Plain English, because you should be able to read it. What we collect, why, who touches it, how long we keep it, and how to make us correct or delete it.
Registered entity: Maxifi Digital · Business registration (UEN): 53497245D
Address: 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051
Data Protection Officer: Lim Le-Anne — dpo@thefindablecandidate.com. She is the individual designated under section 11(3) of the Personal Data Protection Act, and she is the person who answers. One person runs this product; the person replying to you is the person who holds your data.
We use what you give us to score your checklist, run the search you paid for, write your report, and email you the things you signed up for. Lawful basis, in the legal terms: your consent (checklist and emails) and performance of a contract (the Check you bought).
We will never sell, rent or share your data with anyone for their own purposes. Searches are run manually in a paid LinkedIn Recruiter seat, at your request, with your consent — no scraping, no bots, no extraction tools. Published analyses are anonymised to patterns only: no names, no screenshots of your profile, nothing identifying, unless you've given prior written permission.
| Processor | Job | Where data is stored |
|---|---|---|
| beehiiv | Email list and sends | United States |
| Stripe | Payments | United States and global infrastructure; card data stays inside Stripe |
| Order and lead records (Sheets), evidence archive (Drive) | Global (primarily United States) | |
| n8n Cloud | Form-to-record automation | Germany (EU) — n8n GmbH |
| Netlify | Website hosting | United States / global CDN |
Some of these store data outside Singapore. Under the PDPA's transfer rules, each is bound by its contractual terms and privacy policy to protect your data to a standard comparable to Singapore's — the links above are the exact terms each works under.
Write to the Data Protection Officer at dpo@thefindablecandidate.com to see what we hold on you, correct it, or have it deleted. You'll get a substantive reply within 10 business days. Deletion removes you from the email list, the records sheets, and the evidence archive; the only thing retained is what Singapore law requires us to keep (payment records, for the accounting period). If you are not satisfied with how we handle it, you may complain to the Personal Data Protection Commission at pdpc.gov.sg.
If you're writing from the EU, UK or California: the same rights apply to you — access, correction, deletion, portability, and objection — through the same email, on the same timeline. This notice is written to PDPA (Singapore), and honours GDPR and CCPA requests equivalently.
If this notice changes materially, everyone on the list gets an email saying what changed — no silent edits. Prior versions are archived and available on request from the same address.