting, communications delivery, security, payments and professional advice. The information shared depends on the service and purpose. We may disclose information where required by law or reasonably necessary to protect rights and investigate abuse. Communications platforms and recipient networks may also process information under their own terms and privacy notices. Before a new integration is activated, we will explain relevant processing arrangements to the customer.

Our website may process technical information needed to display pages, maintain security and prevent misuse. Contact-form information is used to handle your request and related correspondence. Anti-abuse checks may assess browser signals, submission patterns and limited technical identifiers. Service providers may process technical information needed to perform these checks. Browser settings can restrict cookies and similar storage, although this may affect website functionality.

Communications routing and service providers may involve processing outside Singapore. Where required, we will put appropriate arrangements in place to support protection comparable to the Singapore PDPA. We use reasonable technical and organizational safeguards suited to the data and service, including access controls and protected connections where implemented. No system is completely secure. We assess incidents and make required notifications.

We keep personal data only for as long as needed for the purpose for which it was collected, applicable legal requirements, contractual obligations and justified business needs. We then delete or anonymize it. Retention depends on the record type and service, including support, billing, security and communications delivery. Where information is retained after a request, its use is limited to the purpose justifying retention. Contact us if you need information about the records associated with your account.

Use the protected Contact form and select “Privacy request” to request access, correction, consent withdrawal or deletion where applicable. We may reasonably verify identity and authority, explain applicable exceptions, and notify you of a reasonable access fee before proceeding. Access requests are handled as soon as reasonably possible; if we cannot respond within 30 days, we will provide written information within that period about when we can respond. Correction and consent withdrawal are handled according to applicable requirements. For deletion requests, our service targets are acknowledgement within 30 business days of receipt and completion within 60 calendar days of receipt, with an explanation where more time or justified retention is necessary. These deletion targets do not extend a shorter applicable legal, regulatory, contractual or platform deadline. See our Data Deletion Instructions. You may also raise concerns with Singapore’s Personal Data Protection Commission.

We may update this notice to reflect changes in our services, practices or applicable requirements. We will make the current version available on this website and communicate material changes where appropriate.