Privacy policy
What JYM collects, why, how long it is kept, and how to make it stop. Written under Singapore's Personal Data Protection Act.
Who to contact
JY Lim, Data Protection Officer
+65 9299 6898 · WhatsApp or phone
Use this to withdraw your consent, ask what JYM holds about you, correct something that is wrong, or ask a question about anything below. Withdrawing takes effect within 10 business days, and you never have to give a reason.
Message the DPO on WhatsAppWho is responsible
JYM is a business name of Infinity Health Informatics Pte Ltd, UEN 201413290H, registered in Singapore. That company is the organisation responsible for the personal data described here. "JYM", "we" and "I" all mean the same company below.
What is collected, and where
There are three places on this site where anything about you is recorded, and they behave differently. This is the whole list.
1. The free website scan
If you run the free scan, the following is stored in JYM's database:
| What | Why it is kept |
|---|---|
| Your name, email address and phone number | So JYM can send you the result and follow up about it |
| The website address you entered | It is what gets scanned, and it is how the one-scan-a-month limit is applied |
| Anything you typed in the "what is on your mind" box | So JYM knows what you actually want looked at |
| The exact consent wording you agreed to, its version, the channels it covered, and the time you agreed | So what you agreed to can be reproduced exactly rather than approximately, if it is ever questioned |
| Your IP address and browser user agent | Recorded as part of that consent record, and used to limit how many scans one visitor can start in an hour |
The scan itself reads the public pages of the website you give us. That is content already published to the world, not personal data you handed over.
2. The Free-Up-Cash Audit application
The application form on the apply page stores nothing on any server. It assembles a message inside your own browser and opens WhatsApp with it. Nothing is submitted anywhere until you press send in WhatsApp, and if you close the tab instead, nothing has been recorded. Once you do send it, JYM holds it the way anyone holds a WhatsApp message.
3. Ordinary website analytics
This site uses Google Analytics through Google Tag Manager to count visits, see which pages are read, and see which buttons are pressed. It records the page, the button and the browser, never your name, email or phone number. Google sets cookies to do this. You can refuse them in your browser settings, or use its "do not track" setting, and the site still works.
What JYM does with it
- Runs the scan you asked for and shows you the result.
- Contacts you about that scan, about the Free-Up-Cash Audit, and about JYM's services.
- Applies the limit of one free scan per website and one per email address per calendar month.
- Keeps a record of what you consented to, so both sides can check it later.
What JYM does not do
- Your free-text answer is never sent to an AI model. The scan uses AI to read the public pages of the website you entered. What you typed about your own business is deliberately kept out of that, and goes only to JYM's own records.
- Your details are never sold, rented or passed to anyone for their own marketing.
- The analytics never receive your name, email or phone number.
- No SMS. Under Singapore's Do Not Call provisions text messaging is its own category, and the consent JYM asks for does not cover it. JYM will not text you marketing messages.
Consent, and taking it back
Consent is asked for once, in plain words, beside a box you tick yourself. It covers being contacted by email, phone and WhatsApp. The wording you saw is stored word for word with your record, so a later change to the wording cannot alter what your record says you agreed to.
You can withdraw at any time: reply to any message JYM sends you, or contact the Data Protection Officer above. There is no form to fill in and no reason to give. Withdrawal stops the marketing contact. It does not erase the record that consent was given and then withdrawn, because that record is the evidence that JYM handled it correctly.
How long it is kept
- Scan lead details - name, email, phone, website and what you typed: 24 months from the last time we were in contact, then deleted.
- The consent record itself: kept for as long as JYM may need to show that consent was properly given and honoured, which can outlast the details above.
- Scan results about a website: kept as working records, and no longer linked to you once the details above are deleted.
Ask the DPO and it goes sooner.
Who else handles it
JYM uses ordinary service providers to run this site, and they only process data on JYM's instructions:
- Vercel - hosting for this site and the scan.
- Neon - the database the scan records are stored in.
- Google - Analytics and Tag Manager, for the counting described above.
- The AI provider that reads the public pages of the website being scanned.
These services operate internationally, so your data may be stored or processed outside Singapore. JYM uses providers that undertake to protect it to a standard comparable to Singapore's Personal Data Protection Act.
Your rights
You can ask JYM to tell you what personal data it holds about you and how it has been used in the past year, to correct anything that is wrong, or to stop contacting you. Contact the Data Protection Officer above. A request is normally answered within 30 days, and if it will take longer you will be told why.
If you are not satisfied with the answer, you can raise it with Singapore's Personal Data Protection Commission at pdpc.gov.sg.
Security
Records are held in an access-controlled database, reachable only over encrypted connections, and only JYM has access. No system is perfect, and JYM does not claim otherwise, but nothing here is stored anywhere a stranger can read it.
Changes
If this policy changes, the date at the top changes with it. A change to the consent wording is never made in place: it gets a new version, so that what any earlier record says a person agreed to stays exactly what they were shown.