Privacy Notice
Last updated: 2026-04-18
This Privacy Notice explains how Suupur Pte. Ltd. (UEN 202615826W), a company incorporated in Singapore (“Suupur”, “we”, “us”), collects, uses, and discloses personal data when you visit suupur.com. It is published in accordance with the Personal Data Protection Act 2012 of Singapore (the “PDPA”) and is intended to be read in plain language rather than as legal boilerplate.
What this notice covers. This notice applies only to suupur.com — the corporate website of Suupur Pte. Ltd. It does not apply to helmself.com or to any product, service, or application we operate under a separate brand. Those properties have their own privacy notices.
What personal data we collect. In ordinary use of this website we collect very little. Specifically:
- Visit metadata. When you load a page, our web host (Cloudflare, Inc.) records standard request logs including your IP address, the URL you requested, your user-agent string, and the timestamp. These logs exist so the service can be operated securely — for example, to block abuse or diagnose outages. They are retained by Cloudflare for a short period under their own retention policies and are not accessible to Suupur as a database we can query.
- Aggregate analytics. We use Umami to measure aggregate traffic to the site. Umami is configured in privacy-respecting mode: it sets no cookies, records no persistent identifiers, and stores no raw IP addresses. What we see is counts — for example, that a given page was viewed 14 times yesterday from visitors in Singapore. We cannot identify individual visitors from this data.
- Email contents. If you write to us at
hello@suupur.com,press@suupur.com,careers@suupur.com, or any other@suupur.comaddress, the email (including your address, name if you signed it, and message body) is routed by Cloudflare Email Routing to a mailbox we operate, and becomes part of our correspondence records. We use this only to respond to you and, where relevant, to keep a record of the exchange.
Why we collect it. The site-operations data (host logs, aggregate analytics) is collected under the basis of legitimate interests — operating a secure and functional website. The email correspondence is collected under consent — by writing to us, you are asking us to respond.
Who we share it with. We share personal data only with service providers strictly necessary to run the site:
- Cloudflare, Inc. — hosts the website, provides the CDN and DNS, and routes email. Cloudflare processes data at points of presence around the world, which may include servers outside Singapore.
- Umami Software, Inc. — provides hosted analytics. Aggregate, non-identifying data only.
We do not sell personal data. We do not share it with advertisers. We do not use it to build profiles of visitors.
Transfers out of Singapore. Cloudflare and Umami operate globally, which means that technical processing of the data described above may occur on servers outside Singapore. Where this happens, we rely on those providers’ standard contractual protections, which are intended to provide a level of protection comparable to the PDPA.
How long we keep it. Host logs: retained by Cloudflare under their own short retention schedule — we do not store copies. Analytics counts: retained indefinitely in aggregate form (no personal data). Email correspondence: retained for as long as is useful for the matter you wrote to us about, and then archived or deleted in line with our ordinary record-keeping.
Security. We take reasonable administrative and technical measures to protect personal data we hold. No system is perfectly secure; if we ever become aware of a breach affecting your personal data, we will notify you and the Personal Data Protection Commission of Singapore as required by law.
Changes to this notice. If we make material changes, we will update the “Last updated” date above and, for substantive changes, note the change at the top of this page for a reasonable period.
Contact. Questions about this notice, or about personal data generally, go to our Data Protection Officer at dpo@suupur.com. Written enquiries can be sent to our registered office — see the Contact page.