Privacy policy

1. What we collect

We collect personal data in only one place on this website: the contact form. When you submit it, we collect and store your name, your company name if you choose to provide it, your email address, the message you write, whether you selected a quote request or a scoping call, and the date and time of your submission.

We do not ask for, and the form does not accept, payment details, identification numbers, or other sensitive personal data. Please do not include such information in the message field.

2. What we do not collect

This website sets no cookies. There is no advertising, no behavioural tracking, and no analytics. We do not build visitor profiles and we do not track you across other websites.

Fonts are served from our own servers rather than a third party, so loading a page on this site does not disclose your IP address to any outside provider.

Your browser stores one small item during your visit to remember your scroll position. It is deleted when you close the tab and it contains no personal data.

If we introduce analytics in future, we will update this policy before doing so.

3. Why we collect it

We use what you submit for one purpose: to respond to your enquiry and, if it progresses, to scope and discuss the work you are asking about.

We will not use your details for marketing, and we will not add you to any mailing list.

4. Consent

By submitting the contact form you consent to us collecting and using your personal data for the purpose described above.

You may withdraw your consent at any time by contacting our Data Protection Officer using the details in section 9. On withdrawal we will stop using your data and will delete it, unless we are required to keep it by law. Withdrawing consent may mean we can no longer respond to an enquiry already in progress.

5. Who we share it with

We do not sell your personal data, and we do not share it with third parties for their own purposes. One provider processes data on our behalf:

• Cloudflare, which hosts this website and stores contact form submissions. Cloudflare operates a global network, so your data may be processed on servers outside Singapore.

Where personal data is transferred outside Singapore, we take reasonable steps to ensure it receives a standard of protection comparable to the PDPA, as required by the Transfer Limitation Obligation. We may also disclose personal data where required to do so by law, or by a court or regulator.

6. How long we keep it

We keep contact form submissions for 24 months from the date of your enquiry, after which they are deleted.

If your enquiry becomes a project, the related records are kept for the duration of the engagement and for as long afterwards as we are required to keep business records.

7. How we protect it

Submissions are transmitted over an encrypted connection and stored in an access controlled database. Access is limited to the people who need it to respond to enquiries.

No method of transmission or storage is completely secure. We take reasonable steps to protect your data, but we cannot guarantee absolute security.

8. Your rights

Under the PDPA you may:

• Request access to the personal data we hold about you, and information on how it has been used or disclosed in the past year.
• Request correction of any personal data that is inaccurate or incomplete.
• Withdraw consent to our continued use of your data, as described in section 4.

We will respond as soon as reasonably possible. We may need to verify your identity before acting on a request, and a reasonable fee may apply to access requests, as permitted by the PDPA.

9. Contacting us

Our Data Protection Officer is responsible for how we handle personal data. To make a request, withdraw consent, or raise a concern:

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission of Singapore at pdpc.gov.sg.

10. Changes to this policy

We may update this policy. When we do, we will change the date at the top. If the change is significant, such as introducing analytics or a new use of your data, we will make that clear rather than relying on the updated date alone.