​

Founderbook ("we", "us", "our") provides consultancy, fractional CFO, and accounting/finance advisory services.

This Privacy Policy explains how we collect, use, disclose, and protect personal data, in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

By engaging our services or using our website, you consent to the collection, use, and disclosure of your personal data as described in this Policy, unless prohibited by applicable law.
 

1. Personal Data We Collect
 

Depending on the nature of our engagement, we may collect:

From clients and prospective clients

• Contact details (name, email, phone number, company, designation)

• Business and financial information necessary to provide advisory, CFO, or accounting services (e.g. financial statements, transaction records, payroll data, tax information)

• Identification details required for client due diligence (e.g. NRIC/passport, UEN, corporate registration documents), where required for compliance purposes

• Billing and payment information
   

From website visitors

• Contact form submissions

• Technical data (IP address, browser type, pages visited) via cookies or analytics tools, where applicable
   

From referral partners

• Contact and business details necessary to administer referral arrangements
   

We do not knowingly collect personal data from minors. Our services are directed at businesses and professionals.
 

2. Purposes of Collection and Use
 

We collect, use, and disclose personal data for purposes including:

• Providing consultancy, fractional CFO, and accounting advisory services

• Preparing financial statements, reports, board papers, and related deliverables

• Client onboarding and due diligence, including verifying identity where required under anti-money laundering or professional obligations

• Invoicing, billing, and payment processing

• Communicating with clients, prospective clients, and referral partners regarding our services

• Complying with legal, regulatory, or professional obligations (e.g. tax authorities, ACRA, professional accounting bodies)

• Improving our services and website

• Marketing our services, where consent has been given (you may withdraw this consent at any time)
   

We will seek your consent before using personal data for any purpose not identified above, unless permitted or required by law.
 

3. Legal Basis for Processing
 

We rely on one or more of the following bases under the PDPA:

• Consent — where you have given consent for a specific purpose

• Contractual necessity — where processing is necessary to perform our engagement with you

• Legal or regulatory obligation — including obligations under the Accountants Act, Income Tax Act, Companies Act, and requirements of professional bodies such as ISCA, CPA Australia, or ACRA

• Legitimate interests — where processing is reasonably necessary for our business operations and does not override your interests (e.g. fraud prevention, business administration)
   

4. Disclosure of Personal Data
 

We do not sell personal data. We may disclose personal data to:

• Regulatory authorities and professional bodies, where legally required (e.g. IRAS, ACRA, MAS, professional accounting bodies)

• Third-party service providers who support our operations (e.g. cloud accounting software, IT support, payment processors), under confidentiality obligations

• Auditors, legal advisors, or successors in the event of a business transaction (e.g. merger or acquisition), subject to confidentiality

• Referral partners, only to the extent necessary to administer a referral, and only with your consent

All third parties handling personal data on our behalf are contractually bound to protect it to a standard consistent with the PDPA.
 

5. Confidentiality of Client Financial Information
 

As an accounting and advisory firm, we are bound by professional confidentiality obligations under the codes of conduct of relevant professional bodies (e.g. ISCA, CPA Australia). Client financial and business information is treated as confidential and is not disclosed beyond what is necessary to deliver services or comply with law, without client consent.
 

6. Data Protection and Security
 

We implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, or disposal, including:

• Access controls limiting data access to authorised personnel

• Secure storage of financial and client records (physical and cloud-based)

• Confidentiality undertakings by staff and contractors

• Secure disposal of data no longer required
   

7. Data Retention
 

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law or professional standards (for example, accounting records are generally retained for a minimum period as required under the Income Tax Act and Companies Act). Data no longer required is securely destroyed or anonymised.
 

8. Access and Correction
 

You may request:

• Access to the personal data we hold about you

• Correction of any inaccurate or incomplete personal data

Requests can be made by contacting our Data Protection Officer (details below). We may charge a reasonable fee for access requests as permitted under the PDPA, and may decline requests in circumstances permitted by law.
 

9. Withdrawal of Consent
 

You may withdraw consent for the collection, use, or disclosure of your personal data at any time by contacting us. Withdrawal of consent may affect our ability to continue providing services to you, and we will inform you of the likely consequences before processing your request.
 

10. Cookies and Website Analytics
 

Our website may use cookies or similar technologies to improve user experience and understand website usage. You may disable cookies through your browser settings; this may affect certain website functions.
 

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our website with a revised "Last updated" date.
 

12. Contact Us

For questions, requests, or complaints regarding this Privacy Policy or our handling of personal data, please contact:

Founderbook [Registered address] Email: [contact email] Phone: [contact number]

​