Privacy Policy

1. Data We Collect

We collect only what is necessary for the purposes described below. This includes:

• Contact data — name, email address, and phone number when you fill in our enquiry form or contact us directly.
• Usage data — anonymised information about how pages on our site are visited (page views, approximate location by country, browser type), collected via analytics cookies if you have consented.
• Communication records — emails and messages exchanged in connection with providing our services.
• Service-related business information — details about your business routines that you share with us during a consultation. This is treated as confidential and is not used for any purpose outside of delivering your service.

We do not collect payment card data directly — if invoicing is required, it is handled through a third-party invoicing service.

2. Legal Basis and Purpose

We process personal data on the following bases under the PDPA:

• Contractual necessity — to deliver services you have engaged us for and to communicate about your engagement.
• Consent — for analytics cookies and any optional marketing communications. You may withdraw consent at any time.
• Legitimate interest — to respond to enquiries submitted through our website and to maintain basic business records.

We retain contact data for up to 3 years from your last interaction with us. Service records are retained for up to 5 years for business and legal record-keeping purposes. Analytics data is retained for 14 months and then deleted.

3. How We Use Your Data

• To respond to enquiries and schedule consultations
• To deliver our services and provide written summaries and reports
• To send service-related communications (invoices, follow-up notes)
• To improve our website based on aggregate usage patterns (analytics, with consent only)
• To comply with Singapore legal and regulatory requirements

We do not sell personal data. We do not use personal data for automated decision-making or profiling.

4. Data Sharing

We share personal data only in the following limited circumstances:

• Service providers — cloud storage and email services used to run our business operations, under appropriate data processing agreements.
• Analytics — anonymised usage data may be processed by a third-party analytics provider if analytics cookies are accepted.
• Legal requirements — if required by Singapore law, a court order, or a government authority.

5. Data Protection Measures

• Data is stored on secure cloud services with encryption at rest and in transit
• Access to personal data is limited to team members who need it to perform their role
• We review our data handling practices periodically and update them as needed
• In the event of a data breach that may cause harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) in accordance with the PDPA

6. Cookies

We use essential cookies to keep the site working and, with your consent, analytics cookies to understand how it is used. You can manage your preferences at any time via our Cookie Policy page. We do not use advertising or tracking cookies.

7. Your Rights Under the PDPA

Under Singapore's PDPA, you have the right to:

• Access — request a copy of personal data we hold about you
• Correction — request that inaccurate or incomplete data be corrected
• Withdrawal of consent — withdraw consent for optional uses such as analytics at any time
• Erasure — request deletion of data we hold about you, subject to our legal retention obligations
• Portability — in certain circumstances, request that data be provided in a common machine-readable format

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission at pdpc.gov.sg.

8. Third-Party Links

Our website may link to external tools or resources. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before sharing any personal data with them.

9. Children

Our services are intended for business owners and are not directed at individuals under 18. We do not knowingly collect personal data from minors.

10. Changes to This Policy

If we make significant changes to this policy, we will update the date at the top of this page. Continued use of our site or services after a change constitutes acceptance of the updated policy.