top of page
OG Logo.png

Privacy Policy

Privacy Policy — 8Hexa Financial

​

Last updated: 24 July 2026

​

We operate the website 8hexa.com and provide a range of financial technology services. Protecting your personal information is paramount to us. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of your personal data in compliance with the Personal Data Protection Act (PDPA) of Singapore.


1. Introduction

​

This Privacy Policy explains how 8Hexa Financial Pte. Ltd. (“8Hexa”, “we”, “us” or “our”) collects, uses, discloses, protects and retains personal data obtained through the website at 8hexa.com (“Website”).

​

This Policy applies to:

  • visitors to our Website;

  • individuals who submit business enquiries through our Website; and

  • individuals who apply for employment, internship or trainee positions through our Website.

​

We handle personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”) and other applicable laws.

​

This Policy does not describe the handling of personal data collected during client onboarding, know-your-customer or know-your-business checks, transaction processing or the provision of payment services. Such personal data is governed by the relevant client privacy notices, service agreements and other documents provided during onboarding.

​

2. Personal Data We Collect

​

2.1 Business enquiries

When you contact us or submit an enquiry through our Website, we may collect information including:

  • your name;

  • company name;

  • business email address;

  • telephone number;

  • the type of payment or business requirement;

  • a description of your payment needs;

  • estimated transaction volume; and

  • subsequent correspondence with us.

​

2.2 Job applications

​

When you apply for a position through our Website, we may collect information including:

  • your name;

  • email address;

  • telephone number;

  • the position for which you are applying;

  • your résumé or curriculum vitae;

  • employment and educational history;

  • professional qualifications;

  • information contained in your personal introduction or biography; and

  • any other information you voluntarily provide as part of your application.

​

2.3 Technical and usage information

​

When you browse our Website, our Website systems and service providers may automatically collect certain technical information, including:

  • Internet Protocol address;

  • browser and device type;

  • operating system;

  • dates and times of access;

  • pages viewed;

  • referring website or source;

  • cookie identifiers; and

  • security and system logs.

​

2.4 Information you provide voluntarily

​

We may also collect personal data that you voluntarily provide when communicating with us by email, telephone or other channels.

​

We do not ask you to submit identification documents, bank-account details, payment credentials or KYC information through the public Website or its general contact form. Please do not include such information in a general enquiry unless we have specifically requested it through an appropriate and secure channel.

​

3. How We Use Personal Data

​

We may collect, use or disclose personal data obtained through the Website for purposes including:

  • responding to and following up on business enquiries;

  • understanding and assessing your payment or business requirements;

  • conducting preliminary business, eligibility or compliance assessments;

  • arranging discussions, demonstrations or meetings;

  • communicating with you about your enquiry;

  • processing and evaluating employment, internship or trainee applications;

  • contacting applicants regarding recruitment matters;

  • operating, maintaining and securing our Website;

  • detecting and preventing misuse, fraud, cybersecurity threats or unauthorised activity;

  • understanding Website usage and improving its content, functionality and performance;

  • maintaining appropriate business and compliance records;

  • establishing, exercising or defending legal claims;

  • complying with applicable legal, regulatory or law-enforcement requirements; and

  • any other purpose that we notify you of at or before the time of collection.

​

We do not sell personal data.

​

We do not use personal data collected through the Website to make decisions based solely on automated processing that produce legal or similarly significant effects on an individual.

​

4. Consent and Other Permitted Processing

​

We collect, use and disclose personal data:

  • with your consent;

  • where your consent may be deemed to have been given under the PDPA;

  • where the collection, use or disclosure is necessary to respond to a request initiated by you; or

  • where otherwise permitted or required under the PDPA or other applicable laws.

​

You may withdraw your consent by giving us reasonable notice. We will inform you of the likely consequences of withdrawing consent.

​

Following withdrawal, we will cease collecting, using or disclosing the relevant personal data unless its continued collection, use or disclosure is permitted or required by law.

​

Withdrawal of consent may affect our ability to respond to your enquiry, consider your application or provide the requested service.

​

5. Disclosure of Personal Data

​

We may disclose personal data, where reasonably necessary for the purposes described in this Policy, to:

  • our directors, officers and employees responsible for business development, operations, compliance, recruitment, information technology or administration;

  • website hosting, cloud-storage, email, communications, form-processing, cybersecurity, analytics and information-technology service providers;

  • recruitment and human-resource service providers;

  • professional advisers, including lawyers, auditors, accountants and consultants;

  • our related companies, banks, regulated payment institutions or business partners where reasonably necessary to assess or respond to your enquiry;

  • government agencies, regulators, law-enforcement authorities, courts or other persons where disclosure is required or permitted by law; and

  • a purchaser, successor or other relevant party in connection with a proposed or completed corporate restructuring, merger, acquisition or transfer of business, subject to appropriate confidentiality requirements.

​

Our service providers are required to process personal data only for the applicable purposes and to protect it appropriately.

We do not disclose personal data collected through Website enquiries to unrelated third parties for their independent marketing purposes.

​

6. Cookies and Similar Technologies

​

Our Website may use cookies and similar technologies to:

  • enable essential Website functionality;

  • maintain Website security;

  • remember preferences;

  • understand how visitors navigate and use the Website; and

  • improve Website content and performance.

​

Essential cookies may be necessary for the Website to function properly.

​

Where we use non-essential analytics or similar cookies that require consent, we will provide an appropriate means for you to manage your preferences.

​

You may also manage cookies through your browser settings. Disabling certain cookies may affect some Website features, but disabling non-essential cookies should not prevent you from accessing the principal information on the Website.

​

7. Data Retention

​

We retain personal data only for as long as it is reasonably required for the purposes for which it was collected and for any applicable legal or business purpose.

​

Unless a longer period is reasonably required:

  • business-enquiry information will normally be retained for up to 24 months after our last substantive interaction with you; and

  • personal data relating to an unsuccessful job application will normally be retained for up to 12 months after the relevant recruitment process has concluded.

​

We may retain information for a longer period where:

  • discussions or a business relationship remain ongoing;

  • you become an onboarded client or employee;

  • the information is required for legal, regulatory, audit, compliance or dispute-resolution purposes; or

  • you have consented to a longer retention period.

​

When personal data is no longer required for a legal or business purpose, we will take reasonable steps to delete, anonymise or otherwise cease retaining it.

​

8. International Transfers

​

Our Website, email, cloud-storage and other service providers may store or process personal data outside Singapore.

 

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the recipient provides a standard of protection that is comparable to the protection required under the PDPA, including through appropriate contractual or other legally recognised safeguards where applicable.

​

9. Access, Correction and Withdrawal of Consent

​

Subject to applicable exceptions under the PDPA, you may:

  • request access to personal data about you that is in our possession or under our control;

  • request information about how we have used or disclosed your personal data within the period prescribed by law;

  • request correction of an error or omission in your personal data; and

  • withdraw consent to our continued collection, use or disclosure of your personal data.

​

You may also request that we cease retaining or delete personal data that is no longer required for a legal or business purpose.

 

We may be unable to delete certain information where continued retention is required or permitted for legal, regulatory, security, compliance, employment or legitimate business purposes.

​

We may need to verify your identity before responding to a request. Requests will be handled in accordance with the PDPA, and applicable exceptions or administrative charges may apply.

​

10. Security

​

We apply reasonable administrative, technical and physical measures designed to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, loss, disposal or similar risks.

 

Access to personal data is restricted to personnel and service providers who reasonably require it for authorised purposes.

Although we take reasonable precautions, no website, electronic communication or Internet transmission can be guaranteed to be completely secure.

​

11. Third-Party Websites

​

Our Website may contain links to websites operated by third parties.

​

This Privacy Policy does not apply to those third-party websites. We are not responsible for their privacy practices, and you should review their applicable privacy policies before providing personal data.

​

12. Changes to This Policy

​

We may update this Privacy Policy periodically to reflect changes to our Website, business practices or applicable requirements.

The updated Policy will be posted on this page with a revised “Last updated” date. Material changes may also be communicated through other appropriate means.

​

13. Contact Us

​

For questions, feedback, complaints or requests relating to this Privacy Policy or your personal data, please contact our Data Protection Officer:

​

Data Protection Officer
8Hexa Financial Pte. Ltd.
8 Temasek Boulevard
#29-01 Suntec Tower Three
Singapore 038988

​

Email: dpo@8hexa.com

bottom of page