Privacy Policy

Information You Provide Directly

When you contact us through our website or engage our services, you may provide:

• • Name and contact information (email address, phone number)
• • Company name and business information
• • Details about your inquiry or requirements
• • Any other information you choose to share with us

Information Collected Automatically

When you visit our website, we may automatically collect:

• • IP address and device information
• • Browser type and version
• • Pages visited and time spent on our website
• • Referring website or source
• • Information collected through cookies (see our Cookie Policy for details)

Legal Basis for Data Processing

We process your personal data based on:

• • Your consent when you submit information through our website
• • Performance of a contract when you engage our services
• • Legitimate interests in operating and improving our business
• • Legal obligations under applicable regulations

Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact inquiries are typically retained for two years unless you request earlier deletion. Client records are maintained in accordance with professional accounting standards and applicable regulatory requirements, typically for seven years following the end of an engagement.

Service Delivery and Communication

We use your information to respond to your inquiries, provide requested services, communicate about your engagement, and send relevant updates about our services. All communications are directly related to your inquiry or our professional relationship.

Data Sharing with Third Parties

We do not sell your personal data. We may share information with:

• • Service providers who assist with website hosting, analytics, or business operations (under strict confidentiality agreements)
• • Professional advisors when necessary for service delivery
• • Regulatory authorities when required by law
• • Third parties with your explicit consent

Marketing Communications

We may occasionally send information about our services if you have expressed interest or engaged with us previously. You can opt out of marketing communications at any time by contacting us. Service-related communications necessary for our professional relationship will continue as required.

Analytics and Website Improvement

We use analytics tools to understand how visitors use our website. This helps us improve navigation, content, and user experience. Analytics data is typically aggregated and anonymized, though some services may process IP addresses and other identifiers.

Security Measures

We implement appropriate technical and organizational measures to protect personal data:

• • Secure server infrastructure with encryption
• • Regular security assessments and updates
• • Restricted access to personal data on a need-to-know basis
• • Staff training on data protection practices
• • Secure backup and recovery procedures

Data Encryption and Storage

Personal data transmitted through our website is encrypted using industry-standard protocols. Data at rest is stored on secure servers with appropriate access controls. We use reputable service providers who maintain high security standards.

Access Controls and Monitoring

Access to personal data is restricted to authorized personnel who require it for legitimate business purposes. We maintain logs of data access and regularly review security measures to ensure ongoing protection.

Breach Notification Procedures

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law, typically within 72 hours of discovery.

Right to Access Personal Data

You have the right to request confirmation of whether we process your personal data and to obtain a copy of the data we hold about you. We will provide this information in a commonly used electronic format.

Right to Rectification and Erasure

You can request correction of inaccurate personal data or completion of incomplete data. You may also request deletion of your personal data where there is no compelling reason for its continued processing, subject to our legal and professional obligations.

Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used format and to transmit that data to another organization.

Right to Object to Processing

You may object to processing of your personal data for marketing purposes at any time. For other processing activities, you may object based on your particular situation, and we will assess whether our legitimate interests override your rights.

How to Exercise These Rights

To exercise any of these rights, please contact us using the information provided at the top of this page. We will respond to your request within one month, though complex requests may require additional time. We may need to verify your identity before processing certain requests.

International Data Transfers

Our operations are primarily based in Singapore. If we transfer personal data outside Singapore, we ensure appropriate safeguards are in place through contractual commitments or other legally approved mechanisms.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date. We encourage you to review this policy regularly.

Questions and Complaints

If you have questions about this Privacy Policy or wish to file a complaint about our data handling practices, please contact us using the information at the top of this page. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.