1. Who We Are
1.1 This Privacy Policy explains how CLICKHERE2 NETWORK PTE LTD (UEN 199907810Z) ("ClickHere2 Network", "ClickHere2", "we", "us" or "our"), collects, uses, discloses and protects personal data.
1.2 We handle personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA") and other applicable laws.
1.3 This policy covers: visitors to our website; customers and prospective customers; users of our client area; and people who contact our support or sales teams.
1.4 This policy does not cover Customer Content. Our customers may store personal data in the websites, databases and mailboxes they host with us. In that situation, the customer decides how that data is used, and we process it on the customer's behalf (see section 9).
2. Personal Data We Collect
Identity and contact details: name, company name, email address, phone number and postal address.
Account details: login credentials, security settings and account preferences.
Billing details: your billing name and address, the Services and amounts you have ordered, invoices, and your payment history. We do not receive or store your full card number, expiry date or card security code. Card details are entered into payment forms provided and controlled by our payment providers, PayPal and Stripe, and pass directly from your browser to them. We receive only a transaction reference and limited payment information, such as the card brand and last four digits, the amount, the currency and the payment status, and for PayPal the payer's email address and PayPal transaction identifier.
Domain registration data: registrant, administrative, technical and billing contact details required by registries and registrars.
SSL validation data: organisation details and other information that certificate authorities need to validate OV and EV certificates.
Support records: messages, tickets, call notes and attachments you send us.
Technical and usage data: IP addresses, browser and device information, log-in records, and how you use our website and client area.
Marketing preferences: whether you have agreed to receive marketing from us.
3. How We Collect It
We collect personal data:
directly from you, when you order, register, fill in forms or contact us;
automatically, through cookies, server logs and similar technologies (see section 8); and
from third parties where relevant, such as payment processors, registries and certificate authorities.
4. Why We Use It
We use personal data to:
create and manage your Account and provide the Services you order;
register, renew and transfer domain names, and obtain SSL certificates for you;
process payments, send invoices and manage renewals;
send service, security, billing and renewal notices;
provide technical support;
protect our systems and customers, and detect and prevent fraud, abuse and security incidents;
comply with legal, regulatory, tax and accounting obligations, and with lawful requests from authorities;
improve our website and Services, using aggregated or de-identified data where practical; and
send marketing communications, where you have agreed to receive them or where the law otherwise permits.
5. Marketing
5.1 We send marketing messages only in accordance with the PDPA, the Spam Control Act 1975 and the Do Not Call provisions, where they apply.
5.2 You can opt out at any time by using the unsubscribe link in our emails or by contacting us. Opting out does not stop service, billing or security notices, which we need to send to provide the Services.
5.3 We do not sell your personal data.
6. Who We Share It With
We share personal data only as needed for the purposes in section 4, with:
infrastructure and hosting providers that operate the platform your Services run on;
domain registrars and registries, which need registrant data to register and manage domains;
certificate authorities and SSL distributors, which need validation data to issue certificates;
payment processors, which process credit card payments and other payment modes;
providers of email delivery, support ticketing, security and analytics tools;
professional advisers, such as auditors and lawyers;
authorities, regulators and law enforcement, where the law requires or permits disclosure; and
a successor business, if we are involved in a merger, acquisition or sale of assets, subject to appropriate confidentiality.
We require service providers to protect personal data and to use it only to provide services to us.
7. Transfers Outside Singapore
Some of our service providers store or process personal data outside Singapore. When we transfer personal data overseas, we take appropriate steps, such as contractual safeguards, so that it receives a standard of protection comparable to the PDPA, as the PDPA requires.
8. Cookies and Similar Technologies
8.1 We use:
essential cookies, which make our website, shopping cart and client area work and keep them secure; and
analytics / marketing cookies, to understand how visitors use our website and improve it.
8.2 You can manage cookies through your browser settings. If you block essential cookies, parts of the website and client area may not work.
9. Customer Content We Host
9.1 When you store personal data in your website, database or mailboxes, you are responsible for how that data is collected and used. We process it only to provide, secure, back up and support the Services, in line with our Terms of Service.
9.2 We do not access Customer Content except where needed to provide support you request, maintain security, investigate abuse, or comply with the law.
10. How We Protect It
We use reasonable security arrangements to protect personal data, including access controls, encryption in transit and storage. No system is completely secure. If a data breach occurs, we will assess it and notify the Personal Data Protection Commission and affected individuals where the PDPA requires it, within the required timeframes.
11. How Long We Keep It
We keep personal data only for as long as needed for the purposes it was collected for, or for legal or business reasons. For example:
account records: while your Account is active and for up to 7 years after account closure;
billing, payment and tax records: 7 years after the end of the relevant financial year, or longer where required by law;
support records: 3 years after the support request is closed; and
server and security logs: 90 days from the date recorded.
Records may be kept longer where necessary for a legal obligation, dispute or investigation. When personal data is no longer needed for the purposes for which it was collected and is no longer required for legal or business purposes, we will delete or anonymise it. Copies held in backups are deleted as the backups expire.
12. Your Rights
12.1 You may ask us to:
give you access to the personal data we hold about you and tell you how it has been used or disclosed in the past year;
correct personal data that is inaccurate or incomplete; or
stop using your personal data, by withdrawing consent.
12.2 We will respond as soon as reasonably possible. We may need to verify your identity first. Where the law allows, we may charge a reasonable fee for access requests, and we will tell you about the fee before we process the request.
12.3 If you withdraw consent, we may not be able to continue providing some Services. We will explain the consequences before we act on your request.
12.4 You may also ask us to delete your personal data. We will do so where we no longer need it, but we may keep records that the law requires or that we need for billing, disputes or security.
13. Children
Our Services are not intended for children. We do not knowingly collect personal data from anyone under 18.
14. Changes to This Policy
We may update this policy. We will post the updated version with a new effective date. For material changes, we will notify customers by email or through the client area.
15. Contact Us
If you have questions about this Privacy Policy or how we handle your personal data, wish to request access to or correction of your personal data, withdraw consent, or raise a privacy concern, please contact our Data Protection Officer through our contact form.
Please indicate that your enquiry concerns privacy or personal data and provide sufficient details for us to understand and respond to your request. Do not include passwords, full payment card details or unnecessary sensitive information. We may ask for additional information to verify your identity before acting on a request.
