Privacy Policy

Last Updated: December 2025

Introduction

Tessera Wealth is committed to protecting your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard data when you engage our digital asset management services or visit our website.

This policy applies to information gathered through our website, client consultations, service delivery, and ongoing communications. By using our services, you consent to the data practices described in this policy.

Information We Collect

Personal Identification Information

  • Full name, email address, phone number
  • Mailing address and citizenship information
  • Date of birth and identification documents when required
  • Professional information and employment details

Financial Information

  • Investment portfolio composition and asset allocation
  • Digital asset holdings, wallet addresses, and custody arrangements
  • Transaction history and trading activity where relevant
  • Income sources, liquidity requirements, and financial objectives
  • Tax residency status and reporting obligations

Technical and Usage Data

  • IP address, browser type, and device information
  • Pages visited, time spent, and navigation patterns
  • Cookies and similar tracking technologies (see Cookie Policy)
  • Communication records including emails and consultation notes

Collection Methods

We collect information directly from you through consultation forms, email communication, service agreements, and ongoing advisory interactions. Technical data is gathered automatically when you visit our website through cookies and analytics tools.

Legal Basis for Processing

We process your personal data under the following legal bases as recognized under Singapore's Personal Data Protection Act (PDPA):

Consent

You provide explicit consent when engaging our services or submitting information through our website. Consent may be withdrawn at any time subject to contractual obligations.

Contract Fulfillment

Processing necessary to perform advisory services, deliver strategy documents, conduct security audits, and fulfill our contractual obligations to clients.

Legitimate Interest

Improving our services, preventing fraud, ensuring security, and maintaining business operations where such processing does not override your privacy rights.

Legal Obligation

Compliance with Singapore regulatory requirements, tax reporting obligations, anti-money laundering regulations, and lawful requests from authorities.

How We Use Your Information

Service Provision

  • Conducting suitability assessments and strategy development
  • Performing technical security audits and vulnerability analysis
  • Providing personalized advisory recommendations
  • Delivering written documentation and implementation guidance

Communication

  • Responding to inquiries and scheduling consultations
  • Sending service updates and relevant regulatory information
  • Providing follow-up support within service scope
  • Coordinating with your other advisors when authorized

Improvement and Security

  • Analyzing service effectiveness and client satisfaction
  • Enhancing our methodology and documentation quality
  • Detecting and preventing fraud or unauthorized access
  • Maintaining secure communication channels

Legal Compliance

  • Meeting Singapore regulatory reporting requirements
  • Complying with anti-money laundering obligations
  • Responding to lawful requests from authorities
  • Maintaining records as required by law

Data Retention

We retain personal and financial information for different periods based on data type and legal requirements:

Active Client Data

Retained for duration of relationship plus seven years following final service delivery for potential follow-up needs and regulatory compliance.

Financial Records

Maintained for seven years from service completion as required by Singapore tax and financial services regulations.

Communication Records

Email correspondence and consultation notes kept for five years to support potential inquiries or disputes.

Website Analytics

Aggregate usage data retained indefinitely; individual tracking data deleted after 24 months unless consent extended.

When retention periods expire, we securely delete or anonymize data unless ongoing storage is required by law or legitimate business needs.

Data Protection and Security

We implement comprehensive security measures to protect your information from unauthorized access, disclosure, alteration, or destruction:

Technical Safeguards

  • End-to-end encryption for sensitive financial data transmission
  • Secure socket layer (SSL) technology for website communications
  • Encrypted storage for client documentation and records
  • Regular security audits and vulnerability assessments
  • Multi-factor authentication for internal systems access

Administrative Controls

  • Limited data access based on role necessity
  • Confidentiality agreements for all team members
  • Regular privacy and security training programs
  • Documented data handling procedures and protocols

Breach Response

In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by Singapore's PDPA within 72 hours of discovery. Notification will include the nature of the breach, affected data types, and remedial actions taken.

Your Rights

Under Singapore's Personal Data Protection Act, you have the following rights regarding your personal information:

Right to Access

Request copies of personal data we hold about you, including financial records and consultation notes. Response provided within 30 days of verified request.

Right to Rectification

Request correction of inaccurate or incomplete information. We will update records promptly and notify any third parties who received the data.

Right to Erasure

Request deletion of personal data when no longer necessary for original purpose, subject to legal retention requirements and contractual obligations.

Right to Restrict Processing

Request limitation of data processing in specific circumstances, such as during accuracy verification or pending resolution of legitimate interest objections.

Right to Data Portability

Receive your personal data in structured, commonly used format for transfer to another service provider where technically feasible.

Right to Object

Object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless compelling legitimate grounds exist.

Right to Withdraw Consent

Withdraw previously given consent at any time, though this does not affect lawfulness of processing conducted before withdrawal.

To exercise any of these rights, contact our privacy officer at [email protected]. We will respond to verified requests within 30 days.

Third-Party Services

We work with limited third-party service providers who may access your information in the course of supporting our operations:

Analytics Providers

Google Analytics for website usage analysis. Data processed anonymously where possible. Privacy policy: policies.google.com/privacy

Communication Tools

Email service providers and video conferencing platforms for client communication. All providers selected for PDPA compliance and appropriate security measures.

Hosting Services

Singapore-based servers for website and document storage. Providers maintain ISO 27001 certification and appropriate data protection controls.

All third-party processors are bound by data protection agreements ensuring Singapore PDPA compliance. We do not sell personal information to third parties under any circumstances.

International Data Transfers

We primarily store and process data within Singapore. When international transfer is necessary (such as cloud service providers with global infrastructure), we ensure adequate safeguards through:

  • Standard contractual clauses approved by Singapore authorities
  • Provider certification under recognized data protection frameworks
  • Explicit consent for transfers where required by law
  • Assessment of destination country's data protection adequacy

Cookies and Tracking

Our website uses cookies and similar technologies to enhance user experience and analyze site usage. For detailed information about cookie types, purposes, and management options, please review our Cookie Policy.

You can control cookie preferences through browser settings or our cookie management tool. Note that disabling certain cookies may limit website functionality.

Policy Updates

We review and update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated through:

  • Email notification to active clients
  • Prominent website notice for 30 days
  • Updated "Last Updated" date at policy beginning

Continued use of our services following notification constitutes acceptance of updated terms. Significant changes requiring new consent will be explicitly requested.

Contact Information

For privacy-related questions, data access requests, or concerns about how your information is handled:

Privacy Officer - Tessera Wealth

Email: [email protected]

Phone: +65 6512 9847

Address: 168 Robinson Road, #14-09 Capital Tower, Singapore 068912

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with Singapore's Personal Data Protection Commission at pdpc.gov.sg.