Scope

This Policy applies to:

  • Visitors to our websites and digital properties.

  • Representatives of our corporate clients, suppliers and partners.

  • Individuals who contact us, subscribe to updates, or otherwise interact with us. Separate contractual terms may apply to specific services, including data processing agreements where we act as a processor on behalf of a client.

Personal data we collect

We may collect and process:

  • Identification and contact data: name, job title, employer, email, phone, postal address.

  • Transactional and service data: orders, support tickets, configuration requests, usage metadata.

  • Technical data: IP address, device identifiers, browser type, operating system, cookies and similar technologies.

  • Marketing preferences and communications content.

Purposes and lawful bases

We process personal data for:

  • Service provision and support: to provide, configure and maintain our services; to respond to enquiries and incidents.

  • Account administration and billing: to manage accounts, payments and renewals.

  • Security and fraud prevention: to protect systems, investigate suspicious activity and ensure service integrity.

  • Communications and marketing: to send service notices, updates and, with preferences, marketing communications.

  • Compliance and governance: audits, regulatory reporting, dispute resolution.

Consent and deemed consent for contractual necessity

We will obtain your consent where required by law, for example for certain marketing communications or optional cookies.

Data Processing and Storage Consent: You may be asked to confirm that you consent to the collection, use and disclosure of your personal data for specified purposes. You may withdraw consent at any time using the contact details below or the unsubscribe mechanisms provided; withdrawal does not affect the lawfulness of processing before withdrawal.

Deemed consent for contract performance: Where the collection, use or disclosure of personal data about you is reasonably necessary for the performance of a contract between you (or your organisation) and us, your consent is deemed to be provided for that purpose. In practice, we typically rely on the separate lawful basis of contractual necessity rather than consent; however, where consent is deemed, it applies only to processing strictly required to perform the contract.

Cookies and similar technologies

We use cookies, SDKs and similar technologies to operate the site, remember preferences, analyse usage and improve content. Where required, we obtain your consent through a cookie banner.
You can manage preferences via your browser and our cookie settings. For details, see our Cookie Notice.

Disclosures and recipients

We may share personal data with:

  • Service providers acting on our behalf (e.g., hosting, security, analytics, payments), bound by contractual confidentiality and data protection terms.

  • Your employer or organisation where the service is provided under a corporate contract.

  • Professional advisers, insurers, auditors and regulators where necessary.

  • Prospective buyers and their advisers in the context of a merger, acquisition or asset sale, subject to appropriate safeguards. We do not sell personal data.

International data transfers

Cross border transfer clause: Your personal data may be transferred to and processed in countries outside Singapore.
Where we transfer personal data internationally, we implement appropriate safeguards such as:

  • Binding corporate rules or other recognised transfer mechanisms. We assess local laws and adopt supplementary measures (technical, organisational and contractual) where necessary to ensure an essentially equivalent level of protection. You may request a copy of applicable safeguards using the contact details below (redactions may apply).

Storage, security and retention Storage and Security: We make all reasonable precautions and implement all necessary safeguards to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction.
Measures include, as appropriate:

  • Access controls, multi factor authentication and least privilege permissions.

  • Encryption in transit and at rest, secure key management and network segmentation.

  • Vulnerability management, patching, monitoring and incident response procedures.

  • Supplier due diligence, confidentiality obligations and audit rights. We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including satisfying legal, accounting or reporting requirements. Retention periods are determined by statutory obligations, limitation periods, industry standards and our operational needs. After expiry, data is securely deleted or anonymised.

Data accuracy and your responsibilities

Please keep your information up to date and notify us of any changes. Where we process personal data about you under a corporate contract, you acknowledge that your organisation may provide data necessary to administer the service.

Links to third party sites

Our websites may contain links to third party sites. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any site you visit.

Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated via the website or by direct notice where appropriate.

Contact us

For questions, to exercise rights, or to request copies of transfer safeguards, please contact: