Welcome — Merlion Commerce Pte. Ltd.

Your PDPA operational readiness at a glance. All figures are computed deterministically from your records.

PrivacyOps SG provides operational decision-support only. It is not legal advice and does not certify compliance with the PDPA. A responsible person must review and confirm all decisions.

Readiness index

100 − weighted open gaps (capped per obligation)

27/ 100

At risk

12 open findings across your programme

Where you are losing points

Top obligation categories by deducted points

Protection−20 / 20 (2)

Consent−12 / 12 (2)

Purpose Limitation−10 / 12 (1)

Transfer Limitation−10 / 14 (1)

Retention Limitation−9 / 12 (3)

Processing activities

Open findings

Open incidents

Priority findings

Highest-severity open gaps first

View all

CriticalProtect sensitive data in "Payment processing"

This activity processes sensitive data but has no documented storage or protection measures.

HighAdd a transfer safeguard for "Order fulfilment & delivery"

This activity transfers data overseas (Malaysia) without a documented safeguard.

HighConfirm consent for "Email marketing campaigns"

This looks like a marketing activity but does not rely on consent.

HighRecord a lawful basis for "Loyalty programme analytics"

No lawful basis or consent record exists for this activity.

HighReview contract with Zendesk

Vendor "Zendesk" processes personal data without a recorded data processing agreement.

Incident response

Breach notification deadlines (Singapore time)

View all

Customer spreadsheet emailed to wrong recipientINC-2026-001

On track · target 24 Jul 2026 (2 days 2 hours left)