Trust & legal framework

Launch draft—not final legal advice. This page maps the protections and consumer disclosures the final Singapore-law documents should contain. A Singapore lawyer should review the operating entity, laboratory contracts, publication model, subscription flow and these terms before public launch.

1. Terms of use & membership

Name the contracting Singapore entity, UEN, registered address and customer-service contact.
Define free and paid content, recurring price, billing interval, renewal, cancellation effective date and any refund rule before checkout.
Grant members a personal, non-transferable licence; prohibit reposting, scraping, resale, altered extracts and sharing login credentials.
Reserve the right to correct or update reports when methods, formulations, batches or evidence change, while preserving a correction history.
State that educational content is not medical, diagnostic, treatment, legal or regulatory advice and is not a guarantee that a product is safe, suitable or risk-free.
Use a reasonable limitation-of-liability clause and exclusion of indirect loss, subject to non-excludable Singapore consumer rights. Do not promise “no liability”; exclusions cannot safely override fraud, wilful misconduct or mandatory law.
Singapore law and courts; fair suspension/termination process; severability; notices; force majeure; IP and acceptable use.

2. Privacy & security

Identify the Data Protection Officer and publish a business contact. Explain each purpose for collecting, using and disclosing data and how consent can be withdrawn.
Collect only what is necessary. Keep marketing consent separate from service fulfilment and record when/how consent was given.
Describe payment processors, analytics, email, laboratories, couriers and overseas hosting as recipients or data intermediaries; apply contractual protections and comparable protection for overseas transfers.
Publish access/correction and complaint procedures, retention periods by record type, and breach-notification handling.
Operational controls: managed payment checkout so card data never reaches the site; MFA for all admins; least-privilege access; encrypted transport/storage; private object storage; signed expiring report links; malware scanning; audit logs; tested backups; patching; vendor reviews; incident response.
Private client reports must be authorised server-side by account and order—not protected by an unlisted URL alone. Avoid sending reports as ordinary email attachments.

3. Testing & editorial policy

Separate public consumer investigations from private commissioned testing. State who selects and purchases samples, chain of custody, sample count, laboratory identity/accreditation where relevant, method, analytes, reporting/detection limits, date, batch and uncertainty/limitations.
A result belongs only to the sample tested. “Non-detect” means below the stated reporting limit—not absent. One batch must not be described as proof about an entire brand.
Predefine neutral rating criteria. Commercial partners cannot select the method, preview unpublished comparative results, suppress an adverse result or pay for a rating.
Before naming a brand adversely, use a documented factual review: verify identity and batch, consider confirmatory testing, give the brand a reasonable opportunity to respond, distinguish data from interpretation, and publish material corrections visibly.
Secure written rights from the commissioning party and laboratory governing ownership, quotation, reproduction and publication of reports. Do not assume a purchased test report can be published or used in advertising.
Maintain product evidence, purchase records, photographs, seals, custody logs, raw reports, communications, methodology and editorial approval records.

4. Affiliate, sponsorship & conflicts

Place a plain-language affiliate disclosure immediately beside recommendations and links—not only in the footer.
Label paid, gifted, sponsored and investor/adviser relationships prominently in each relevant post and social caption.
Keep laboratory conclusions independent of commissions. Publish criteria for “tested,” “reviewed,” “community favourite” and “partner offer” as different statuses.
Do not use “certified,” “approved,” “safe,” “toxin-free” or health-risk claims unless the exact claim is substantiated and legally appropriate.

5. Community-funded campaign terms

For each campaign state the objective, analytes, intended number of samples, target, closing date, platform/payment fees, use of excess funds and whether results will be public or member-only.
State what happens if a target is missed, a product is unavailable, the method changes or a laboratory rejects a sample; specify refunds or reallocation and obtain any required choice.
Make clear that support is not a charitable donation unless legally structured as such, buys no ownership, and cannot purchase a desired result.

6. Private testing agreement

Use an order-specific Statement of Work plus master terms: product, sample source, analytes, method, limits, price, payment, turnaround estimate, retest conditions and deliverables.
Client warrants lawful ownership/authority to submit the product and disclose necessary information; hazardous, illegal, leaking or unsuitable samples may be rejected.
Specify sample destruction/return, transport risk, confidentiality, permitted report use, lab/report IP, no third-party reliance and whether brand/publication use requires written approval.
No guarantee of regulatory compliance, safety, fitness, diagnosis or outcome. Interpretations are educational unless separately provided by a qualified professional.
Express opt-in is required before using a private result in aggregated/anonymised research or any public story; otherwise keep it private.

Version: launch framework, 24 September 2026. This is not a substitute for tailored legal advice.