Privacy Notice

Effective 23 August 2026

Marlo collects personal data when you apply for the founding cohort or contact us. This notice explains what we collect and how we handle it.

Information we collect

The application form asks for your name, email address or WhatsApp number, household type, residency category, pricing response, and any note you choose to add. We also record the page and campaign information that brought you to the form, the submission time, and the result of the website security check.

Our website and security providers may receive technical information such as your IP address, browser type, and device data when they deliver the site or check for automated submissions.

We collect pseudonymous website analytics such as the page and campaign that brought you to Marlo, sections reached, button clicks, form progress, device type, approximate location, and visit timing. We do not send your name, contact details, application answers, notes, or security-check token to our analytics provider. Session recording is not enabled.

How we use it

We use your information to assess your application, reply to you, arrange follow-up, and understand which Marlo messages bring suitable applicants to the service. We may also use it to protect the form and investigate misuse.

Submitting an application does not add you to a newsletter or promotional messaging list. We ask for separate consent before sending recurring marketing through a contact channel.

Who handles your data

Marlo staff and contractors who need the information for application follow-up may access it. We use service providers to host and secure the website, manage applications, and provide pseudonymous website analytics. We configure our analytics service to discard raw client IP addresses from stored analytics events.

Some providers may process personal data outside Singapore. Marlo takes steps to ensure that transferred data receives protection comparable to Singapore's Personal Data Protection Act. We may disclose information when the law requires us to do so.

How long we keep it

We keep application information while we assess your application and follow up with you. We review application records every six months and delete or anonymise information we no longer need, unless a legal or business reason requires us to retain it. If you become a customer, we keep the information needed to provide the service and remove unnecessary duplicate application data.

Analytics events are retained for up to 12 months. Browser storage may hold a random visitor identifier and first-touch campaign information so we can understand repeat visits and attribution.

Your choices and requests

You may withdraw consent with reasonable notice. You may also ask to access your personal data, learn how we used or disclosed it during the previous year, or correct an error or omission. Legal exceptions may apply.

If you withdraw consent needed for an active application, we will explain the effect and close or delete the application as appropriate.

For privacy questions, consent withdrawal, access, or correction requests, contact us directly.

Protection and changes

We limit access to people who need the data and use service-provider controls to protect it. We reduce security risks but cannot remove them.

We update this notice when our form, providers, or use of personal data changes. The effective date at the top shows the current version.