Privacy Policy

Last Updated: 29 Oct 2025

1. Information We Collect

We may collect and process the following categories of personal data from employees and authorised users:

  1. Full Name
  2. Email Address
  3. Phone Number
  4. NRIC or Government-Issued Identification
  5. Payment Information
  6. Documents uploaded by users

We may also collect technical data necessary for authentication (e.g., cookies for session management).

We do not collect social login information or behavioral analytics, and we do not use third-party advertising or marketing trackers.

2. How We Use Your Data

Your personal data is used strictly for the following purposes:

  1. Creating and managing user accounts
  2. Processing payroll or related HR functions
  3. Displaying, storing, and updating employee information as provided by users
  4. Communicating service-related updates or notifications
  5. Maintaining platform functionality and security

We do not use your data for marketing, advertising, personalization, or automated decision-making.

3. Legal Basis Under Singapore PDPA

We collect and process personal data with your consent and/or where required to fulfil the purpose of employment administration and HR operations.

4. Data Sharing & Third-Party Services

We may share your data only with essential service providers that support our platform. These providers may be located outside Singapore, meaning your data may be transferred internationally. In such cases, we ensure that appropriate safeguards are in place to protect your data. We may also disclose information if required by law or regulatory authorities.

We do not sell or rent personal data to any third parties.

5. Data Storage & Security

We implement security measures to protect your information, including:

  1. Encryption in transit
  2. Restricted access to personal data
  3. Secure infrastructure hosted by trusted service providers

Personal data is retained only as long as necessary for HR and operational purposes or as legally required. Some limited records may continue to be stored even after an account is disabled, to comply with business and regulatory requirements.

6. User Data Rights

Users may:

  1. Access and view their information through the platform
  2. Update and correct most of their personal details
  3. Delete only certain information (not all) — some records must be retained for legal/compliance purposes

Requests regarding data access, correction, or deletion can be made to: info@codegakko.com

We will respond within a reasonable timeframe in accordance with PDPA.

7. Cookies and Tracking

We use strictly necessary cookies for:

  1. Authentication
  2. Session management
  3. Protecting against unauthorized access

These cookies are essential for the platform to function and cannot be disabled.

8. Changes to This Policy

We may modify this Privacy Policy from time to time. Any updates will be posted with a revised “Last Updated” date. Continued use of the platform constitutes acceptance of the updated terms.

9. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us: info@codegakko.com