Privacy policy

1. What we collect

We collect personal data in two places on this website: the contact form, and the optional "email me this result" action on the free tools at /resources.

When you submit the contact form, we collect and store your name, your company name if you choose to provide it, your email address, the message you write, whether you selected a quote request or a scoping call, and the date and time of your submission. If you choose to provide them, we also store your phone number, the service you are asking about and your timeline.

To limit spam, we also store a scrambled (hashed) form of your IP address with each contact form submission and resource-tool email request. The hash cannot be turned back into your IP address. We use it only to count repeated submissions, and we delete it after two days.

The resource tools themselves collect nothing; every calculation runs in your browser. If you use a tool's "email me this result" action, we additionally collect and store your email address, the result you asked to be sent, which tool produced it, and the date and time of the request. If you leave that field empty, we receive no information about your use of the tool.

We do not ask for payment details, identification numbers or other sensitive personal data, and neither the contact form nor the resource tools accept them. Please do not include such information in the contact form's message field.

2. What we do not collect

This website sets no cookies. There is no advertising and no behavioural tracking. We use Cloudflare Web Analytics to count page views and to measure page speed. It is not used for visitors in the European Union. It sets no cookies, does not store your IP address, and does not identify you. We do not build visitor profiles and we do not track you across other websites.

Fonts are served from our own servers rather than a third party, so loading a page on this site does not disclose your IP address to any outside provider.

Your browser stores one small item during your visit to remember your scroll position. If you follow the link from a resource tool to the contact form, it also stores that tool's result so the form can include it in your message. Both items are deleted when you close the tab, and neither contains personal data.

If any of this changes, we will update this policy first.

3. Why we collect it

We use a contact form submission to respond to your enquiry and, if it progresses, to scope and discuss the work you are asking about.

We use a resource-tool email request to send you the result you asked for. It also tells our team which tool was used. If the result suggests that a conversation would be useful, we then already know what you are working with before you call us.

We will not use your details for marketing, and we will not add you to any mailing list.

4. Consent

By submitting the contact form, or by using a resource tool's "email me this result" action, you consent to us collecting and using your personal data for the purpose described above.

You may withdraw your consent at any time by contacting our Data Protection Officer using the details in section 9. On withdrawal we will stop using your data and will delete it, unless we are required to keep it by law. Withdrawing consent may mean we can no longer respond to an enquiry already in progress.

5. Who we share it with

We do not sell your personal data, and we do not share it with third parties for their own purposes. Two providers process data on our behalf:

• Cloudflare, which hosts this website and stores contact form submissions and resource-tool email requests. Cloudflare operates a global network, so your data may be processed on servers outside Singapore.
• Resend, which delivers the emails a contact form submission or a resource-tool email request generates: the notification to us, and, for a resource tool, the copy sent back to you.

The contact form and the resource-tool email action use Cloudflare Turnstile to check that a person, not a program, is submitting them. Turnstile processes technical data about your browser and connection for that check only.

Where personal data is transferred outside Singapore, we take reasonable steps to ensure it receives a standard of protection comparable to the PDPA, as required by the Transfer Limitation Obligation. We may also disclose personal data where required to do so by law, or by a court or regulator.

6. How long we keep it

We keep contact form submissions and resource-tool email requests for 24 months from the date of your submission, after which they are deleted.

If your enquiry becomes a project, the related records are kept for the duration of the engagement and for as long afterwards as we are required to keep business records.

7. How we protect it

Submissions are transmitted over an encrypted connection and stored in an access controlled database. Access is limited to the people who need it to respond to enquiries.

No method of transmission or storage is completely secure. We take reasonable steps to protect your data, but we cannot guarantee absolute security.

8. Your rights

Under the PDPA you may:

• Request access to the personal data we hold about you, and information on how it has been used or disclosed in the past year.
• Request correction of any personal data that is inaccurate or incomplete.
• Withdraw consent to our continued use of your data, as described in section 4.

We will respond as soon as reasonably possible. We may need to verify your identity before acting on a request, and a reasonable fee may apply to access requests, as permitted by the PDPA.

9. Contacting us

Our Data Protection Officer is responsible for how we handle personal data. To make a request, withdraw consent, or raise a concern:

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission of Singapore at pdpc.gov.sg.

10. Changes to this policy

We may update this policy. When we do, we will change the date at the top. If the change is significant, such as introducing analytics or a new use of your data, we will state the change clearly, in addition to updating the date.