Singapore business website checklist: PDPA, PayNow and GST
What a Singapore business website needs in 2026: consent and a privacy notice under the PDPA, a Data Protection Officer contact, Do Not Call checks for marketing, GST-inclusive prices, PayNow at checkout and a mobile-first design.
By Syed Shahzaib Ali · 12 November 2026 · 2 min read
Singapore customers compare your website with the best they have used, and the Personal Data Protection Act (PDPA) sets clear expectations for how you handle their data. This is the checklist we use for Singapore builds. It is general guidance, not legal advice.
1. Collect personal data the PDPA way
The PDPA is built on a few plain ideas:
- Consent: people agree to the collection and use of their data.
- Purpose: you tell them why you are collecting it, and use it only for that.
- Protection: you take reasonable steps to keep it safe, and you do not keep it longer than you need.
On a website that means a short notice next to each form, a privacy policy page and no pre-ticked marketing boxes.
2. Name a Data Protection Officer contact
Organisations are expected to appoint a Data Protection Officer and make a business contact for them available. A dedicated email address in your privacy policy, such as [email protected], covers this for most small businesses.
3. Check Do Not Call before phone marketing
Singapore's Do Not Call rules cover marketing calls, texts and faxes to Singapore numbers. If you plan SMS or WhatsApp campaigns, check the registry or get clear consent first, and keep a record. Email marketing should always have a working unsubscribe link.
4. Show GST-inclusive prices
GST is 9%. GST-registered businesses show consumers prices that include GST, and tax invoices carry the GST registration number. If you are not registered, do not add GST to your prices.
5. Show your business details
Customers and partners look for your registered company name and UEN, a Singapore address and a way to reach you. They belong in the footer and on invoices.
6. Offer the payments Singapore uses
- Cards, Apple Pay and Google Pay
- PayNow
- GrabPay
- Instalments with Atome
We connect these through a Singapore payment provider and test a full order before launch.
7. Design for the phone first
Most browsing in Singapore happens on mobile, on very fast networks, so slowness stands out. Design the mobile layout first, keep pages light and make the main action (call, WhatsApp, book or buy) reachable with one thumb.
8. Plan for the region
Many Singapore businesses sell into Malaysia, Indonesia and beyond. Build the store with multi-currency pricing and room for more languages, so expansion is a setting and not a rebuild.
How we can help
We build Singapore websites and Shopify stores with PDPA-aware forms, PayNow at checkout and a mobile-first design. See our Singapore page or ask for a quote.
Frequently asked questions
- Does the PDPA apply to a small business?
- Yes. The PDPA applies to organisations of any size that collect, use or disclose personal data in Singapore. A contact form or a newsletter sign-up is enough to bring it into play.
- Do I need a Data Protection Officer?
- Organisations are expected to appoint at least one person as Data Protection Officer and make a business contact for them available. In a small company this is often a director or manager. Check the PDPC's guidance for your situation.
- Do I need to register for GST?
- Registration is compulsory once taxable turnover passes the IRAS threshold, which has long been S$1 million a year. Confirm the current figure with IRAS or your accountant.
- How much does a website cost with The Dev Studio?
- Our fixed packages are US$299, US$599 and US$1,599, with Shopify stores from US$999 and mobile apps from US$3,999. You get a written quote before any work starts.
See how we work with Singapore businesses
Websites, Shopify stores, SEO and apps for Singapore businesses at a fixed price.