← MasterKey

Privacy policy

Last updated 10 October 2026

This policy explains how MasterKey (“we”) collects, uses and protects your personal data, in line with Singapore’s Personal Data Protection Act 2012 (PDPA).

What we collect

Why we use it

We do not sell your personal data, and we do not share it with other members or third parties without asking you first, except with the service providers below.

Service providers

We use trusted providers to run the site and our email: Cloudflare (hosting and email forwarding), FormSubmit (delivers sign-up forms to our inbox), Google (email) and payment providers such as PayPal. Some of them store data outside Singapore. Where that happens, we rely on them to protect it to a standard comparable to the PDPA.

Withdrawing consent

You can stop our emails or messages at any time by replying “unsubscribe” or emailing us. We will stop within 10 business days. If you withdraw consent, we may not be able to keep providing a program or membership that depends on it.

Access and correction

You can ask what personal data we hold about you, how we have used it in the past year, or ask us to correct it. Email us and we will reply within 30 days. We may charge a reasonable fee for access requests, and will tell you before we do.

How long we keep it

We keep your data only as long as we need it for the purposes above or as the law requires, then delete it. You can ask us to delete it sooner.

Security

We take reasonable steps to protect your data. If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires.

Changes

We may update this policy. The date at the top shows the latest version.

Contact

MasterKey, Singapore. Email admin@hotelmasterkey.org.