Privacy Policy

1. Who we are

URMEI Holdings Pte. Ltd. (“URMEI”, “we”, “us”) is a company incorporated in Singapore. We are building a B2B2C infrastructure platform for beauty brands entering the Asia-Pacific market and for the creators who work with them.

This policy explains how we handle personal data collected through this pre-launch website. It is written to meet our obligations under Singapore’s Personal Data Protection Act 2012 (the “PDPA”). We are the data controller for the information described below.

2. What we collect

This site has one form. We collect only what that form asks for, plus a small amount of technical context that helps us understand where an enquiry came from and keep the form free of spam.

Information you give us

• Name So we know who we are replying to.
• Email address The only channel we use to respond.
• Company Brand enquiries only, so we can look you up before we reply.
• Social handles Creator enquiries only - your Instagram and/or TikTok handle, so we can see the work you already do.
• Whether you are a brand or a creator Set by the tab you submit under.

Information collected automatically with your submission

• Referral context The page address you submitted from, which button you started from, and any campaign tags (UTM parameters) in the link you arrived on.
• Anti-spam signals The time the page loaded, a hidden field that only automated bots fill in, and a one-time verification token from Cloudflare Turnstile.
• Submission timestamp Recorded against your entry.

We do not ask for, and you should not send us, sensitive personal data - identification numbers, financial details, health information or anything similar. We do not buy personal data from third parties, and we do not build profiles of you from sources outside this form.

3. Why we collect it

We use your information for a short, specific list of purposes:

• To reply to your enquiry and continue that conversation.
• To assess whether URMEI is a fit for your brand or your creator work, and to prepare for onboarding when the platform launches.
• To tell you when URMEI goes live in your market, and to send occasional updates about the launch. Every such message includes a way to opt out.
• To understand, in aggregate, which channels and campaigns bring people to this site.
• To keep the form secure and free of automated abuse.
• To meet legal, accounting or regulatory obligations where they apply.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

4. Consent and withdrawal

By submitting the form you consent to URMEI collecting, using and disclosing your personal data for the purposes set out in section 3. You are not obliged to give us anything - but without a name and an email address we cannot reply.

You may withdraw consent at any time by emailing social@urmei.com. We will act on a withdrawal within a reasonable period and confirm when it is done. Withdrawing consent does not affect anything we did lawfully before that point, and we may still need to retain limited records where the law requires it.

5. Who we share it with

Your submission is handled by a small number of service providers acting on our instructions. They may process your data only to provide their service to us.

• Google (Google Workspace & Apps Script)

  Receives the form submission and stores it in a private Google Sheet that only authorised URMEI staff can open.

• Cloudflare (Turnstile)

  Runs the human-verification check on the form. Cloudflare processes technical signals from your browser to issue a verification token. Turnstile does not use tracking cookies for advertising.

• Our email provider

  Carries our reply to you and any launch notifications you have consented to.

We may also disclose personal data where we are required to by law, by a court, or by a regulator; or in connection with a merger, acquisition or restructuring, in which case the recipient remains bound by this policy.

6. Transfers outside Singapore

The providers above operate global infrastructure, so your data may be stored or processed outside Singapore. Where that happens we take reasonable steps, as required by section 26 of the PDPA, to ensure the recipient is bound to a standard of protection comparable to the PDPA - ordinarily through the data-protection terms in our contracts with them.

7. How long we keep it

We keep enquiry records for as long as there is a business reason to - while we are in conversation with you, and while you remain a prospective brand or creator partner.

If an enquiry goes nowhere, we delete or anonymise the record within 24 months of your last contact with us, unless you have asked to stay on the launch list or the law requires us to keep it longer. If you resubmit the form with the same email address, we update your existing row rather than create a second one.

8. How we protect it

Submissions travel over an encrypted HTTPS connection and are stored in an access-controlled Google Sheet. Access is limited to URMEI staff who need it, on accounts protected by two-factor authentication. Verification secrets are held server-side and are never exposed in this website’s code.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach occurs that is likely to result in significant harm, we will notify you and the Personal Data Protection Commission as required by law.

9. Cookies and similar technology

This pre-launch site does not set advertising or analytics cookies, and it does not track you across other websites. Cloudflare Turnstile may store a short-lived token in your browser purely to complete the verification check. Campaign tags in a link you click are read from the page address at the moment you submit the form - they are not stored on your device.

10. Your rights

Under the PDPA you may ask us to:

• Tell you what personal data we hold about you and how we have used it in the past year.
• Correct anything that is inaccurate or incomplete.
• Withdraw your consent, and stop sending you launch updates.
• Delete your record where we have no continuing legal or business need for it.

Write to social@urmei.com and we will respond within 30 days. If we need longer, we will tell you why and when to expect an answer. We may ask you to confirm your identity first. If you are not satisfied with how we have handled your request, you may raise it with the Personal Data Protection Commission of Singapore.

11. Children

This site is aimed at businesses and at creators working professionally. It is not intended for anyone under 18, and we do not knowingly collect their personal data. If you believe a minor has submitted the form, contact us and we will remove the record.

12. Changes to this policy

URMEI is pre-launch, and this policy will grow as the platform does. When we change it we update the date at the top of this page. If a change materially affects how we use data you have already given us, we will contact you directly before it takes effect.

13. Contact us