1. Data We Collect
We collect personal data in the following circumstances:
- Contact enquiries. When you submit an enquiry via our website contact form, we collect your name, email address, phone number (if provided), company name (if provided) and the content of your message.
- Engagement correspondence. When you enter into or discuss an engagement with us, we may hold your name, business contact details and correspondence relevant to scoping and delivery.
- Website analytics. We collect anonymised usage data (pages visited, session duration, device type, approximate location) through analytics tools to understand how our site is used. This data does not identify you personally.
- Cookie data. Cookies and similar technologies are used as described in our Cookie Policy.
2. How We Use Personal Data
- Responding to your enquiries and assessing whether our services are suitable for your needs
- Scoping, delivering and administering consulting engagements
- Sending engagement-related communications (scope confirmations, deliverable reviews, invoices)
- Maintaining records required for business administration and applicable legal obligations
- Improving our website based on aggregated, anonymised analytics
We do not use personal data for unsolicited marketing. We will only contact you about our services in direct response to an enquiry you have made.
3. Legal Basis for Processing
We process personal data on the following bases under the PDPA:
- Consent: when you voluntarily submit your details via our contact form or otherwise agree to be contacted
- Contractual necessity: where processing is necessary to perform or prepare an engagement agreement
- Legitimate interests: to operate and improve our business, provided those interests are not overridden by your rights
- Legal obligation: where retention or disclosure is required by Singapore law
4. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected:
- Enquiries that do not lead to an engagement: up to 12 months from last contact
- Engagement records: up to 7 years after engagement close, in line with Singapore accounting and legal requirements
- Analytics data: aggregated and anonymised; not subject to deletion timelines as it does not identify individuals
5. Sharing Personal Data
We do not sell personal data. We may share it with:
- Service providers: third-party platforms we use to operate our business (email hosting, analytics, document management), bound by data processing agreements
- Professional advisors: legal or accounting advisors, subject to professional confidentiality obligations
- Regulatory or legal authorities: where disclosure is required by applicable law or court order
We do not transfer personal data outside Singapore except where necessary to operate our service infrastructure, and only to countries or services providing adequate data protection.
6. Data Protection Measures
- Personal data is stored on access-controlled systems with encryption at rest and in transit (TLS/SSL)
- Access to personal data is limited to staff with a legitimate need for that access
- Third-party services are reviewed for their security and privacy standards before use
- In the event of a data breach affecting personal data, we will notify affected individuals and, where required, the Personal Data Protection Commission (PDPC) within the mandatory notification period
7. Cookies
Our website uses cookies to operate correctly and to understand how the site is used. Essential cookies cannot be disabled as they are necessary for the site to function. Analytics and preference cookies are optional and can be managed through our cookie consent controls. Full details are set out in our Cookie Policy.
8. Your Rights
Under the PDPA, you have the right to:
- Access: request a copy of personal data we hold about you
- Correction: request correction of inaccurate or incomplete personal data
- Withdrawal of consent: withdraw consent to data processing where consent is the basis for processing; this does not affect lawfulness of processing before withdrawal
- Portability: request transfer of your personal data in a commonly used machine-readable format, where technically feasible
- Complaint: lodge a complaint with the Personal Data Protection Commission at www.pdpc.gov.sg
To exercise any of these rights, write to us at [email protected]. We will respond within 30 days. We may request verification of identity before acting on a request.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing personal data.
10. Children
Our services are directed to business professionals and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by posting the revised policy on this page with an updated effective date. Continued use of our website after changes are posted constitutes acceptance of the revised policy.
12. Contact
For any questions or requests related to this Privacy Policy or your personal data: