Last Updated: September 28, 2026
UPTOOK PTE. LTD., a company incorporated in Singapore with Unique Entity Number (UEN) 202310756H (“Uptook,” “we,” “us,” or “our”), operates https://www.uptook.io, its subdomains, applications, browser extensions, and related services (collectively, the “Platform”).
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data, including information about Platform users, customer representatives, and individuals whose business contact information is processed through our services.
For privacy enquiries or requests, please contact service@uptook.io.
1. Our Role and Applicable Laws
We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”) and other privacy laws applicable to our activities.
Where we determine why and how personal data is processed, we act as the responsible organisation or data controller. Where we process personal data solely on behalf of a customer and under its instructions, we act as a data intermediary, processor, or service provider, as applicable. In that case, the customer’s privacy notice and our agreement with that customer also apply.
Additional protections may apply depending on your location and the relevant processing, including under European, UK, Swiss, United States, and other applicable privacy laws. Nothing in this Policy limits mandatory rights under those laws.
This Policy provides information about our practices. It does not replace consent where separate consent is required.
2. Personal Data We Collect
Depending on your interactions with the Platform, we may collect:
· Account information: name, employer, job title, username, account identifiers, and authentication information;
· Contact information: email address, telephone number, business address, and communication preferences;
· Billing information: subscription details, orders, payment status, billing details, and transaction history. Payment providers may collect payment card information directly;
· Usage and device information: IP address, browser and device information, access times, searches, feature usage, diagnostic information, and security logs;
· Customer content: contact lists, files, prompts, instructions, messages, campaign materials, and other information submitted or generated through the Platform;
· Business and professional information: names, employers, job titles, business contact details, work locations, professional profiles, and related enrichment or matching results; and
· Communications and privacy records: support enquiries, feedback, correspondence, consent records, and privacy or opt-out requests.
Please do not provide sensitive personal data that is unnecessary for the service you are using. Where additional safeguards or consent are required for sensitive information, those requirements apply separately.
If information necessary to provide a requested service is not supplied, we may be unable to provide that service.
3. Sources of Personal Data
We may obtain personal data:
· Directly from you when you register, purchase services, contact us, or use the Platform;
· Automatically through cookies, logs, and similar technologies;
· From customers and authorised users who submit information;
· From integrations and other services you authorise; and
· From publicly accessible sources, licensed data providers, business partners, and other sources permitted by applicable law.
Public availability does not automatically permit every use of personal data. Where required, we provide additional information to individuals whose data we obtain indirectly, within the applicable legal timeframe.
If you submit another person’s information, you must have the necessary authority and any required lawful basis, notice, or consent. This does not remove Uptook’s own legal obligations.
4. How and Why We Use Personal Data
We use personal data, as relevant, to:
· Operate, administer, secure, and support the Platform;
· Manage accounts, subscriptions, payments, Credits, and billing;
· Provide search, verification, enrichment, CRM, AI, communications, and campaign features;
· Respond to enquiries and send necessary service notices;
· Assess and improve service performance, usability, and data quality;
· Detect and prevent fraud, misuse, security incidents, and unlawful activity;
· Conduct legally permitted marketing;
· Comply with legal obligations and establish, exercise, or defend legal claims; and
· Record and honour privacy choices and requests.
Where applicable law requires a legal basis, we rely on the basis appropriate to the activity. This may include performance of a contract with you, compliance with a legal obligation, your consent, or legitimate interests where legally permitted and not overridden by your rights.
Our legitimate interests may include providing and securing business services, administering customer relationships, maintaining accurate professional information, and facilitating relevant business connections. We assess those interests against the rights and reasonable expectations of affected individuals.
A contract with a customer does not automatically provide a contractual legal basis for processing information about unrelated individuals. Where consent is required, we obtain it separately, and you may withdraw it at any time.
Before materially changing the purpose of processing, we provide any additional notice and obtain any authorisation required by law.
5. Cookies and Similar Technologies
We may use cookies and similar technologies to maintain sessions, remember preferences, protect the Platform, understand usage, measure performance, and support marketing where permitted.
Where consent is required for non-essential technologies, we obtain it before using them and provide a way to withdraw it. You may also manage cookies through your browser or device settings. Blocking essential cookies may affect certain functions.
Where applicable law requires us to recognise an opt-out preference signal, such as Global Privacy Control, we process that signal as a request to opt out of the relevant sale, sharing, or targeted advertising activity.
Information and choices specific to particular technologies are provided through the relevant notices or controls where required.
6. When We Disclose Personal Data
We may disclose personal data, where necessary and legally permitted, to:
· Service providers supporting hosting, infrastructure, security, payments, analytics, communications, customer support, and AI features;
· Affiliates involved in operating or supporting our services;
· Customers using the Platform’s business contact search, verification, enrichment, or related features;
· Authorised users within your organisation’s account or workspace;
· Connected services you authorise;
· Professional advisers, auditors, insurers, and relevant transaction participants;
· Authorities or other parties where disclosure is required or permitted by law; and
· Other recipients at your direction or with your valid consent.
Processors acting on our behalf are subject to appropriate contractual restrictions and safeguards.
Customers who independently decide how to use business contact information may act as separate controllers. Access to a contact record does not itself establish consent to marketing.
Providing business contact information to customers for payment or other value may constitute a “sale” under applicable privacy laws. Certain advertising disclosures may constitute “sharing” or targeted advertising. Where such activities occur, applicable disclosure and opt-out requirements apply.
Customer content processed solely on a customer’s behalf remains subject to the relevant agreement and instructions. This Policy does not itself authorise adding private customer content to a generally available contact database.
AI Features
When you use AI features, relevant prompts, files, instructions, and other content may be processed by Uptook and providers supporting those features.
Such processing remains subject to applicable law and relevant contractual restrictions. General references to service improvement do not replace any separate notice, lawful basis, or authorisation required for model training or other independent uses.
Where profiling or automated decision-making requires additional disclosures or safeguards, we provide them for the relevant activity.
7. International Data Transfers
Uptook operates internationally. Personal data may be accessed, processed, or stored in Singapore, Mainland China, and other countries where relevant personnel, service providers, or recipients operate.
Those countries may have different privacy laws. We apply the safeguards required for the relevant transfer.
For transfers from Singapore, this includes measures required to ensure a standard of protection comparable to that under the PDPA, unless a lawful exemption applies.
Where European, UK, Swiss, or other transfer restrictions apply, we use an appropriate legal mechanism, such as an applicable adequacy decision, approved contractual safeguards, or another legally permitted mechanism. We undertake assessments and apply supplementary safeguards where required.
Your use of the Platform is not treated as blanket consent to international transfers. Contact us for information about relevant processing locations and transfer safeguards.
8. Retention and Security
We retain personal data for no longer than necessary for the relevant purposes, subject to applicable legal and contractual requirements.
Retention depends on the nature of the information, the duration of the customer relationship, service requirements, data accuracy and relevance, privacy requests, and applicable accounting, security, or legal obligations.
When information is no longer required, we delete or irreversibly anonymise it. Information awaiting deletion from backups is restricted from ordinary use and removed through the applicable backup lifecycle.
We may retain limited suppression information to honour an opt-out or deletion request and prevent inappropriate reintroduction of data.
We apply reasonable technical and organisational safeguards appropriate to the risks. No system is completely secure. If a personal data breach occurs, we investigate, take appropriate action, and provide notifications where required by applicable law.
9. Marketing and Your Choices
We may send communications about Uptook products, services, and events where permitted by law. We obtain prior consent where required and comply with applicable electronic marketing, anti-spam, and do-not-call rules.
You may stop receiving our marketing at any time, free of charge, by using the unsubscribe mechanism in a message or contacting service@uptook.io.
Where you object to direct marketing under applicable law, we stop the relevant processing, including related profiling. We may retain limited information to honour your choice.
Marketing opt-outs do not prevent necessary billing, security, or other non-promotional service messages.
Customers using the Platform for outreach are responsible for their own marketing obligations. Neither a subscription nor access to contact information automatically authorises a particular communication.
10. Your Privacy Rights
Depending on applicable law, you may have rights to:
· Confirm whether we process your personal data and obtain access;
· Request information about sources, purposes, and recipients;
· Correct inaccurate or incomplete information;
· Request deletion, restriction, or anonymisation;
· Receive a portable copy of certain data;
· Withdraw consent;
· Object to processing, particularly direct marketing;
· Opt out of sales, sharing, targeted advertising, or certain profiling;
· Limit certain uses of sensitive personal information;
· Request review of qualifying automated decisions;
· Appeal a refusal where applicable; and
· Complain to a competent regulator.
To exercise your rights, email service@uptook.io. You may use the subject “Privacy Request.” You do not need an Uptook account or special legal wording.
We may request proportionate information to verify your identity or an authorised agent’s authority where necessary. We do not impose verification requirements on opt-out requests where prohibited by law.
We respond within applicable legal time limits and explain any permitted extension or refusal. Requests are generally free; any fee or refusal must be permitted by law. We do not unlawfully discriminate against individuals who exercise privacy rights.
For Singapore access or correction requests, if we cannot respond within 30 days, we inform you within that period when a response can be expected, as required.
For requests governed by the EU GDPR, we generally respond within one month, subject to permitted extensions. Requests under other laws are handled within their respective deadlines.
If your request concerns data processed solely for a customer, we may direct you to that customer and assist as required.
11. Children and Third-Party Services
The Platform is intended for business and professional users aged 18 or older. We do not knowingly solicit personal data directly from children. Contact us if you believe a child’s information has been provided so that we can investigate and take appropriate action.
Third-party websites and services linked to or integrated with the Platform may have their own privacy policies. Please review them before providing information or enabling an integration. This does not exclude Uptook’s responsibilities for its own disclosures or processors.
12. Changes to This Policy
We may update this Policy to reflect changes in our services, practices, or legal requirements. We publish the revised version and update the “Last Updated” date.
Where required, we provide additional notice before materially changed processing begins and obtain any necessary consent. Continued use of the Platform does not substitute for consent where an affirmative choice is legally required.
13. Contact and Complaints
UPTOOK PTE. LTD.
Place of Incorporation: Singapore
Unique Entity Number (UEN): 202310756H
Privacy and Data Protection Contact: service@uptook.io
Website: https://www.uptook.io/
Privacy enquiries, requests for our Data Protection Officer, marketing opt-outs, and complaints may be sent to the email address above.
You may also complain directly to Singapore’s Personal Data Protection Commission or another competent privacy regulator in your jurisdiction. Contacting Uptook first is not a condition of exercising that right.