Privacy Policy

Last Updated: February 20, 2026

Welcome to SG Business Mart (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring your personal information is handled in a safe and responsible manner. This Privacy Policy explains what data we collect, how we use it, how we store and protect it, whether we share it, and how long we retain it when you use our platform to buy or sell businesses.

1. Information We Collect

We collect information you provide directly to us, information generated when you use the platform, and limited information from third parties if you choose to use them.

A) Account Information

When you create an account or update your profile, we may collect:

  • Name

  • Email address

  • Phone number (if provided)

  • Password (if you sign up using email/password)

B) Google OAuth / Google Sign-In Data (Data Accessed)

If you choose to sign in with Google, we access only the data you authorize via the Google consent screen. This may include:

  • Your Google account email address

  • Your name (display name)

  • Your profile photo (if available)

  • A Google user identifier (to link your Google account to your SG Business Mart account)

We do not request access to other Google services (such as Gmail content, Google Drive files, Google Contacts, or Google Calendar) unless explicitly stated in the consent screen and required for a specific feature.

C) Listing Information

If you create a listing (seller), we may collect:

  • Business details (e.g., industry, location, description)

  • Financial information and supporting documents (if provided)

  • Internal listing metadata and operational information
    Public listings may appear anonymous, but we store the underlying seller and listing data securely for platform operations.

D) Communication / Enquiry Data

When buyers submit enquiries or users communicate through our platform, we may collect:

  • Enquiry content and messages

  • Sender/recipient references

  • Timestamps and enquiry status history

E) Payment Information

If you purchase a listing plan or paid feature (where applicable), we collect:

  • Payment status and transaction history
    We do not store full credit card numbers. Payments are processed by our third-party payment provider (HitPay) and are subject to their security standards and policies.

F) Analytics Data

We use Google Analytics to understand usage and improve the platform. This may collect:

  • Basic usage data (e.g., pages visited, session duration, device/browser info)

  • Approximate location (city-level) depending on your device settings
    This data is typically collected via cookies or similar technologies.

2. How We Use Your Information (Data Usage)

We use the information we collect to:

  • Create and manage user accounts and provide login functionality (including Google Sign-In)

  • Provide marketplace features (listing management, browsing, enquiries)

  • Facilitate connections between buyers and sellers while maintaining initial anonymity on public listings

  • Process payments and manage purchases (via HitPay)

  • Send service-related communications (account notices, enquiries, security alerts, support messages)

  • Detect and prevent fraud, spam, abuse, and security incidents

  • Monitor, analyze, and improve platform performance and user experience (including via Google Analytics)

Google User Data (Specific Use)

Any Google user data obtained via Google OAuth is used only to:

  • Authenticate you and link your Google account to your SG Business Mart account

  • Populate basic profile information (e.g., name, email, profile photo if provided)

We do not use Google OAuth data for advertising targeting, selling data, or unrelated purposes.

3. Sharing of Information (Data Sharing)

We do not sell your personal data. We may share your information only in the following circumstances:

A) With Counterparties (Buyer/Seller)

When you submit an enquiry, your contact details and enquiry content may be shared with the relevant seller (or their authorized representative) so they can respond and proceed with discussions.

B) With Service Providers (Processors)

We may share limited information with service providers that help us operate the platform, for example:

  • DigitalOcean (hosting and infrastructure)

  • Brevo (email delivery and notifications)

  • HitPay (payment processing)

  • Google Analytics (usage analytics)

These providers process data only to perform services on our behalf and under appropriate safeguards.

C) Legal Requirements

We may disclose information if required by law, regulation, legal process, or valid governmental requests.

Google User Data Sharing (Specific)

Google OAuth data is shared only:

  • With our infrastructure and service providers as needed to operate the authentication/account feature

  • If legally required
    We do not share Google OAuth data with third parties for independent marketing purposes.

4. Data Storage & Protection

We use appropriate technical and organizational measures to protect personal data, including:

  • Encryption in transit (HTTPS/TLS)

  • Access controls and limited internal access (least privilege)

  • Secure hosting infrastructure (DigitalOcean)

  • Monitoring and logging for security and reliability

No method of transmission or storage is 100% secure, but we work to maintain reasonable and industry-standard safeguards.

5. Data Retention & Deletion (Data Retention & Deletion)

We retain personal data only as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.

Typical Retention

  • Account data: retained while your account is active

  • Listings and enquiries: retained as needed for platform operations and legitimate business purposes

  • Payment/transaction records: retained as required for accounting, compliance, and fraud prevention

  • Security logs: retained for a limited period to protect the platform and investigate abuse

Deletion Requests

You may request deletion of your account and associated personal data by contacting [email protected].
After verifying your request, we will delete or anonymize your personal data within a reasonable timeframe (typically within 30 days), unless we must retain certain records for legal, compliance, fraud prevention, or other legitimate business purposes.

Google OAuth Data Deletion

If you signed in with Google, deleting your SG Business Mart account will remove the stored Google OAuth identifiers and associated profile data from our systems (subject to retention exceptions above).

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request deletion of your account and personal data

  • Opt-out of marketing communications (if applicable)

To exercise these rights, contact us at [email protected].

7. Cookies and Analytics

We may use cookies or similar technologies to support essential site functionality and analytics (including Google Analytics). You may be able to control cookies through your browser settings. Disabling cookies may affect certain features of the platform.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date and may provide additional notice where required.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact:

SG Business Mart Support
Email: [email protected]
Address:
22 Sin Ming Ln,
Midview City, #06-76
Singapore 573969