Legal

Privacy Policy

This page explains how the International HADO Federation Ltd. handles personal data submitted through this website.

This page is maintained by the International HADO Federation Ltd. to answer common privacy questions about the IHF website and enquiry form. It describes current practices and controls; it is not an independent certification, legal opinion, or representation about third-party services.

Overview

What this policy covers

Scope

This policy applies to personal data collected through the enquiry form on the Contact page and to any other information voluntarily submitted to the Federation via this website.

Data controller

International HADO Federation Ltd.
UEN: 202622434Z
Incorporated in Singapore on 20 May 2026
Public Company Limited by Guarantee

Collection

Personal information we collect

The enquiry form collects the following information when you choose to submit it:

  • Name — to identify and address you in our response.
  • Organisation — to understand the body you represent, if any.
  • Country / region — to route your enquiry to the appropriate Federation contact.
  • Email address — to reply to your enquiry.
  • Enquiry category, subject, and message — to understand and respond to your request.
  • Submission timestamp — to record when the enquiry was received and to support rate-limiting and abuse prevention.

We do not intentionally collect sensitive personal data through the enquiry form. Please do not submit health, financial, or other sensitive information unless specifically requested.

Purpose

Why we collect this information

We use the information you provide solely for the following purposes:

  • To respond to your enquiry or direct it to the appropriate Federation officer.
  • To maintain a record of correspondence for administrative and governance purposes.
  • To detect and prevent spam, abuse, and duplicate submissions.
  • To comply with applicable legal or regulatory obligations.

We do not sell personal data, and we do not use it for automated decision-making or profiling.

Processing

How we process and protect your data

Server-side handling

Enquiries are submitted through a server-side function. Validation, rate limiting, spam filtering, and storage happen on the server; the database table is not directly accessible from the public website.

Security measures

We rely on the security controls provided by our hosting, database, and email providers, including encrypted connections and access restrictions. We review these arrangements as part of our ongoing operations.

Service providers

Subprocessors and integrations

The Federation uses reputable third-party service providers to host the website, store enquiry records, deliver email notifications, and protect against abuse. These providers process personal data only to the extent necessary to perform their services.

  • Hosting and database — provided by Lovable Cloud, which uses Supabase infrastructure.
  • Email delivery — provided by Resend, used to forward enquiry notifications to the Federation secretariat.
  • Embedded video content — video players are provided by YouTube (Google). Videos load only after you click to play, and we use the privacy-enhanced youtube-nocookie.com domain. Once you start playback, YouTube may receive your IP address and device information and process it under Google's own privacy policy.
  • Security and error monitoring — provided by platform-integrated services for error reporting and abuse prevention.

We do not control every technical detail of these providers' operations. Their own privacy and security terms apply to data they process on our behalf.

Retention

How long we keep enquiry records

Enquiry records are retained for as long as necessary to respond to your request, maintain administrative records, and meet applicable legal or governance obligations. Records that are no longer needed are deleted in accordance with our internal retention schedule.

If you would like a record deleted earlier, please contact us using the details below. We will review each request subject to any legal or operational constraints.

Your rights

Access, correction, and deletion

You may request access to, correction of, or deletion of the personal data we hold about you by emailing us at the address below. We will respond to reasonable requests in accordance with applicable law and our operational capabilities.

To help us process your request, please include the email address you used when submitting the enquiry and, if possible, the approximate date of submission.

International transfers

Cross-border data processing

The Federation is incorporated in Singapore. Our service providers may process or store data in other countries as part of their cloud infrastructure. By submitting an enquiry, you acknowledge that your data may be transferred outside Singapore for these operational purposes, subject to the safeguards described by our providers.

Legal context

Singapore Personal Data Protection Act 2012

The International HADO Federation Ltd. is based in Singapore and endeavours to handle personal data in a manner consistent with the Personal Data Protection Act 2012 (PDPA). This policy is intended to support, not replace, the rights and obligations provided by applicable law.

If you believe your data protection rights have not been respected, please contact us first so we can address your concern. Nothing in this policy is intended to waive any right you may have under Singapore law.

Contact

Privacy enquiries

For questions about this Privacy Policy, or to exercise any of your rights, please contact the Federation secretariat:

International HADO Federation Ltd.
Email: info@hadofederation.org

Last updated: 2 August 2026.