Embedded Files
Privacy Policy
Privacy Policy
Last Updated: 15 May 2026
Xcount (“we”, “us”, or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, and safeguard the information you provide to us, in accordance with the Singapore Personal Data Protection Act 2012 (PDPA).
1. Data Collection
1. Data Collection
We collect personal data that is necessary to provide our professional accounting, bookkeeping, and consultancy services. This includes:
Identity Data: Name, NRIC/FIN/Passport number (only when legally required), and job title.
Contact Data: Email address, phone number, and business address.
Financial Data: Bank account details, tax identifiers, and financial transaction data provided via Xero or QuickBooks Online (QBO).
Technical Data: IP addresses and cookies if you interact with our website.
2. How We Use Your Data
2. How We Use Your Data
We use your information for the following purposes:
Service Delivery: Setting up and managing your Xero/QBO accounts, performing bookkeeping, and preparing tax filings.
Communication: Responding to inquiries and sending updates regarding your accounts or regulatory changes.
Compliance: Meeting legal and regulatory obligations under Singapore law (e.g., IRAS requirements or Anti-Money Laundering regulations).
3. Third-Party Service Providers
3. Third-Party Service Providers
As ProAdvisors, we utilize cloud-based platforms to process your data. Your data may be stored or processed by:
Xero / QuickBooks Online: For core accounting functions.
Integrated Apps: Specialized tools (e.g., Hubdoc, Dext, or payment gateways) that you authorize us to connect to your ledger.
Storage: Secure cloud storage providers (e.g., Google Workspace, Microsoft 365).
Note: These providers have their own robust security protocols (ISO 27001, SOC 2). We only grant access to the specific data required for the service.
4. Data Security
4. Data Security
We implement industry-standard security measures, including:
Multi-Factor Authentication (MFA): Mandatory for all staff accessing financial platforms.
Access Control: Data is only accessible by authorized personnel on a "need-to-know" basis.
Encryption: Using secure, encrypted channels for transferring sensitive documents.
5. Data Retention
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Singapore law (typically 5 to 7 years for tax and accounting records).
6. Your Rights
6. Your Rights
Under the PDPA, you have the right to:
Access: Request a copy of the personal data we hold about you.
Correction: Request that we correct any inaccuracies in your data.
Withdrawal: Withdraw your consent for us to process your data (though this may limit our ability to provide services).
7. Contact Our Data Protection Officer (DPO)
7. Contact Our Data Protection Officer (DPO)
If you have questions about this policy or wish to exercise your rights, please contact ca@xcount.sg
Google Sites
Report abuse