Privacy Notice

Effective 16 August 2026

Marlo collects personal data when you apply for the founding cohort or contact us. This notice explains what we collect and how we handle it.

Information we collect

The application form asks for your name, email address or WhatsApp number, household type, residency category, pricing response, and any note you choose to add. We also record the page and campaign information that brought you to the form, the submission time, and the result of the website security check.

Our website and security providers may receive technical information such as your IP address, browser type, and device data when they deliver the site or check for automated submissions.

How we use it

We use your information to assess your application, reply to you, arrange follow-up, and understand which Marlo messages bring suitable applicants to the service. We may also use it to protect the form and investigate misuse.

Submitting an application does not add you to a newsletter or promotional messaging list. If we introduce recurring marketing, we will ask for separate consent for each contact channel.

Who handles your data

Marlo staff and contractors who need the information for application follow-up may access it. We use Cloudflare Pages to host the website and form endpoint, Airtable to store and manage applications, and Cloudflare Turnstile to prevent automated form submissions.

These providers may process data outside Singapore. Before applications open, Marlo will confirm that relevant transfers use contractual or other safeguards that provide protection comparable to Singapore's Personal Data Protection Act. We may disclose information when the law requires us to do so.

How long we keep it

We delete test submissions within 30 days. We delete or anonymise applications marked “Not a fit” and applications that receive no response within six months of the last contact, unless a legal or business reason requires a longer period.

We keep active or qualified applications while follow-up continues and review them every six months. If you become a customer, the records needed to deliver the service move to our customer-record process and we remove duplicate lead data.

Your choices and requests

You may withdraw consent with reasonable notice. You may also ask to access your personal data, learn how we used or disclosed it during the previous year, or correct an error or omission. Legal exceptions may apply.

If you withdraw consent needed for an active application, we will explain the effect and close or delete the application as appropriate.

Protection and changes

We limit access to people who need the data and use service-provider controls to protect it. We reduce security risks but cannot remove them.

We may update this notice when our form, providers, or use of personal data changes. The effective date at the top shows the current version.

Contact