QIRO Business Model Review
Data Protection Notice
1. Who we are
The QIRO Business Model Review is operated by Qiro Digital Group Pte. Ltd. ("QIRO Digital", "we"), a company registered in Singapore. This notice explains how we handle personal data collected through this service, in line with the Personal Data Protection Act 2012 of Singapore (PDPA).
2. What we collect
Your name, work email, company name, role and, if you choose to give it, your company website. We also collect the answers you give about your business, product, customers and commercial model, and a record of your payment: the amount, currency, status, date and a payment reference. We do not receive or store your card number or other payment credentials. We do not ask for phone numbers or identity numbers, and we do not record your IP address with your submission. Please do not include personal data about other people in your answers.
3. Why we collect it
We use this information to take payment for and provide the Business Model Review: to generate your Business Model Canvas and related report, to show it to you on screen, to email you a summary with a private link back to it, and to keep a record of your purchase and submission so we can respond if you contact us. QIRO Digital reviews submissions internally to understand where we may be able to help.
Your answers are saved when you continue to payment, before payment is made, so that they are not lost if payment is interrupted. If you do not complete payment, we delete your contact details and answers after 7 days.
We also keep simple counts of how the service is used, for example how many people reach each step. These are recorded on our own server against a random reference, without cookies, IP addresses or third-party analytics.
4. Marketing
We will only send you business insights, tools and information about QIRO Digital services if you tick the separate, optional box. It is not required, and buying a report does not sign you up. You can opt out at any time by emailing us.
5. Who we share it with
We do not sell your data. Your submission is stored and emailed using our hosting and email provider, Hostinger, acting on our instructions.
Payment is handled by Stripe. Our Stripe account is with Stripe Payments Singapore Pte. Ltd. When you continue to payment we send Stripe your email address, the product name and price, and an order reference. We do not send Stripe your questionnaire answers, name, company or role. You enter your card and billing details directly on a page hosted by Stripe. Stripe processes the payment on our behalf and also uses payment data for its own purposes, such as fraud prevention and meeting its legal obligations, as described in the Stripe Privacy Policy.
Your answers are not sent to any artificial intelligence provider. If any of this changes, this notice will be updated and its version number will change.
6. Where it is stored
Our service providers may store or process data on servers outside Singapore. Stripe is a global group and processes payment data in other countries, including the United States. Where data is transferred outside Singapore we take reasonable steps to ensure it receives a standard of protection comparable to the PDPA.
7. How long we keep it
If you do not complete payment, your details and answers are deleted after 7 days. If you buy a report, your private report link works for 90 days and we keep your submission for up to 12 months, after which contact details are deleted and the remaining record is anonymised, unless you have become a client or we are required to keep it for longer. We keep the payment record for as long as accounting and tax rules require, and a minimal record of the consent you gave for up to five years as evidence of it.
8. How we protect it
Submissions are sent over encrypted connections. Report pages can only be opened with a long random link, are not indexed by search engines and are not listed anywhere public.
9. Your rights
You may ask us for access to the personal data we hold about you, ask us to correct it, or withdraw your consent, by emailing our Data Protection Officer at mo@qirodigital.com from the address you used. We will respond within 30 days. If you withdraw consent we will delete your contact details and stop using your submission. Stripe keeps its own record of your payment; you can contact Stripe about that record directly.
10. Refunds
If a payment is refunded, the online report linked to it is no longer available.
11. Changes
We may update this notice. The version shown at the top of this page is the one that applies to submissions made while it is displayed.