Privacy & PDPA Notice

Version 1.0 · Techneek Global Ltd (United Kingdom), providing InvoiceNow e-invoicing services in Singapore, with local associate MRJ Solutions (MRJ Infosolutions & Trade Pte. Ltd., UEN 201535525K).

1. Who we are

Techneek Global Ltd ("Techneek", "we") provides a middleware service that connects TallyPrime to Singapore's InvoiceNow (Peppol) network via the Billbay Access Point. This Notice explains how we handle personal data under the Singapore Personal Data Protection Act (PDPA) and, where applicable, the UK GDPR.

2. Our role

• Business & account data (e.g. your administrators' names, email addresses, phone numbers and login credentials) — we are the data controller.
• Invoice content (e-invoice documents and their business contact fields, e.g. buyer/seller contact names) — we act as a data intermediary / processor on behalf of the client business, which remains the data controller.

3. What we collect

• Business identifiers: company name, Singapore UEN, GST registration number, registered address, Peppol participant ID.
• Contact data: names, email addresses and phone numbers of the client's personnel and their trading partners, as contained in invoices or onboarding forms.
• Service data: transmission records, delivery receipts, audit logs, portal credentials (stored hashed/encrypted), and support correspondence.
• Technical data: IP address and request metadata recorded for security and rate-limiting.

4. Why we use it

• To transmit e-invoices to the Peppol network and retrieve delivery receipts.
• To operate the client portal and admin console, and to provide support.
• To meet legal, tax and audit record-keeping obligations.
• To secure the service (authentication, fraud prevention, rate limiting).

5. Sharing & sub-processors

We share e-invoice data with the Billbay Access Point (Billbay Pte. Ltd.) solely to transmit and receive documents on the Peppol network, and with our cloud hosting provider. A current list of sub-processors is available on request.

6. Retention

Transmission, receipt and administration records are retained for 5 years in line with IRAS record-keeping expectations. See our Data Retention Policy. Portal account data is retained while the account is active and for a reasonable period afterwards.

7. Security

Portal credentials used to authenticate transmissions are encrypted at rest; transport is over HTTPS. Admin access supports multi-factor authentication and role-based access control.

8. Your rights

You may request access to, correction of, or (where applicable) deletion of personal data, and may withdraw consent where consent is the basis of processing. Requests from a client's trading partners should be directed to the relevant client business (the controller).

9. Contact

For privacy enquiries or to exercise your rights, contact support@techneekglobal.com.