Privacy Policy

1. Who We Are

CONSULTING.AI TECH SOLUTIONS PTE. LTD.
UEN: 202631699C
101 Cecil Street, #14-12 Tong Eng Building, Singapore 069533
Email: info@consulting-ai.tech

2. Data Protection Officer (DPO)

In compliance with the PDPA, we have appointed an outsourced Data Protection Officer registered with the Personal Data Protection Commission (PDPC) Singapore.

3. Personal Data

"Customer" means an individual who has contacted us to find out more about our services, or who has or may enter into a contract with us. "Personal data" means data about a customer who can be identified from that data alone or in combination with other information we have access to.

Depending on the nature of your interaction with us, personal data we may collect includes: name, address, email address, telephone number, nationality, gender, date of birth, marital status, photograph, employment information and financial information.

4. Collection, Use and Disclosure of Personal Data

We generally do not collect your personal data unless you provide it voluntarily after being notified of the purposes and providing consent, or where collection without consent is permitted or required by the PDPA or other laws.

We may collect and use your personal data for the following purposes:

1. Performing obligations in connection with the provision of goods and/or services requested by you;
2. Verifying your identity;
3. Responding to, handling and processing queries, requests, applications, complaints and feedback;
4. Managing your relationship with us;
5. Processing payment or credit transactions;
6. Complying with applicable laws, regulations, codes of practice, guidelines or rules, or assisting in law enforcement and investigations by governmental and/or regulatory authorities;
7. Any other purposes for which you have provided the information;
8. Transmitting to third-party service providers, agents and relevant governmental and/or regulatory authorities, whether in Singapore or abroad, for the above-mentioned purposes; and
9. Any other incidental business purposes related to or in connection with the above.

We may disclose your personal data to third-party service providers, agents and other organisations engaged to perform any of the functions listed above. The purposes listed above may continue to apply for a reasonable period after your relationship with us has been terminated or altered.

5. Deemed Consent by Notification

We may collect, use or disclose existing personal data for secondary purposes that differ from the primary purpose for which it was originally collected. Where we intend to rely on deemed consent by notification, we will notify you through appropriate means of communication.

Before relying on deemed consent by notification, we will assess and determine that the collection, use and disclosure of the personal data will not likely have an adverse effect on you. You will be given a reasonable period to opt out. After the opt-out period lapses, you may still withdraw your consent at any time by notifying us in writing.

6. Legitimate Interests Exception

In compliance with the PDPA, we may collect, use or disclose your personal data without your consent for our legitimate interests, having assessed that the legitimate interests outweigh any adverse effect on the individual. We will do so for the following purposes:

• Fraud detection and prevention;
• Detection and prevention of misuse of services;
• Network analysis to prevent fraud and financial crime, and to perform credit analysis; and
• Collection and use of personal data on company-issued devices to prevent data loss.

These purposes may continue to apply for a reasonable period after your relationship with us has been terminated or altered.

7. Third-Party Processors

We use the following third-party services that may process your personal data on our behalf:

• Algebra Private Limited — outsourced DPO service provider.
• Formspree — contact form submissions. See Formspree Privacy Policy.
• Calendly — meeting scheduling. See Calendly Privacy Policy.
• Hostinger — website hosting. See Hostinger Privacy Policy.
• Google (Analytics / Search Console) — website analytics. See Google Privacy Policy.

We do not sell your personal data to third parties or share it for marketing purposes.

8. Withdrawing Your Consent

The consent you provide will remain valid until withdrawn by you in writing. You may withdraw consent by submitting your request in writing or via email to our Data Protection Officer at the contact details in Section 2.

Upon receipt of your request, we will process it and notify you of the consequences within ninety (90) business days. Withdrawing consent does not affect our right to continue to collect, use and disclose personal data where permitted or required by applicable laws.

9. Access to and Correction of Personal Data

You may submit a request to access a copy of the personal data we hold about you, or to correct or update any of your personal data, by writing to or emailing our Data Protection Officer at the contact details in Section 2.

Please note that a reasonable fee may be charged for an access request. If so, we will inform you before processing your request. We will respond within ninety (90) business days. Should we not be able to respond within thirty (30) days of receiving your request, we will inform you in writing of the expected timeline.

10. Accuracy of Personal Data

We rely on personal data provided by you or your authorised representative. To ensure your personal data is current, complete and accurate, please inform our Data Protection Officer of any changes in writing or via email at the contact details in Section 2.

11. Protection of Personal Data

To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have introduced appropriate administrative, physical and technical measures, including:

• Minimised collection of personal data;
• Authentication and access controls (good password practices, need-to-basis data disclosure);
• Encryption of data and data anonymisation;
• Up-to-date antivirus protection and regular patching of operating systems and software;
• Secure erasure of storage media before disposal;
• Web security measures against risks;
• One-time password (OTP), two-factor (2FA) and multi-factor authentication (MFA); and
• Regular security reviews and testing.

No method of transmission over the Internet is completely secure. While we cannot guarantee security, we are constantly reviewing and enhancing our information security measures.

12. Retention of Personal Data

We may retain your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws. We will cease retention or remove identifying means as soon as retention no longer serves the original purpose and is no longer necessary for legal or business purposes.

13. Transfers of Personal Data Outside Singapore

We generally do not transfer your personal data to countries outside of Singapore. However, if we do so, we will obtain your consent and take steps to ensure your personal data continues to receive a standard of protection at least comparable to that provided under the PDPA.

14. Cookies

Our website uses minimal cookies: strictly necessary cookies required for basic website functionality, and analytics cookies to understand how visitors interact with our website. We do not use advertising or tracking cookies. You may opt out of analytics cookies by adjusting your browser settings.

15. Changes to This Notice

We may revise this Notice from time to time without prior notice. You may determine if any revision has taken place by referring to the date on which this Notice was last updated. Your continued use of our services constitutes your acknowledgement and acceptance of such changes.

16. Contact

For any enquiries, feedback or requests relating to your personal data, please contact our Data Protection Officer:

Or reach us directly: info@consulting-ai.tech