Privacy notice
How will personal data be handled?
This published policy states the controls the platform currently follows. It is maintained by the publisher and updated when the operating, legal or evidence process changes.
What is the rule?
This is a working PDPA-aligned notice, not approved legal text. The final notice must name the controller, purposes, lawful basis, processors, retention, security, cross-border handling and data-subject routes.
Public-register data, provider submissions, account data, contact enquiries and analytics require separate purpose and retention definitions.
No lead collection or provider matching should launch until data flows, consent wording and deletion procedures are approved.
How is the rule audited?
The structured record stores sources, verification date, responsible reviewer, next review due, workflow stage and correction history.
Exceptions are not handled in hidden page-builder text. They require an accountable owner, dated rationale and a visible update where the public record materially changes.
Independent by design
Verification before promotion
Evidence status, commercial relationships and corrections are recorded separately. A paid relationship never changes a verification state or organic order.