Privacy Policy

1. Data We Collect

We collect personal data that you provide directly when using our website or engaging our services:

• Contact information: name, email address, phone number, and job title provided via our enquiry form or correspondence.
• Organisation details: the name and type of your organisation, relevant to scoping our services.
• Technical data: IP address, browser type, and pages visited, collected automatically via cookies and analytics tools (where consent has been given).
• Engagement data: information shared during service engagements, which may include professional background and organisational context.

We do not collect, process, or store patient health data through this website. Any clinical data encountered in service engagements is handled under separate, institution-specific data sharing agreements.

2. How We Use Personal Data

We process personal data for the following purposes:

• Responding to enquiries and providing information about our services
• Delivering the advisory or analytical services you have engaged us for
• Sending relevant updates or resources where you have consented to receive them
• Improving our website and understanding how it is used (where analytics cookies are accepted)
• Meeting our legal and regulatory obligations under Singapore law

Legal basis for processing

We rely on consent (for marketing communications and optional cookies), contractual necessity (to deliver our services), and legitimate interest (for responding to enquiries and improving our operations) as the legal bases for processing personal data.

Data retention

Contact enquiry data is retained for up to 24 months. Client engagement records are retained for seven years in accordance with Singapore's business record-keeping requirements. Analytics data is retained for 26 months in aggregate, anonymised form.

3. Data Sharing

We do not sell, rent, or trade personal data. We may share data with:

• Service providers: third-party tools used to operate our website and communications (email hosting, analytics), operating under data processing agreements.
• Legal requirements: when disclosure is required by Singapore law or a regulatory authority.
• Professional advisors: legal and accounting professionals bound by confidentiality obligations.

We do not share personal data with AI vendors or third-party commercial partners.

4. Data Protection Measures

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. These include:

• Encrypted data transmission (HTTPS) for all website communications
• Access controls restricting data access to authorised team members
• Regular review of data handling practices and third-party processors
• Breach notification procedures aligned with PDPC requirements

5. Cookies

We use essential cookies to operate the website and optional analytics cookies to understand usage patterns. You can manage your cookie preferences at any time through our Cookie Policy page. Essential cookies cannot be disabled as they are required for the site to function.

6. Your Rights Under Singapore's PDPA

As a data subject, you have the right to:

• Access: request a copy of personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Withdrawal of consent: withdraw consent to processing at any time (this will not affect processing carried out prior to withdrawal)
• Data portability: request your data in a structured, machine-readable format where technically feasible
• Erasure: request deletion of personal data where it is no longer necessary for the purposes it was collected

To exercise any of these rights, contact our data protection contact at [email protected]. We will respond within 30 days. If you believe your rights have not been honoured, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

8. Children's Privacy

Our website and services are directed at organisations and professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18.

9. Policy Changes

We may update this policy from time to time. Material changes will be communicated by posting a revised version on this page with an updated effective date. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

10. Contact

For data-related enquiries or to exercise your rights: