GDPR Compliance

Entrapris Pte. Ltd. is committed to complying with the General Data Protection Regulation (GDPR) and applicable UK GDPR requirements. This page outlines how we support data protection obligations for customers and individuals in the European Economic Area (EEA) and the United Kingdom.

Depending on the context, Entrapris may act as a data controller (for example, when processing account, billing, and marketing data) or as a data processor (when handling Customer Data submitted by our business customers through the ENTRAPRIS platform).

When we process personal data on behalf of customers, we do so only according to their documented instructions and applicable data processing agreements.

We process personal data under one or more lawful bases recognized by the GDPR, including:

• Performance of a contract with you or your organization.
• Legitimate interests, such as improving security and product functionality, balanced against your rights.
• Compliance with legal obligations.
• Consent, where required for specific activities such as certain marketing communications.

Individuals in the EEA and UK may have the following rights under GDPR, subject to applicable exceptions:

• Right of access to personal data we hold about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") in certain circumstances.
• Right to restrict processing in certain circumstances.
• Right to data portability for data you provided, where processing is automated and based on contract or consent.
• Right to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent at any time, where processing is based on consent.
• Right to lodge a complaint with a supervisory authority.

To submit a request, email privacy@entrapris.com. We may need to verify your identity before responding.

Business customers who require Entrapris to process personal data on their behalf may request a Data Processing Agreement (DPA) that describes our obligations as a processor, including confidentiality, security measures, subprocessors, and assistance with data subject requests. Contact legal@entrapris.com to request a DPA.

Personal data may be transferred to and processed in countries outside the EEA and UK, including Singapore. Where required, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or other mechanisms approved under applicable data protection law.

We assess transfer mechanisms regularly and take steps to ensure an adequate level of protection for personal data.

We maintain technical and organizational measures designed to protect personal data, including:

• Access controls and role-based permissions.
• Encryption in transit and, where appropriate, at rest.
• Monitoring, logging, and incident response procedures.
• Vendor review and contractual security requirements for subprocessors.

We use trusted subprocessors to help deliver our services, such as cloud infrastructure, payment, and communication providers. Subprocessors are subject to contractual obligations consistent with GDPR requirements. Customers may request information about subprocessors relevant to their use of the platform.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to provide services, meet legal obligations, resolve disputes, and enforce agreements. Retention schedules may vary by data category and customer configuration.

For GDPR-related questions, data subject requests, or DPA inquiries, contact:

Entrapris Pte. Ltd.
21 Bukit Batok Crescent #09-79
Singapore 658065
Email: privacy@entrapris.com

For more information about how we handle personal data, see our Privacy Policy.