Privacy Policy

1. Who we are

businessloans.sg is an independent Singapore business-loan comparator operated by Mamba Ventures. We compare SME lending products across major banks (DBS, OCBC, UOB, Maybank, CIMB, Standard Chartered, RHB, HLF) and alternative lenders (Bizcap, Funding Societies, Aspire, Validus, Lendingpot, GXS, Aspial Financial). We do not extend credit; we are not a financial adviser; we are not a moneylender.

2. Personal data we collect

When you submit an enquiry through one of our forms (/apply, /quote, /eligibility, /contact, /business-loan-quote), we collect:

• Contact data: name, business name, email address, phone number.
• Business data: business structure (sole prop / Pte Ltd / partnership / LLP), industry, years trading, annual revenue band.
• Financing data: indicative loan amount, purpose, desired tenor.
• Device + usage data: IP address, browser type, referrer, pages visited (collected automatically via web analytics for site improvement).

NRIC handling: we do not collect NRIC numbers or NRIC images on any form. Where a lender's downstream process requires NRIC for credit assessment, that collection is performed by the lender directly under their own PDPA-compliant flow Source: PDPC — NRIC Advisory Guidelines ↗ PDPC — NRIC Advisory Guidelines Verified 5 Jun 2026 Opens in a new tab .

3. Purposes of collection

We collect personal data for these specific purposes:

• Match your enquiry to the most likely qualifying lender(s) in our comparison set.
• Route the enquiry to those lenders so they can contact you with an indicative offer.
• Respond to questions about our comparator content.
• Improve our site, content and matching logic.
• Comply with applicable Singapore law (PDPA, CPFTA, Moneylenders Act 2010 to the extent relevant to a comparator, MAS guidelines where applicable).

Consent. Submitting an enquiry through a businessloans.sg form constitutes consent under the PDPA Consent Obligation for the purposes above. You may withdraw consent at any time via the contact details below; withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Disclosure to third parties

We disclose personal data only to:

• The lenders you ask to be matched to. We route enquiries to up to three matched lenders in our comparison set. Lenders we may route to include DBS, OCBC, UOB, Maybank, CIMB, Standard Chartered, RHB, HLF, GXS, Bizcap, Funding Societies, Aspire, Validus, Lendingpot, Aspial Financial.
• Service providers for hosting, analytics, email delivery and lead-form processing (Netlify, Google Analytics, transactional-email provider).
• Government authorities where required by law (e.g. PDPC, MAS, IRAS, IRAS, ACRA on lawful written request).
• Successors in a business transfer (acquisition / merger), subject to PDPA Transfer Obligation safeguards.

We do NOT sell personal data. We do NOT share personal data with marketing-list brokers.

5. Overseas transfers

Some of our service providers process data outside Singapore (United States and EU primarily, for hosting and analytics). Where we transfer personal data overseas, we ensure protection at a standard comparable to the PDPA via contractual safeguards with the receiving party — this is the PDPA Transfer Limitation Obligation Source: PDPC — Transfer Limitation ↗ PDPC — Transfer Limitation Verified 5 Jun 2026 Opens in a new tab .

6. Your PDPA rights

Under the PDPA 2012, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Withdrawal of consent — withdraw the consent you gave when submitting an enquiry; we will stop routing to lenders going forward.
• Complaint — escalate concerns to the PDPC directly.

The PDPA does not include a general "right to be forgotten" / GDPR-style erasure right; however, where personal data is no longer required for the purposes for which it was collected, we cease retention in line with the PDPA Retention Limitation Obligation.

7. Do Not Call (DNC) Registry

You can register your Singapore mobile number with the Do Not Call Registry administered by the PDPC Source: PDPC — DNC Registry ↗ PDPC — DNC Registry Verified 5 Jun 2026 Opens in a new tab to opt out of telemarketing calls + SMS. By submitting your phone number through our enquiry form, you specifically consent to lender follow-up on that number for the matched-enquiry purpose; this consent overrides DNC for that specific routing only. You can withdraw this consent at any time.

8. Cookies + tracking

We use first-party essential cookies for site function and analytics cookies (Google Analytics) for traffic measurement. You can disable cookies in your browser settings; some site features (lead-form persistence, calculators) may not work fully without them.

9. Retention

Enquiry-form data is retained for 24 months from submission for matching, follow-up, and dispute-resolution purposes. After 24 months, we delete or anonymise records unless retention is required by law or for an ongoing matter.

10. Security

We use industry-standard technical safeguards: HTTPS site-wide, encrypted form submission, access control on stored data, regular review. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security, but we apply reasonable measures consistent with the PDPA Protection Obligation.

11. Children

Our services are intended for business operators (directors, owners, sole proprietors). We do not knowingly collect personal data from individuals under 18.

12. Changes to this policy

We may update this policy when our practices change, when new SG law applies, or when our lender comparison set changes. Updated policies take effect when posted; the "Last updated" date at the top reflects the current revision.

13. Contact us / PDPA Data Protection Officer

For access requests, correction requests, consent-withdrawal, or other PDPA matters:

privacy@businessloans.sg

For complaints not resolved through the contact above, you may contact the PDPC directly at www.pdpc.gov.sg.