Privacy Policy

Attestation Runner (“we”, “us”), of 7 Temasek Boulevard, #12-07 Suntec Tower One, Singapore 038987, collects, uses and discloses personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA). This policy explains what we collect, why, who we share it with, how long we keep it, and how you can reach us about it.

• Contact details: name, phone or WhatsApp number, email address, and the address for a visit, pickup or delivery.
• Job details: the documents you ask us to handle, their purpose and destination, and messages you send us.
• Identity details: NRIC, passport or pass details of signers, only when a notary, SAL or an embassy requires them for your job.
• Payment records: amounts, dates and payment references. Card details are processed by our payment provider and are not stored by us.
• Website data: pages visited, device and browser type, and how you arrived at our site, collected through cookies and analytics (see section 8).

• To prepare a quotation and reply to your enquiry.
• To arrange notary visits and submit, track, collect and deliver your documents.
• To verify identity where the notary, SAL or an embassy requires it.
• To invoice you, take payment and keep the accounting records required by law.
• To handle complaints, prevent fraud and comply with legal obligations.
• To understand how our website is used and improve it.

We do not sell personal data, and we do not send marketing messages unless you have agreed to receive them. We comply with Singapore’s Do Not Call rules.

By sending us an enquiry or engaging our services, you consent to our collecting, using and disclosing your personal data for the purposes above. If you give us personal data of another person — for example a parent who will sign, or a company director — you confirm you have their consent to do so. You may withdraw consent at any time by contacting us (section 10); we will tell you the likely consequences, which may include our being unable to continue the job.

We collect NRIC or passport details only when the law or an official body requires them for your job, in line with the Personal Data Protection Commission’s advisory guidelines on NRIC numbers. Please do not send NRIC or passport images through our website forms; we will ask for what is needed securely when it is needed. Copies are kept only for the job and deleted as described in section 7.

Only those who need it to complete your job or to run our business:

• The notary public attending to your document.
• The Singapore Academy of Law, the relevant embassy or consulate, and other official bodies your job involves.
• Courier companies delivering your documents in Singapore or abroad.
• Our payment provider, accountant, and IT and messaging service providers (such as email, WhatsApp and secure cloud storage), under confidentiality obligations.
• Authorities, where the law requires disclosure.

Where personal data is transferred outside Singapore — for example to a courier’s overseas network, to the recipient abroad you nominate, or to a cloud provider — we take reasonable steps to ensure it receives a standard of protection comparable to the PDPA, as the PDPA requires.

Copies of your documents and the personal data in them are kept for 3 days after we deliver your service, then deleted. This covers document scans and photos, identity details and the content of job messages.

Invoices, receipts and the minimum job records needed for accounting and tax purposes (your name, contact details, the service and the amounts paid) are kept for five years, as Singapore law requires businesses to keep such records, and then securely deleted.

Our website uses Google Analytics and, when we run advertising, Google Ads conversion tracking. These use cookies to tell us, in aggregate, which pages are visited and which pages lead to an enquiry; they do not tell us who you are. You can block or delete cookies in your browser settings, or use Google’s opt-out browser add-on, and the site will still work. Our quote forms send your answers only to us, or to WhatsApp if you choose that option.

Documents are handled under our chain-of-custody process. Electronic data is held on access-controlled, password-protected accounts with two-factor authentication where available, and only team members working on your job can see it. Every team member is bound by a confidentiality agreement. If a data breach occurs that is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires.

You can ask to access or correct your personal data, ask how it has been used or disclosed in the past year, or withdraw consent, by emailing info@attestationrunner.sg with “Personal data request” in the subject line, or by writing to us at our office address. We may need to verify your identity first. We will respond within 30 days; if we need longer, we will tell you when to expect a reply. A reasonable fee may apply to access requests, and we will tell you the amount before proceeding.

If you are not satisfied with our response, you may contact the Personal Data Protection Commission.

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.