Privacy Policy

NNM Holdings is a professional services company based in Singapore. We offer three services: Business Consulting (business strategy, operational improvement and growth planning), Marketing Services (brand development, digital marketing and customer acquisition) and Loan Services (direct lending to incorporated companies and limited liability partnerships).

We are the organisation responsible for the personal data described in this policy. Our registered entity and address are: NNM Holdings PTE. LTD. (UEN 202601278M), 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051.

When you use the consultation form and send the email draft it creates, we receive exactly what you entered:

• Full name — used to address you in our reply.
• Company — used to identify the business the enquiry is about.
• Work email — used to reply and to keep a record of the enquiry.
• Service of interest — Business Consulting, Marketing Services, Loan Services, a combination, or a general enquiry — so the right people respond.
• Desired loan amount — only if your enquiry includes Loan Services: the range you select, so we can tell you quickly whether we can help.
• How can we help — the support you describe.

We also collect anything you volunteer when you reply to us by email or phone, such as details of your business and, for loan enquiries, turnover, trading history or the security you can offer.

When you visit the website, our hosting provider (Lovable) and its network provider (Cloudflare) automatically process technical information to deliver and protect the site, such as your IP address, browser type, the pages requested and the time of the request. See Analytics and cookies below.

We never ask for online banking logins, card PINs, or passwords, and we do not ask for NRIC or FIN numbers through this website. Please do not send them.

We use your personal data only for the following purposes:

• To respond to your enquiry and discuss the consulting, marketing or loan services you asked about.
• To scope and propose consulting or marketing work you ask us about.
• For Loan Services enquiries, to tell you whether funding of the size you asked for is something we can pursue, assess your business in principle against our lending criteria, and prepare and discuss indicative terms.
• To contact you about the enquiry you raised, including to ask for the further information a decision needs.
• To keep a record that you approached us, and of what you were told and agreed.
• To comply with legal, regulatory, accounting and anti-money-laundering obligations that apply to us.

We do not use your details for unrelated marketing, and we do not make automated decisions about your business from this form alone.

When you send us your enquiry, you consent to us collecting, using and disclosing your personal data for the purposes set out above. If you send us information about another person, such as a director or a co-applicant, please make sure they know and agree to that first.

You may withdraw your consent at any time by writing to us at jerome.g@nnmholdings.com. Withdrawing consent stops us from using your data going forwards, but it does not undo anything we have already done with it. In practice, withdrawal usually means we can no longer act on your enquiry.

We lend directly and do not pass loan enquiries to other lenders or brokers. We do not sell personal data. Your enquiry is processed by the service providers that run our email and host this website, only as needed to provide those services.

We may also disclose data where we are required to by law, a court, or a regulator.

We also use service providers to run our business: the email services that deliver and store enquiries, and the hosting provider that serves this website. They process data on our behalf to provide those services.

We do not sell your personal data to anyone, at any time.

When you complete the consultation form and choose "Open email draft", your device opens a pre-filled email in your own email app, addressed to jerome.g@nnmholdings.com, the inbox the NNM team works from. Nothing is sent until you press send in your email app. While the page is open, the form holds what you type only in your browser's memory; it is not sent to or saved by this website, and nothing you type is visible to other visitors. Once you send the email, your email provider and ours carry and store it.

Please think carefully before including highly sensitive material in the form — send financials only when we ask for them, and through the channel we agree with you at that point. Your own email provider will also handle the message you send. We never ask for banking logins, passwords or your NRIC/FIN through this website.

We keep enquiry records for 12 months after an enquiry closes, and then delete or anonymise them. Where a longer period is required by law, accounting rules, or an ongoing client or funding relationship, we keep only what that requires and for no longer than necessary.

If you ask us to delete your enquiry before then and we are able to, we will confirm once it is done.

You can ask us what personal data we hold about you, and ask us to correct anything you believe is wrong or out of date. Write to jerome.g@nnmholdings.com with "Data request" in the subject line, and tell us enough to identify your enquiry (your name and the email address you used).

We answer access requests as soon as reasonably possible and, in any case, within 30 days. If we need more time or a small administrative fee, we will tell you before we proceed. If we cannot correct something you ask us to, we will explain why and record your request alongside the data.

Your enquiry may be handled outside Singapore. The email service that delivers your enquiry to us may process and hold that data on servers located outside Singapore, our website host and its network provider may process technical visit data outside Singapore. Where personal data is transferred outside Singapore, we take steps to ensure it receives a standard of protection comparable to the PDPA.

We keep enquiry data within our team's email and document systems, limit access to the people who need it, and do not publish enquiry content anywhere. This website itself holds no enquiry records. We review these arrangements as our systems change.

No method of sending or storing information is completely secure. If a data breach occurs, we will assess it promptly. Where a breach is notifiable under the PDPA (for example, because it is likely to result in significant harm to the people affected, or is of a significant scale), we will notify the Personal Data Protection Commission within three calendar days of determining that it is notifiable, and notify affected individuals where the PDPA requires.

We do not add advertising trackers or social media pixels to this website. Our hosting provider, Lovable, adds a first-party visit statistics script that records page views, the referring page, browser language and type, and page-performance measurements. It uses a short-lived visit identifier (kept in a cookie or your browser's storage for about 30 minutes). It does not record what you type into the consultation form.

The hosting platform also sets cookies needed to deliver and protect the site, such as one that keeps your visit on the current version of the site and a Cloudflare security cookie used to tell people from automated traffic. The website itself may keep your scroll position in your browser's session storage so the back button works as expected.

If we add any other tool that collects data automatically, we will update this page first and ask for your consent where the law requires it.

We update this page when our practices change, and the "last updated" date at the top shows the current version. Material changes are noted here as well.