Fundwise Privacy Notice

This notice explains how personal data submitted through the Fundwise website (www.fundwise.sg) is collected, used, disclosed and protected, and how you can exercise your data-protection rights under Singapore's Personal Data Protection Act (PDPA). This notice is a working draft pending confirmation of the organisational details marked below and must not be published to the production domain until every flagged item is resolved.

Version 1.0 · Effective 18 July 2026.

1. Who We Are and How to Contact Our Data Protection Officer

Fundwise (www.fundwise.sg) is operated by Fundwise Pte Ltd (UEN 202228841C), registered at 3015A Ubi Road 1, #06-07, Singapore 408705.

You may contact our Data Protection Officer at hello@fundwise.sg.

Our Data Protection Officer's postal address is the same as our registered business address above.

2. Categories of Personal Data We Collect

Depending on how you interact with our website, we may collect: your name; contact details (email address and telephone number); the content of any enquiry or message you send us; the type of financing you are interested in; if you apply as a partner, your business name and professional background; and limited technical information collected through cookies and similar technologies (see Section 14).

Where you apply for financing through us, a director and/or guarantor of the client may also provide us with identity verification documents (a copy of their NRIC, front and back), personal income tax information (their Notice of Assessment for the past two years), and personal credit information (their latest credit bureau report), for the purpose of verifying their identity and assessing creditworthiness as required by the relevant bank or financing provider.

3. Sources of Personal Data

We collect personal data directly from you when you complete a form on our website. We may also receive your personal data from a partner or introducer who refers you to us; in that case, the referring partner is required to confirm they were authorised to share your information and that you were informed Fundwise would contact you and process your information in accordance with this notice. We also collect limited technical data automatically through cookies and analytics tools when you browse our website.

Where your application involves a director or guarantor, these identity, income and credit documents are provided to us directly by the client, including the relevant director or guarantor, as part of the financing application process.

4. Purposes of Collection, Use and Disclosure

We collect, use and disclose personal data to: respond to your enquiry; understand your financing requirements; assess and arrange the financing services you request; manage our relationships with referral partners; where you have given consent, send you marketing communications; operate, secure and improve our website; and comply with our legal and regulatory obligations.

5. Banks, Financing Providers and Other Recipient Categories

Where your enquiry relates to financing, we may disclose relevant details of your enquiry to banks, licensed moneylenders and other financing providers so that they can assess whether they are able to offer you a suitable product. We do not treat the general website enquiry acknowledgement as permission to distribute your information to an unrestricted number of providers, and we do not share your information with any lender or begin work on your application until you have signed a service agreement with us. That service agreement sets out the terms of our engagement and confirms your permission for us to share your information with the relevant lender(s) for the purpose of arranging your financing.

We work with banks, licensed moneylenders, and other financing providers that are licensed or regulated by the Monetary Authority of Singapore (MAS). We do not maintain an exhaustive public list of every provider, since our network changes over time; the categories above describe the types of recipients your information may be disclosed to.

6. Service Providers and Processors

We use the following categories of service providers to operate our website and business: website hosting and form-submission storage (Webflow, Inc.); office productivity and email (Google Workspace); internal messaging and notifications (Telegram); and domain registration (Namecheap). Heap Analytics and Google Tag Manager are also present in the site's code, gated behind your Cookie Preferences choice — see below. These providers process personal data on our behalf and are not authorised to use it for their own independent purposes.

Heap Analytics and Google Tag Manager are retained. Both are inactive by default and only load if you accept the Analytics category in Cookie Preferences (see Section 14).

7. Overseas Transfers

Some of our service providers — including Webflow (website hosting), Google Workspace (email and productivity tools), and Telegram (messaging) — are global platforms whose infrastructure may store or process personal data outside Singapore. Webflow and Google each publish a Data Processing Addendum and a subprocessor list, and represent that appropriate transfer safeguards (such as Standard Contractual Clauses) are in place for personal data transferred internationally. Telegram's public privacy policy does not offer an equivalent business-facing data processing agreement or subprocessor list. Where personal data is transferred overseas, we take steps required under the PDPA's Transfer Limitation Obligation to ensure the data receives a standard of protection comparable to the PDPA.

Note: we avoid sending customer personal data through Telegram, given the absence of a formal business data processing agreement for that service.

8. Security

We use reasonable technical and organisational measures to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure or similar risks. No method of transmission or storage is completely secure. Please do not submit NRIC numbers, passwords, bank account credentials, bank statements, payslips or other identity or financial documents through our web forms.

9. Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, or as required by law.

Specifically, we retain enquiry, partner and referral records for up to 7 years from the date of collection, unless a longer period is required by law.

10. Access and Correction

You may request access to, or correction of, personal data we hold about you by contacting our Data Protection Officer using the details in Section 1. We will respond within the time required by the PDPA. We may need to verify your identity before actioning a request, and certain requests may be subject to exceptions permitted under the PDPA.

11. Withdrawal of Consent

Where our processing of your personal data is based on your consent — for example, marketing communications — you may withdraw that consent at any time by contacting our Data Protection Officer or using the unsubscribe option in our communications. Withdrawing consent does not affect processing that has already taken place, or processing we are permitted or required to carry out without consent, such as responding to an enquiry you have already made or complying with a legal obligation. Not all of our processing relies on consent as its legal basis; where a different basis applies, this notice explains what that basis is.

12. Marketing Preferences

We will only send you marketing emails, calls, SMS or WhatsApp messages if you have separately opted in to that channel using the marketing choices on our forms. You may withdraw your marketing consent for any channel at any time; see Section 11.

13. Complaints

If you have a concern about how we handle your personal data, please contact our Data Protection Officer first using the details in Section 1. If you remain dissatisfied, you may lodge a complaint with Singapore's Personal Data Protection Commission (PDPC).

14. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Essential technologies are required for the site to function and remain active at all times. Optional technologies, including analytics tools, are only active if you accept them through our Cookie Preferences control, available at any time from the footer of every page.

Essential: required for the website to operate; always active and cannot be switched off. Analytics: Heap Analytics and analytics tags loaded via Google Tag Manager; active only after you accept the Analytics category in Cookie Preferences. We do not currently use advertising, affiliate/attribution or session-replay cookies. Any new script added to the website in future will be classified and added to this notice before it is activated.

15. Changes to This Notice

We may update this notice from time to time. The version number and effective date at the top of this notice indicate when it was last revised. Material changes will be reflected in an updated version number.