Privacy policy

1. Who we are

InOrderHR ("we", "us"), provides HR documents, contract reviews and payroll services to employers in Singapore.

We handle personal data under Singapore's Personal Data Protection Act (PDPA). For data protection questions, or to access or correct your data, contact: [email protected].

Data Protection Officer (DPO) email: [email protected].

2. This website and the free tools

The free tools calculate everything in your browser. What you type is not sent to us.

The tools do not record or save the employee and pay details you enter; they are gone when you close the page.

The site uses no analytics or advertising cookies. Your browser only keeps a copy of the pages so the tools work offline.

Our hosting provider may keep standard connection logs (such as IP address and time of visit) to run and secure the site.

3. Data we collect when you use our services

Contact details: your name, phone number, email, company name and UEN.

Your messages with us by email and the enquiry form on this site. (The enquiry form only opens your own email app and you send the message; the website itself keeps nothing.)

Employee data needed for the service, such as name, NRIC/FIN, date of birth, citizenship or work pass status, race and religion (to calculate self-help group contributions), salary, allowances, overtime hours and leave records.

We only ask for what the service you bought requires.

4. How we use the data

Only to provide the service you bought, to communicate with you, to issue receipts, and to meet legal requirements.

We never sell, rent or trade personal data, and we never use employee data for marketing.

5. Employee data: your role and ours

We process the employee data you give us on your behalf. Under the PDPA we act as a data intermediary, and you, the employer, remain the organisation responsible for the data.

Please make sure your employees have been told how their data is used (for example, by an outsourced payroll service) and that consent has been obtained where the PDPA requires it.

6. Sharing with third parties

We use service providers only where the service needs them: email, online forms, cloud storage and online payments (a licensed payment provider handles card details; we never see them). Their servers may be outside Singapore; we only use providers with reasonable data protection in place.

We do not share data with anyone else unless the law requires it, for example a lawful request from a government authority.

7. How long we keep data

Within 30 days after the service ends, we delete or return the employee data you gave us, unless the law requires us to keep it longer.

Receipts and payment records are kept for 5 years, as IRAS requires.

Other data (such as our email and enquiry conversations with you) is kept only as long as the service and the law need, then deleted.

Note: MOM requires employers to keep their own employee and payroll records, so please keep the files we deliver to you.

8. How we protect data

Accounts that hold data are protected by passwords and two-factor authentication, and only we can access them.

Where the full number is not needed, NRIC/FIN numbers are masked (for example S****123A).

9. Data breaches

If a data breach happens, we will tell affected clients as soon as possible and notify the Personal Data Protection Commission (PDPC) where the PDPA requires it.

10. Access, correction and withdrawing consent

You may ask to access or correct your personal data, or withdraw consent, at any time. Email [email protected] and we will reply within 30 days. If consent is withdrawn, we may not be able to continue the related service.

11. Changes to this policy

When this policy changes, the new date will be shown on this page.