Legal
Privacy Policy
This page explains how the International HADO Federation Ltd. handles personal data submitted through this website.
This page is maintained by the International HADO Federation Ltd. to answer common privacy questions about the IHF website and enquiry form. It describes current practices and controls; it is not an independent certification, legal opinion, or representation about third-party services.
Overview
What this policy covers
Scope
This policy applies to personal data collected through the enquiry form on the Contact page and to any other information voluntarily submitted to the Federation via this website.
Data controller
International HADO Federation Ltd.
UEN: 202622434Z
Incorporated in Singapore on 20 May 2026
Public Company Limited by Guarantee
Collection
Personal information we collect
The enquiry form collects the following information when you choose to submit it:
- Name — to identify and address you in our response.
- Organisation — to understand the body you represent, if any.
- Country / region — to route your enquiry to the appropriate Federation contact.
- Email address — to reply to your enquiry.
- Enquiry category, subject, and message — to understand and respond to your request.
- Submission timestamp — to record when the enquiry was received and to support rate-limiting and abuse prevention.
We do not intentionally collect sensitive personal data through the enquiry form. Please do not submit health, financial, or other sensitive information unless specifically requested.
Purpose
Why we collect this information
We use the information you provide solely for the following purposes:
- To respond to your enquiry or direct it to the appropriate Federation officer.
- To maintain a record of correspondence for administrative and governance purposes.
- To detect and prevent spam, abuse, and duplicate submissions.
- To comply with applicable legal or regulatory obligations.
We do not sell personal data, and we do not use it for automated decision-making or profiling.
Processing
How we process and protect your data
Server-side handling
Enquiries are submitted through a server-side function. Validation, rate limiting, spam filtering, and storage happen on the server; the database table is not directly accessible from the public website.
Security measures
We rely on the security controls provided by our hosting, database, and email providers, including encrypted connections and access restrictions. We review these arrangements as part of our ongoing operations.
Service providers
Subprocessors and integrations
The Federation uses reputable third-party service providers to host the website, store enquiry records, deliver email notifications, and protect against abuse. These providers process personal data only to the extent necessary to perform their services.
- Hosting and database — provided by Lovable Cloud, which uses Supabase infrastructure.
- Email delivery — provided by Resend, used to forward enquiry notifications to the Federation secretariat.
- Embedded video content — video players are provided by YouTube (Google). Videos load only after you click to play, and we use the privacy-enhanced youtube-nocookie.com domain. Once you start playback, YouTube may receive your IP address and device information and process it under Google's own privacy policy.
- Security and error monitoring — provided by platform-integrated services for error reporting and abuse prevention.
We do not control every technical detail of these providers' operations. Their own privacy and security terms apply to data they process on our behalf.
Retention
How long we keep enquiry records
Enquiry records are retained for as long as necessary to respond to your request, maintain administrative records, and meet applicable legal or governance obligations. Records that are no longer needed are deleted in accordance with our internal retention schedule.
If you would like a record deleted earlier, please contact us using the details below. We will review each request subject to any legal or operational constraints.
Your rights
Access, correction, and deletion
You may request access to, correction of, or deletion of the personal data we hold about you by emailing us at the address below. We will respond to reasonable requests in accordance with applicable law and our operational capabilities.
To help us process your request, please include the email address you used when submitting the enquiry and, if possible, the approximate date of submission.
International transfers
Cross-border data processing
The Federation is incorporated in Singapore. Our service providers may process or store data in other countries as part of their cloud infrastructure. By submitting an enquiry, you acknowledge that your data may be transferred outside Singapore for these operational purposes, subject to the safeguards described by our providers.
Legal context
Singapore Personal Data Protection Act 2012
The International HADO Federation Ltd. is based in Singapore and endeavours to handle personal data in a manner consistent with the Personal Data Protection Act 2012 (PDPA). This policy is intended to support, not replace, the rights and obligations provided by applicable law.
If you believe your data protection rights have not been respected, please contact us first so we can address your concern. Nothing in this policy is intended to waive any right you may have under Singapore law.
Contact
Privacy enquiries
For questions about this Privacy Policy, or to exercise any of your rights, please contact the Federation secretariat:
International HADO Federation Ltd.
Email: info@hadofederation.org
Last updated: 2 August 2026.
