Privacy
UEN: 202441448H
105 Cecil Street, The Octagon, Singapore 069534
info@bagrbot.com
https://bagrbot.com
Controller and purposes
Contact and account data are used for orders, login, payments, communication and service operation. Company records and attachments are processed for the authorised company’s records. The operator specifies processing agreements and service providers.
Access and public portfolio
Private data are restricted to authorised company members. A public portfolio contains only published text, contact details, logos and photographs. The company controls publication and ensures it has permission to use the material.
Retention and backups
Data retention follows purposes, contracts and legal obligations. Technical backups and audit records support recovery and traceability. Erasure requests are also assessed against mandatory accounting and other retention duties.
Your rights
Contact the operator for access, correction, erasure, restriction, portability or objection. You may complain to the competent supervisory authority. The operator specifies the applicable legal bases and retention periods for its service.
Personal data and legal grounds
We process account and contact details, orders and payment identifiers, security logs and content you upload. Legal grounds are contract performance (GDPR Article 6(1)(b)), legal obligations (c), legitimate interests in security (f) and consent where required (a).
Controller and processor roles
The operator is controller for accounts and orders. For employees’ data and company records uploaded by customers, the customer may be controller and BagrBot its processor; a separate Article 28 data processing agreement may be required.
Recipients and international transfers
Authorized staff and necessary hosting, email, payment and support providers may access data under suitable safeguards. Transfers outside the EEA require a valid Chapter V GDPR mechanism; the actual providers and transfers must be confirmed for the deployed infrastructure.
Retention and security
Records are retained only for the relevant purpose, contractual claims and legally mandatory periods; backup and security-log retention depend on hosting configuration. Access controls, encrypted transport and backups support security. We do not make solely automated decisions with legal or similarly significant effects.
Your rights
Write to info@bagrbot.com to exercise access, rectification, erasure, restriction, portability or objection. GDPR requests normally receive a response within one month. You can lodge a complaint with an EU supervisory authority. Any Article 27 EU representative obligation needs separate assessment.