PDPA Notice
Effective date: 17 May 2026 Last updated: 17 May 2026
This is the Personal Data Protection Notice issued by Synergy Accounting Pte Ltd (UEN: 201321913D), trading as Calcudesk ("we", "us"), under the Singapore Personal Data Protection Act 2012 ("PDPA"). It tells you what personal data we collect about you, what we do with it, and how to exercise the rights the PDPA gives you.
For a fuller description of our practices, also see our Privacy Policy.
1. Who we are
Organisation: Synergy Accounting Pte Ltd, UEN 201321913D Operating name: Calcudesk Registered address: 9 Canberra Drive, Singapore 768070 General contact: admin@calcudesk.com
Data Protection Officer (DPO):
- Name: Jacqueline May
- Email: dpo@calcudesk.com
- Phone: +65 8988 1382 (WhatsApp)
The DPO is the point of contact for any question, request, or complaint relating to your personal data.
2. Personal data we collect, and why
We collect personal data in the following limited circumstances:
| When | What we collect | Why |
|---|---|---|
| You visit https://calcudesk.com | Server log data: IP address, browser user-agent, requested URL, timestamp (collected by our hosting provider) | To operate, secure, and debug the site |
| You accept the cookie consent banner | Visit-level analytics via Google Analytics 4 (anonymised IP, no PII), plus a calcudesk-consent value stored in your browser |
To understand which content is useful and improve the site |
| You book a discovery call | Your name, email, and anything else you enter on the Microsoft Bookings booking form | To schedule and prepare for the call |
| You email or WhatsApp us | The content of your message and your reply-to identifier | To respond to and follow up on your enquiry |
| You become a paying client | Whatever additional business information is necessary to deliver the engagement (this is covered by your engagement agreement) | To deliver the services you have engaged us for |
We do not collect personal data through forms, signups, comment systems, account logins, advertising trackers, or social media pixels on the site.
3. Purposes of collection, use, and disclosure
We collect, use, and (where necessary) disclose your personal data for the following purposes:
- Operating and improving the Site
- Responding to enquiries and managing pre-engagement conversations
- Scheduling and conducting discovery calls
- Delivering paid services under a signed engagement agreement
- Complying with legal, regulatory, and accounting obligations
- Protecting our rights, property, or safety (and yours)
We do not use your personal data for advertising, profiling for marketing, or any commercial purpose unrelated to the services you have engaged us for.
4. Consent
By using the Site and providing your personal data to us — for example, by booking a discovery call or sending us an email — you consent to our collection, use, and disclosure of that data for the purposes set out in Section 3.
Where we rely on deemed consent (PDPA Section 15) — for example, server logs that are unavoidable when you load any web page — we do so because the collection is reasonably necessary to provide you the service you have requested (the page itself).
For analytics, we rely on your express consent via the cookie banner. If you decline, we collect no analytics data from your visit.
5. Withdrawal of consent
You may withdraw your consent at any time for any purpose. To do so:
- For analytics: click "Cookie preferences" in the Site footer and choose "Decline", or clear your browser storage for this site.
- For follow-up communications: reply to any email from us with "Please stop contacting me", or message us on WhatsApp.
- For any other purpose: email dpo@calcudesk.com with the subject line "Withdrawal of consent".
We will process your withdrawal request within 30 days. Please note that withdrawing consent may prevent us from delivering services or responding to enquiries you have raised with us. We will tell you if that is the case, before acting on the withdrawal.
Withdrawal of consent does not affect collection, use, or disclosure of your data that took place before the withdrawal, and does not override legal obligations we may have to retain certain records.
6. Access and correction
Under PDPA Sections 21 and 22, you have the right to:
- Access the personal data we hold about you, and request information on how we have used or disclosed it in the past year.
- Correct any personal data that is inaccurate, incomplete, or out of date.
To make a request, email dpo@calcudesk.com with the subject line "PDPA access request" or "PDPA correction request" and enough detail to identify yourself and the data you are asking about. We will respond within 30 days. Where we cannot fulfil a request within that period, we will tell you when we expect to.
We may charge a reasonable fee for access requests where the work involved is substantial; we will tell you the fee and obtain your agreement before incurring it.
7. Accuracy
We rely on you to provide us with accurate personal data. Please tell us promptly if any data you have given us changes.
8. Protection of personal data
We take reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, or disposal of personal data:
- HTTPS across the Site
- Reputable service providers (Vercel for hosting, Microsoft 365 for email and calendar, Google Analytics for opt-in analytics)
- Need-to-know access controls within our small team
- Retention only for as long as reasonably necessary
If we become aware of a data breach that is likely to result in significant harm to you, or that involves 500 or more affected individuals, we will notify the Personal Data Protection Commission and affected individuals as required under Part VIA of the PDPA.
9. Retention
We retain personal data only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, or as required by law. See our Privacy Policy for the specific retention periods we apply.
10. Transfer of personal data outside Singapore
Some of the services we use (Vercel, Google, Microsoft, Meta) process data outside Singapore — primarily in the United States and other regions where these providers operate. We have selected these providers because their published commitments and contractual protections provide a standard of protection comparable to that under the PDPA, satisfying our obligation under Section 26 (Transfer Limitation Obligation).
11. Do Not Call Registry
We do not conduct outbound telemarketing. If we ever do, we will check the Singapore DNC Registry under Part IX of the PDPA before any call, message, or fax to a Singapore telephone number.
12. Contact and complaints
If you have a question, concern, or complaint about how we handle your personal data:
- Contact our DPO first — Jacqueline May at dpo@calcudesk.com. We will acknowledge your concern within 7 working days and aim to resolve it within 30 days.
- If you remain dissatisfied, you may lodge a complaint with the Personal Data Protection Commission of Singapore: https://www.pdpc.gov.sg
13. Updates to this notice
We may update this PDPA Notice from time to time. The current version will always be at this URL, with the "Last updated" date revised. Material changes will be highlighted on the Site for at least 30 days.