TulusSG

Privacy Policy

Last updated: 24 October 2026

TulusSG is committed to handling personal information responsibly and respectfully.

TulusSG is a ground-up community initiative supporting migrant communities in Singapore. It is supported by Zan J Private Limited, which provides the legal and administrative framework for the initiative. The Share Your Story campaigns are run by TulusSG.

For the purposes of this Privacy Policy, Zan J Private Limited is the legal entity responsible for personal data collected, used or disclosed in connection with TulusSG’s activities. For the purposes of this Privacy Policy, references to “we”, “us” and “our” in relation to the collection, use, disclosure, storage and protection of personal data refer to Zan J Private Limited in its capacity as the responsible legal entity.

This Privacy Policy explains what information we may collect, why we collect it, how we use it, and the choices available to you.

1. Information we may collect

Depending on how you interact with TulusSG, we may collect information such as:

• your name;
• mobile or WhatsApp number;
• email address, where provided;
• nationality;
• preferred language;
• information you choose to share with us about your experiences, interests or circumstances;
• event or programme registration information;
• information relating to your participation in TulusSG activities;
• communications you send to us; and
• basic technical information generated when you use our website.

We only ask for information that is reasonably required for the relevant TulusSG activity, service, programme or enquiry.

2. Why we collect your information

We may use your personal information to:

• respond to your enquiries;
• process registrations and expressions of interest;
• contact you about TulusSG programmes, events or opportunities you have expressed interest in;
• administer community activities and participation;
• communicate important information relating to your registration or participation;
• understand the needs and interests of the communities we work with;
• improve TulusSG programmes, services and digital platforms;
• maintain appropriate records for operational, safety or administrative purposes; and
• comply with applicable legal or regulatory requirements.

We will not use your personal information for purposes that are materially different from those for which it was collected without an appropriate basis or further consent where required.

3. Share Your Story campaigns

TulusSG runs two Share Your Story campaigns: Share Your Story: Migrant Domestic Workers (registrations open 15 October to 15 November 2026) and Share Your Story: Migrant Workers (registrations open 26 October to 26 November 2026). Both work in the same way, in two stages. Each campaign’s registrations are kept in its own separate spreadsheet.

Stage 1: Registering your interest

If you fill in the registration form, we collect: your name, WhatsApp number, nationality and preferred language; the story you choose to share, if any; the social media accounts you choose to share, if any; your email address, only if you ask for a copy of your form; and your agreement, with the date and time, the version of the wording you agreed to, and the language the page was shown in. We also give your registration a reference number.

We use this information to review your submission, to understand the profile of campaign participants, and to contact you about the campaign you registered for. We do not use it for marketing or for other campaigns unless you separately agree.

Your registration can be seen only by people we authorise to manage the campaign, and by the service providers that run our registration system (see section 6). If your story includes personal or sensitive experiences, we treat it with particular care (see section 4).

During selection, we may speak with you by WhatsApp or telephone to learn more about your story. These conversations are not recorded for publication, and you do not need to sign anything to take part in them.

Registering does not mean you will be selected. It does not allow us to film, photograph or record you, or to publish your story or personal information.

Stage 2: If you are selected

We will explain the proposed production. We will ask for your separate written permission before filming, photography, audio or video recording, or any interview intended for media production or publication. The written permission will explain how your story, name, image, voice and recordings may be used, including how you wish to be identified, the intended publication channels, whether the content may remain available indefinitely, and the arrangements for withdrawing permission.

People or organisations working on the production for TulusSG will receive only the personal information reasonably necessary for their agreed work.

Copy of your form. If you ask for a copy, we first email a link to the address you give, to check that it is yours. We use that address only to send the copy.

Contact form

If you write to us through the contact form on our home page, we receive your name, email address, the role you choose and your message. We use them to reply to you and to follow up on what you asked about, for example volunteering or working with us. We do not add them to campaign registrations or use them for marketing. Section 7 explains how long we keep them.

4. Sensitive or personal stories

Some people may choose to share personal experiences with TulusSG. You should only provide information that you are comfortable sharing with us.

Please avoid submitting unnecessary confidential information such as passport numbers, FIN numbers, bank account information, passwords, detailed residential addresses, or other information that is not required for the relevant TulusSG activity.

Where personal stories are provided to us, we will treat them with appropriate care and use them only for the purpose for which they were submitted, unless further permission is obtained.

5. Who may access your information

Personal information may be accessed by authorised persons who require it for legitimate TulusSG purposes, which may include:

• members of the TulusSG team;
• authorised administrative personnel;
• technology or service providers supporting TulusSG systems;
• programme partners where this is necessary for the relevant activity and appropriate safeguards are in place; and
• professional advisers where reasonably necessary.

We do not sell your personal information. We do not publish your personal information merely because you submitted a registration or expression of interest.

6. Service providers and overseas processing

We use service providers to run our website, registration system and communications. They process personal information only on our instructions.

Providers that hold the information you give us:

• Google (Google Workspace and Google Cloud). Our registration server runs on Google Cloud in Singapore. Registrations are stored in private Google Sheets, a separate one for each campaign, and our emails, including the copy of your form if you ask for one, are sent and kept in Gmail.
• Google Apps Script. Delivers messages sent through the contact form on our home page to our email.
• WhatsApp (Meta). If we speak with you on WhatsApp, the conversation is handled by WhatsApp under its own terms.

Providers that only see that you visited our website: GitHub, which hosts the website, and Google Fonts, which supplies the lettering. Like any website, they receive technical information such as your device’s IP address. They do not receive your form answers. YouTube is covered in section 12A.

Some of this information may be stored or processed outside Singapore, in the providers’ data centres. Where this happens, we rely on our agreements with these providers, which include data protection and security obligations, to make sure the information receives a standard of protection comparable to that under Singapore’s Personal Data Protection Act.

We remain responsible for the personal information our providers process for us.

7. How long we keep information

We keep personal information only for as long as we need it for the reason we collected it, or as the law requires. Different records are kept for different periods. Nothing is deleted automatically: we review records by the dates below and delete what is no longer needed.

Each campaign’s registration spreadsheet keeps a version history that may hold earlier information, including information removed from the current spreadsheet. Access is restricted to authorised personnel. The version history is removed when the campaign’s spreadsheet is deleted after its review date.

Deleted information may remain for a short time in our service providers’ deleted-items folders or backups before it is removed.

8. Security

We take reasonable administrative and technical measures to protect personal information against unauthorised access, misuse, loss, disclosure and inappropriate alteration. In particular:

• registrations are kept in private spreadsheets that only authorised TulusSG accounts can open;
• information you send through our forms travels over encrypted connections (HTTPS);
• our registration server checks every form and limits repeated or automated submissions; and
• our forms do not ask for your FIN, passport or bank details.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

9. Your choices

You can contact us at admin@tulussg.com to:

• ask for access to the personal information we hold about you, and how it has been used or disclosed in the past year;
• ask us to correct information that is wrong;
• withdraw from a campaign, or ask us to stop contacting you;
• withdraw your consent to our use of your personal information, or a permission you have given;
• ask us to delete your personal information; or
• raise a concern about how we have handled your information.

Withdrawing from a campaign. If you withdraw from a campaign, we will stop your participation and related communications. Your personal information will be handled in accordance with the retention and deletion arrangements described in section 7.

Withdrawing consent. We tell you what this means for you, for example that you can no longer take part, and we stop collecting, using and disclosing your personal information for that purpose, unless the law requires or permits otherwise. Withdrawing does not affect what was done before your request.

Deletion. You may request deletion of your personal information. We will assess and act on your request in accordance with applicable law and our retention policy. Where information must be retained, we will explain what is retained and why.

Where your request concerns photographs, recordings or published media, we will also explain how it affects any separate media agreement you have signed. A media agreement does not take away your rights under data protection law.

You do not need your registration reference, but it helps us find your information. We may ask you to confirm who you are before acting on a request. We aim to acknowledge requests within five working days and to respond as soon as reasonably possible. If we cannot respond to an access or correction request within 30 days, we will tell you in writing when we expect to respond. We do not ordinarily charge for privacy-related requests; if the law permits a fee and we intend to charge it, we will tell you the amount before proceeding.

10. Children and young persons

We do not intend to collect personal information from children through forms designed for adult participants unless the relevant programme specifically involves children and appropriate consent arrangements have been established.

If you believe that personal information relating to a child has been submitted to us inappropriately, please contact us.

11. Photos, videos and media

TulusSG events and activities. We may take photos and videos at our events and activities to show what the community does, for example on our website and social media. We will let you know when photography or filming is taking place. If you have concerns about a photo or recording of you, please contact us at admin@tulussg.com. We will review your request and act in line with the law, any permission you gave, and the circumstances of the photo or recording. Where you withdraw consent that we rely on, we will comply with our legal obligations, including stopping further use where the law requires it.

Media productions, such as Share Your Story. These are different. We will only film, photograph, record or interview you for a media production with your separate written permission. That permission sets out how the content may be used and how withdrawal works. Section 3 explains the process.

12. External links

The TulusSG website may contain links to websites, platforms or services operated by other organisations. Their privacy practices are governed by their own policies, and we are not responsible for how those third-party services handle information.

12A. Our website, cookies and embedded content

Our website does not use advertising or analytics cookies, and our campaign pages set no cookies.

Our home page has a background music player provided by YouTube (Google). When you open the home page, your browser connects to YouTube to load the player; YouTube may receive your device’s IP address and set its own cookies, under Google’s privacy policy. The music starts when you first click or tap the page, and you can pause it with the music button. We do not receive any information about you from YouTube.

The language you choose on our pages is remembered in your browser so that the next page opens in the same language. It is not sent to us, except that the registration form records the language the page was shown in.

13. Changes to this policy

We may update this Privacy Policy from time to time as TulusSG develops its services, programmes or digital systems. The latest version will be published on the TulusSG website with its updated date.

14. Languages

Our pages are written in English and translated into Bahasa Indonesia, Filipino, Burmese, Bengali, Tamil and Simplified Chinese. We have tried to make every version say the same thing, and English is the version we use to prepare the translations. If a translation says something different, we will not rely on the difference to your disadvantage, and we will correct the translation.

This Privacy Policy is available in the same languages. If anything in it is unclear, you can ask us at admin@tulussg.com to explain it in your language.

15. Contact us

Zan J Private Limited (UEN: 202616105R) is responsible for personal-data matters under this Privacy Policy. If you have questions about this policy, or want to make a request under section 9, please contact our Data Protection Officer: