Privacy Policy

This policy explains what information Uncle ESG collects when you apply for a report, what we use it for, and your rights under Singapore's Personal Data Protection Act 2012 (PDPA). We keep it short and plain on purpose.

What we collect

When you submit the application form, we collect:

• your company name and UEN;
• a contact name and email address;
• the reporting period, your vehicle count, the report tier and, for Multi-Site, the number of sites;
• the fuel and electricity bills you upload;
• whether you told us you have more files to send.

You pay through Stripe. Your card details go directly to Stripe and never reach us. We don't use customer accounts, and we don't use advertising or tracking cookies.

Why we use it

• to calculate and write your Scope 1 & 2 emissions report;
• to take your payment and confirm it;
• to email you about your order and your report.

We don't use your information for marketing, and we never sell or rent it to anyone.

Who handles it for us

We use a small number of service providers to run this website. They process data only to provide their service to us:

• Supabase: stores your application details and uploaded bills, in its Singapore data centre.
• Stripe: processes payments.
• Resend: sends our emails to you.
• Vercel: hosts this website.
• Cloudflare: manages our domain and forwards email sent to hello@uncleesg.com.

Some of these providers may process data outside Singapore. Where they do, we rely on them to protect it to a standard comparable to the PDPA.

How long we keep it

We keep your uploaded bills for 12 months after the report is delivered, so we can answer follow-up questions or reissue your report, and then delete them. We may keep basic order and payment records for longer where the law requires, for example for tax and accounting.

Your rights

You can ask us to:

• tell you what personal data we hold about you and how it has been used;
• correct data that is wrong;
• stop using your data. If you withdraw consent before your report is finished, we may not be able to complete it.

We'll reply as soon as we reasonably can, and within 30 days.

Security

Uploaded bills are stored privately and can only be opened through short-lived links available to us. The website itself cannot read back submitted data.

Contact

For any privacy question or request, contact our Data Protection Officer, Kael Ong, at hello@uncleesg.com.

Changes

If we change this policy, we'll update it on this page and change the date at the top.