Privacy Policy

PRIVACY NOTICE

Last updated: February 4, 2026

This Privacy Notice for Next Commerce Pte. Ltd. ("Next Commerce," "we," "us," or "our"), a company incorporated in Singapore, describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

Visit our website at https://www.nextcommerce.com (or any website of ours that links to this privacy notice);
Engage with us in other related ways, including sales, marketing, or events.

Questions or concerns?

Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact our Data Protection Officer at privacy@nextcommerce.com.

1. WHAT INFORMATION DO WE COLLECT?

Key Takeaway: We collect personal information that you provide to us directly, and some technical data is collected automatically to ensure our platform functions correctly.

Personal Information You Disclose to Us

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Contact Data: Names, email addresses, phone numbers, and job titles.
Account Credentials: Passwords and security information used for authentication.
Billing Information: If you subscribe to our paid Services, we may collect billing addresses and payment instrument details (though payment data is typically processed by our secure payment partners).

Sensitive Information: We do not process sensitive personal information (e.g., race, religion, health data) unless explicitly required by law and with your express consent.

Information Automatically Collected

When you visit, use, or navigate the Services, we automatically collect certain computing data. This information does not reveal your specific identity (like your name) but may include:

Log and Usage Data: IP address, browser type, device settings, crash reports, and system activity.
Device Data: Information about the computer, phone, tablet, or other device you use to access the Services (e.g., hardware model, OS version).
Location Data: General location data (e.g., country/city level) based on IP address to ensure local tax compliance and service optimization.

2. HOW DO WE PROCESS YOUR INFORMATION?

Key Takeaway: We process your information to provide our SaaS platform, improve user experience, prevent fraud, and comply with legal obligations.

We process your personal information for the following specific purposes:

Service Delivery: To facilitate account creation, authentication, and the delivery of the Next Commerce platform features.
Support & Communication: To respond to your inquiries, solve technical issues, and send administrative information (e.g., terms updates).
Security & Fraud Prevention: To monitor for and prevent fraudulent activities on our platform.
Business Intelligence: To analyze usage trends to improve our platform's performance and user experience.
Legal Compliance: To comply with applicable laws, including the Singapore PDPA and tax regulations.

3. WHAT LEGAL BASES DO WE RELY ON?

Key Takeaway: We only process your personal information when we have a valid legal reason, such as your consent, a contract with you, or a legitimate business interest.

For Users in Singapore (PDPA Compliance)

In accordance with the Personal Data Protection Act 2012 (PDPA), we generally rely on the following bases:

Consent: We process your data where you have given consent.
Deemed Consent: Where you voluntarily provide data for a specific purpose (e.g., support request).
Legitimate Interests: Where processing is necessary for our legitimate business interests without overriding your rights.

For Users in the EU/UK (GDPR Compliance)

If you are located in the EEA or UK, we rely on:

Performance of a Contract: Necessary to fulfill our contractual obligations to you.
Legitimate Interests: Necessary for our business operations (e.g., fraud prevention, analytics).
Legal Obligation: Necessary to comply with EU/UK law.
Consent: Specifically for marketing communications, which you can withdraw at any time.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

Key Takeaway: We share information only with essential third-party vendors who help us run our infrastructure. We do not sell your data.

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us. We have contracts in place with these parties to safeguard your personal information.

Key Third-Party Processors include:

Cloud Infrastructure: Amazon Web Services (AWS)
Analytics & Performance: Google Analytics, New Relic
Security & CDN: Cloudflare
Compliance Tools: Termly.io

We may also share data during Business Transfers (e.g., mergers, acquisitions, or asset sales) or to comply with Legal Obligations (law enforcement or regulatory bodies).

5. INTERNATIONAL DATA TRANSFERS

Key Takeaway: As a Singapore-based company with global infrastructure, your data may be transferred across borders.

Our servers are located primarily in data centers operated by Amazon Web Services (AWS). If you are accessing our Services from outside Singapore, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information.

We have implemented appropriate safeguards to protect your personal information during these transfers, in accordance with the PDPA (Singapore) and GDPR (Europe), including the use of Standard Contractual Clauses (SCCs) where applicable.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your personal information only for as long as necessary to fulfill the purposes set out in this privacy notice, unless a longer retention period is required by law (such as for tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.

7. DATA SECURITY

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. This includes encryption, access controls, and regular security audits. However, please remember that no electronic transmission over the Internet is entirely secure.

8. YOUR PRIVACY RIGHTS

Key Takeaway: You have rights to access, correct, or delete your data depending on your location.

Users in Singapore

Access: Request access to the personal data we hold about you.
Correction: Request that we correct any errors or omissions in your personal data.
Withdraw Consent: Withdraw your consent for the collection, use, or disclosure of your personal data.

Depending on your jurisdiction, you may have rights to request access, rectification, erasure, restriction of processing, and data portability.

To exercise any of these rights, please contact our Data Protection Officer at privacy@nextcommerce.com or via our data request form.

9. UPDATES TO THIS NOTICE

We may update this privacy notice from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Revised" date.

10. CONTACT US

If you have questions or comments about this notice, or wish to exercise your privacy rights, you may contact our Data Protection Officer (DPO) at privacy@nextcommerce.com or by post to:

Next Commerce Pte. Ltd.
Data Protection Officer
32 Pekin Street
#05-01
Singapore 048762