Consent and the PDPA

What the form asks, what we store, and why it's worded the way it is.

Singapore’s Personal Data Protection Act says, in plain terms: get someone’s agreement before collecting their details, tell them what you’ll use them for, use them only for that, and delete them when asked. The lead form is built around that.

This is how TapX is built, not legal advice. If you handle a lot of personal data, have your own terms reviewed.

Two separate ticks

Contact consent — required. It says you may get in touch about the conversation you just had. Without it, no lead is created.

Marketing consent — optional and separate. It covers newsletters and promotions. It is a distinct tick because bundling the two together is exactly what the law is designed to stop: someone should be able to let you follow up without signing up to a mailing list.

We store the wording, not just a tick

Every lead keeps a copy of the exact sentence the person agreed to, plus the version of that wording. If the text changes next year, a lead captured today still shows what today’s person actually saw. A tick with no wording attached proves very little; this is the part that makes the record worth having.

What you should do with a lead

Follow up about the thing you discussed.
Don’t add someone to a mailing list unless they gave marketing consent.
Delete them if they ask, in TapX and in any tool you sent them to; TapX doesn’t remove them from your tools. See Exporting and deleting leads.
Don’t sell or pass the list on.

Do Not Call

Marketing messages to Singapore phone numbers have their own rules under the DNC registry. Consent given on the lead form covers your follow-up; it doesn’t exempt you from checking the registry before a marketing campaign by SMS or call.

Still stuck? Email hello@tapx.sg and a person will answer.