Privacy Policy

Last updated: 23 July 2026

1. Who We Are

This website (umaryusof.com) is operated by Umar Yusof. References to "we", "us", or "our" in this policy refer to Umar Yusof and Lumora Pte. Ltd.

2. Information We Collect

We collect the following personal data when you interact with our services:

• Contact information: Name, email address, phone number, provided when you fill in a contact form, lead form, or reach out via WhatsApp or Telegram.
• Financial goals: Information you voluntarily share about your financial situation, goals, or preferences during consultations or via forms.
• Usage data: Pages visited, time on site, and general browsing behaviour collected via cookies and analytics tools.
• Social media data: Information from your public LinkedIn or Facebook profile if you connect with us on those platforms.

3. How We Use Your Information

We use your personal data to:

• Respond to your enquiries and provide financial advisory services
• Send relevant educational content, guides, and resources you have requested
• Follow up on conversations you have initiated
• Improve our website and services
• Comply with regulatory obligations under the Monetary Authority of Singapore (MAS)

We will never sell your personal data to third parties.

4. Facebook Lead Ads

If you submit your information through a Facebook or Instagram lead form, we receive the data you provided (such as name, phone number, email, and responses to custom questions). This data is used solely to follow up on your enquiry and provide relevant financial advisory services. By submitting a lead form, you consent to us contacting you via the channels you provided.

5. Third-Party Services

We use the following third-party services to operate our business:

• Meta (Facebook/Instagram): Advertising and lead generation
• Notion: Client relationship management
• Telegram: Secure communication
• WhatsApp Business: Client communication
• Google Cloud: Website and application hosting
• Stripe: Payment processing (where applicable)
• TikTok: Content publishing via the TikTok Content Posting API (see Section 5a below)

Each service operates under its own privacy policy. We only share the minimum data necessary with these services.

5a. TikTok Content Posting Tool

We use a personal content scheduling tool that connects to TikTok via the official TikTok Content Posting API. This tool is used solely to publish financial education videos to the account owner's own TikTok profile.

• Data accessed: Basic account information (username, display name) and the ability to upload and publish video content on behalf of the account owner.
• Data collected: No personal data belonging to TikTok users or third parties is collected, stored, or processed through this tool.
• Token storage: OAuth access tokens are stored securely in our server environment and are used only to authenticate publishing requests. Tokens are never shared with third parties.
• Scope of access: The tool requests only the permissions required to upload and publish video content (video.upload, video.publish, user.info.basic).

To revoke access, you can disconnect the app at any time via TikTok Settings > Security > Manage App Permissions.

6. Data Retention

We retain your personal data for as long as necessary to provide our services or as required by applicable regulations. You may request deletion of your data at any time by contacting us.

7. Your Rights

Under the Personal Data Protection Act 2012 (PDPA) of Singapore, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent for us to use your data
• Request deletion of your data

To exercise any of these rights, contact us at the details below.

8. Cookies

Our website uses cookies to improve your browsing experience and to collect anonymous analytics. You can disable cookies through your browser settings, though this may affect the functionality of certain features.

9. Security

We take reasonable measures to protect your personal data from unauthorised access, loss, or misuse. All data transmissions are encrypted using industry-standard SSL/TLS protocols.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

11. Contact

If you have any questions about this privacy policy or your personal data, contact us at:

Umar Yusof
Email: umar@umaryusof.com
Website: umaryusof.com