Snail Guardian
Privacy policy

How we look after your personal data.

Effective date: 1 November 2026

This policy explains how Hailstorm Commerce Pte. Ltd. ("we", "us"), which runs the Snail Guardian brand, collects, uses and protects personal data through this website and when you contact us. We follow Singapore's Personal Data Protection Act 2012 (PDPA).

What this policy covers

This website and the enquiries you send us by email, through our contact form or on WhatsApp. App Builder and client projects have their own terms, which we share with you before you use them.

What we collect

  • What you send us: your name, company, email address, team size, and anything you write in your message or email.
  • Basic technical data: when you visit, our web server records your IP address, browser type, the pages you open and the time, as part of normal server logs.

Enquiries from the contact form are emailed to us. The website does not keep a copy.

If you contact us on WhatsApp, we see your phone number and what you send. Your messages are handled by WhatsApp (Meta) under its own terms and privacy policy.

This website does not use advertising or tracking cookies.

This website runs on a virtual server in Singapore, provided by ReadyServer.

Why we use it

  • To reply to your enquiry and discuss how we could help.
  • To provide services you ask for, under a separate agreement.
  • To keep a record of our correspondence.
  • To meet our legal obligations.

We do not sell your personal data, and we do not send you marketing unless you have agreed to it.

Your consent

By sending us an enquiry, you agree that we may use your details to reply to it. You can withdraw your consent at any time by emailing us. We will then stop using your data, except where the law requires us to keep it, and tell you what withdrawing means for any work in progress.

Who we share it with

  • Our team in Singapore and in Dongguan, China, only the people who need it to answer you or work with you.
  • Service providers that provide the server this website runs on and our email, who process data only on our instructions.
  • Authorities, when the law requires it.

Because part of our team is in China and our service providers may store data in other countries, your data may be transferred outside Singapore. When it is, we take steps to make sure it is protected to a standard comparable to the PDPA.

How long we keep it

We keep your data only as long as we need it for the purposes above, or as the law requires. Enquiries that don't lead to work together are deleted after 12 months. Server logs are deleted after 30 days.

How we protect it

We make reasonable security arrangements to protect your data from unauthorised access, use, change or loss, and limit access to the people who need it.

Seeing and correcting your data

You may ask what personal data we hold about you, how it has been used in the past year, and ask us to correct it. Email us with your request. We will reply as soon as we reasonably can, usually within 30 days, and tell you first if a fee applies to an access request.

Contact us

Questions or requests about your personal data go to our Data Protection Officer, Choy Man Yu:

Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it last changed.