Privacy Notice
Summary · Last updated 17 October 2026
1. Who we are
Simply Corporate Services Private Limited (UEN 202623560E) ("Simply", "we", "us") is a corporate service provider registered with the Accounting and Corporate Regulatory Authority (ACRA), with its registered office at 101 Upper Cross Street, #04-19A, People's Park Centre, Singapore 058357. This notice explains how we handle personal data about our clients and prospective clients, the individuals connected to them (such as directors, shareholders, beneficial owners, authorised representatives, nominee directors we arrange and their nominators), and anyone who contacts us or uses the forms on simplycorp.sg.
2. What we collect
- Identity: full name and aliases, NRIC/FIN or passport number, date of birth, nationality, and copies of identity documents.
- Contact: residential address and proof of address, telephone number and email address.
- Due diligence: roles, shareholdings and control in companies; occupation; source of funds and source of wealth; whether you are a politically exposed person; and the results of sanctions and adverse media screening.
- Identity verification: a screenshot from a live video call showing you with your identity document. We do not record the call.
- Service data: signatures and consents, payroll, CPF, tax and bank details, and accounting records, where you ask us for those services.
- Website: what you submit through our incorporation form and document upload page, and any enquiry you send us.
3. Why we use it
- To identify you and verify your identity, carry out customer due diligence, screening and ongoing monitoring, and keep records, as the Corporate Service Providers Act 2024, the Corporate Service Providers Regulations 2025 and other anti-money laundering and counter-terrorism financing laws require. We must do this before we can act for you.
- To provide the services you ask for, such as incorporation, company secretarial work, ACRA filings, accounting, tax and payroll, and to arrange nominee directors for Singapore companies and keep the register of nominee directors. Some information we file with ACRA appears on public registers.
- To communicate with you and bill for our services, to comply with the law and requests from regulators, and to prevent, detect and report financial crime.
We rely on your consent and, where the PDPA allows us to act without consent (for example, where written law requires it), on that basis.
4. Who we share it with
- Accread Pte. Ltd., our outsourced service provider in Singapore, which helps deliver our services and prepare due diligence, and processes personal data only for us.
- Government agencies needed to provide the services, such as ACRA, IRAS and the CPF Board.
- Regulators and law enforcement, including ACRA and the Suspicious Transaction Reporting Office, as the law requires or permits. The law may prevent us from telling you that we have done so.
- Our professional advisers and auditors, banks where you ask us to help open an account, and our IT and cloud providers (such as Google Workspace), which process data for us.
If we suggest another firm for a service we don't provide, we don't pass your personal data to it; you contact that firm directly. We do not sell personal data.
5. Transfers outside Singapore
Our email, files and website form submissions are hosted on Google Workspace, which may store data outside Singapore. As the PDPA requires, we take steps to ensure such data is protected to a standard comparable to the PDPA.
6. How long we keep it
The Corporate Service Providers Act 2024 requires us to keep customer due diligence records for at least 5 years after we stop providing services to the client, and we do so. We keep other records for as long as the law requires or we need them for legal claims, and then securely delete or anonymise them. Website enquiries that do not lead to an engagement are deleted when we no longer need them.
7. How we protect it
We limit access to people who need it, keep client files in access-controlled folders, use multi-factor authentication, and require our service providers to keep data confidential.
8. Your rights
- Access: you may ask for the personal data we hold about you and how it has been used or disclosed in the past year. We may charge a reasonable fee and will tell you the amount first.
- Correction: you may ask us to correct errors. Corrections to information filed with ACRA may need a new filing.
- Withdrawing consent: you may withdraw your consent, and we will explain the likely consequences. We will still keep due diligence records for the legally required period, and we may have to stop providing services.
The PDPA allows or requires us to refuse some requests, for example where access could prejudice an investigation. If you give us data about other people (such as fellow directors), please make sure they have seen this notice.
9. Data Protection Officer
Contact our Data Protection Officer at hello@simplycorp.sg (subject: "Attention: Data Protection Officer") or by post at our registered office. If you have a concern, please contact us first. You may also contact the Personal Data Protection Commission.
Full text available on request at hello@simplycorp.sg.