1. Who we are
This privacy policy applies to Six Pack Wallet ("we", "us", "our"), a financial planning website based in Singapore. It governs personal data submitted via our website at sixpackwallet.com, our Meta (Facebook and Instagram) lead forms, and any related contact channels we operate.
We are committed to handling your personal data responsibly and in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.
2. What personal data we collect
When you submit a Meta lead form, contact form, or otherwise enquire with us, we typically collect:
| Data | Purpose |
|---|---|
| Full name | To address you correctly when we follow up. |
| Mobile number | To call or message you back about your enquiry. |
| Email address | To send you the materials you requested and to follow up. |
| Age band | To tailor retirement-planning information and examples to your life stage. |
If you later choose to engage us for a financial planning session, additional financial information will be collected separately under a fact-find document subject to its own consent terms. That additional data is not covered by this lead-form policy.
3. Why we collect it
We collect and use your personal data for the following purposes only:
- To contact you back by phone, SMS, WhatsApp, or email regarding the enquiry you submitted.
- To send you retirement-planning material, financial guides, scheduling links, and related educational content you have indicated interest in.
- To arrange a complimentary financial planning consultation, if you request one.
- To respond to your questions about the tools and services described on our website.
- To maintain records of your consent and our communications, as required for compliance.
We will not use your data for any other purpose without first seeking your consent.
4. Consent
By submitting a Meta lead form or contact form, you consent to Six Pack Wallet collecting, using, and storing your personal data for the purposes described above. Where Meta (Facebook/Instagram) is the source of your submission, your data is shared with us by Meta in accordance with their own platform terms and your in-form consent.
You may withdraw your consent at any time — see Section 8 below.
5. Who we share your data with
We do not sell your personal data. We share it only with the following parties, and only to the extent necessary:
- Our internal team, including any administrative assistant who helps schedule appointments or send follow-up materials on our behalf.
- Service providers we use to operate the business — for example, email providers, calendar tools, WhatsApp Business, and CRM tools — all of whom are contractually required to protect your data.
- Regulatory or law enforcement authorities, where we are legally required to disclose information.
We do not transfer your data outside Singapore except where our service providers operate on overseas servers (e.g. Google, Meta, WhatsApp). In those cases, we take reasonable steps to ensure a comparable standard of protection as required under the PDPA.
6. How long we keep it
We keep your contact details for as long as necessary to fulfil the purpose for which they were collected, and as required for our legitimate business and compliance needs:
- If you do not become a client: we retain your data for up to 24 months from the date of last contact, after which it is deleted or anonymised.
- If you become a client: retention is governed by separate engagement terms and applicable financial-services regulations (typically up to 7 years after the end of the relationship).
- If you opt out earlier: we will stop using your data for marketing purposes promptly and will delete contact records within a reasonable timeframe, except where retention is legally required.
7. How we protect your data
We use reasonable security arrangements to protect your personal data against unauthorised access, modification, disclosure, or loss. These include access controls on the devices and accounts used to receive your enquiries, encrypted transport for emails and messages where supported, and a need-to-know basis for any internal sharing.
No method of internet transmission or electronic storage is 100% secure, however, and we cannot guarantee absolute security.
8. Your rights — opt-out, access, and correction
Under the PDPA, you have the right to:
- Withdraw consent / opt out of further marketing or contact at any time.
- Request access to the personal data we hold about you.
- Request correction of any data that is inaccurate or incomplete.
To exercise any of these rights, simply email us (see Section 10). We will action opt-out requests promptly and respond to access or correction requests within 30 days in line with PDPA requirements. A reasonable fee may apply to access requests, and we will tell you in advance if so.
You can also reply "STOP" or "UNSUBSCRIBE" to any marketing SMS, WhatsApp, or email we send, and we will remove you from that channel.
9. Cookies and website analytics
Our website uses minimal cookies — primarily for basic site functionality and, where applicable, analytics to understand how visitors use our pages. We do not use cookies to build advertising profiles. If we run Meta retargeting campaigns, the relevant pixel collects only the limited data described in Meta's own privacy policy. You can disable cookies in your browser settings.
10. Contact us / Data Protection Officer
PDPA contact
For any privacy-related questions, opt-out requests, or to exercise your access and correction rights, please contact:
Six Pack Wallet — Data Protection Contact
Email: admin@sixpackwallet.com
Subject line: "PDPA Request — [your name]"
We aim to acknowledge your message within 3 business days and substantively respond within 30 days.
11. Changes to this policy
We may update this privacy policy from time to time. The effective date at the top of this page reflects the latest version. Material changes will be communicated via our website. Your continued use of our services after an update constitutes acceptance of the revised policy.
12. Governing law
This privacy policy is governed by the laws of the Republic of Singapore, including the Personal Data Protection Act 2012 and any subsidiary regulations or advisory guidelines issued by the Personal Data Protection Commission (PDPC).