BizAcquire1. Who is responsible and scope
FLOWLABCO PTE. LTD. (UEN 202633283W) operates BizAcquire and is responsible for personal data handled through the service. Its registered office is 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051.
This notice explains how BizAcquire collects, uses, discloses, protects, and retains personal data when buyers, sellers, and administrators use the marketplace, account portals, listing intake, and related communications.
2. Data we collect
- Account data, including name, email, mobile number, password hash, account role, and sign-in records.
- Seller and business data, including listing details, financial indicators, location, images, and review status.
- A seller may enter a postal code for a temporary address lookup. BizAcquire sends it securely to its mapping provider, does not add it to the listing submission or database, and publishes only the editable location chosen by the seller.
- Buyer enquiry data, including budget, timeline, experience, funding readiness, deal preference, message, location, and consent record.
- Marketplace activity, including shortlists, listing views, requests, introduction status changes, and security records.
- Legacy payment, refund and access records, if any, retained for accounting, dispute handling or legal obligations.
3. Why we use personal data
We use personal data to operate accounts, publish approved business listings, match buyer interest to a business, screen enquiries, provide seller lead previews, share approved introductions, prevent abuse, recover accounts, communicate service updates, and maintain operational and security records.
4. Buyer contact disclosure
Buyer contact details are not placed in public listings. When a buyer submits an enquiry and gives the stated consent, BizAcquire may show the matched seller a masked preview while the enquiry is reviewed.
After BizAcquire approves the enquiry, the matched seller may receive the buyer's name, email, mobile number, acquisition profile, enquiry, consent record, and seller-facing screening summary. The introduction is currently provided without charge. Approval is an administrative screening step and is not identity verification or an endorsement.
5. Who receives data
Personal data may be available to authorised BizAcquire personnel and, where the user has requested or consented to the relevant introduction, the buyer or seller involved in that opportunity.
BizAcquire uses service providers for specific operational purposes: Cloudflare for website delivery, application hosting, database and file storage, and security services; Resend for transactional email; Google Analytics for consented website analytics; Singapore Land Authority's OneMap service for temporary postal-code address lookup; Groq for seller-requested assistance in improving listing summaries; and Namecheap and WordPress for the BizAcquire blog. These providers receive only the information reasonably needed for the relevant function. We may also disclose information where required by law, to investigate misuse, or to protect users and the service.
6. Consent and choices
Buyers can choose whether to submit an enquiry and whether to consent to seller contact disclosure. Users may withdraw consent with reasonable notice, subject to data already required for completed transactions, dispute handling, fraud prevention, or legal obligations. Withdrawal may prevent BizAcquire from continuing the affected service.
7. Accuracy, access, correction and contact
Users should keep account and transaction data accurate. Requests to access or correct personal data, ask how it was used or disclosed, withdraw consent, or raise a privacy concern can be started through the privacy request form.
The designated Data Protection Officer is Ronald Ang. Privacy enquiries may be sent to ronald.ang@flowlab.works or to FLOWLABCO PTE. LTD. at 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051.
8. Security and retention
BizAcquire uses access controls, hashed passwords and session tokens, masked seller previews, rate limits, and server-side access records. No internet service is completely secure.
Unless a longer period is required for law, dispute resolution, fraud prevention or an ongoing transaction, we apply the following retention periods:
- Account profiles, listings and buyer enquiries are kept while the account or opportunity is active and for up to 24 months after closure or the user's last activity.
- Listing images are kept while the listing is active and for up to 90 days after rejection, withdrawal or deletion.
- Payment, refund, access, receipt and accounting records are kept for at least five years from the relevant year of assessment or for any longer period required by law.
- Email delivery records are kept for up to 90 days. Verification and reset codes expire after 15 minutes and are removed after expiry or use.
- Administrative security and audit records are kept for up to 12 months, except where they are needed for an active investigation or legal obligation.
- Google Analytics event data is retained for up to 14 months, subject to the user's consent choice.
At the end of the applicable period, information is deleted or anonymised where reasonably practicable.
9. Overseas processing
Some service providers may process data outside Singapore. Where personal data is transferred outside Singapore, FLOWLABCO PTE. LTD. will take reasonable steps to ensure that the recipient provides a standard of protection comparable to the protection required under Singapore's Personal Data Protection Act.
10. Analytics and cookies
With your permission, BizAcquire uses Google Analytics to understand visits, traffic sources, device and browser information, page interactions, and general usage patterns. We configure analytics without advertising signals or ad personalisation and do not deliberately send names, contact details, enquiry responses, or payment details to Google Analytics. Google may process analytics data outside Singapore. You can decline analytics without affecting essential site functions or at any time.
11. Data incidents
BizAcquire will assess suspected data incidents, contain and remediate them, and make notifications where required. Users should promptly report suspected unauthorised account or data access to ronald.ang@flowlab.works.
12. Updates
We may update this notice as the service, providers, or legal requirements change. The current version and effective date will be posted here.
For general Singapore data protection information, see the Personal Data Protection Commission.