Legal & Data
Privacy Policy
This policy explains how Sinar Works collects, uses, and looks after the personal information you share with us. We try to keep things plain and readable.
Contents
1. Introduction and scope
Sinar Works ("we", "us", "our") is a Singapore-based consultancy providing AI integration services for small businesses. We are the data controller for personal information collected through our website at sinarworks.live and through our consulting engagements.
This policy applies to all visitors, enquirers, and clients who interact with us online or in person. It is prepared in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.
We take a straightforward approach: we collect only what we need, keep it securely, use it solely for legitimate purposes, and do not sell it to anyone.
2. Data we collect
We may collect the following categories of personal information:
Information you provide directly
- Contact details: name, email address, phone number, and business name when you submit an enquiry via our contact form.
- Correspondence: the content of messages you send us, including follow-up emails or notes exchanged during an engagement.
- Service-related information: details about your business workflows that you share during a consultation or integration project.
Information collected automatically
- Usage data: pages visited, time spent, browser type, and device information collected through analytics tools.
- Cookies and similar technologies: small data files stored on your device to help us understand how the site is used (see Section 5).
- IP address: recorded by our server logs and analytics services for security and performance monitoring.
Legal basis and retention
We process your data on the following legal bases under the PDPA:
- Consent: for marketing communications (where you opt in) and optional analytics cookies.
- Contract: to deliver the services you engage us for.
- Legitimate interest: to manage our website, improve our services, and respond to enquiries.
We keep enquiry records for up to 24 months. Client engagement records are retained for 5 years for business and compliance purposes. Analytics data is retained in accordance with each provider's own policies.
3. How we use your data
We use the information we hold only for the purposes below:
- Responding to enquiries: contacting you about your message or request, and providing the information you asked for.
- Delivering services: carrying out consultations, integrations, and retainer support that you have engaged us for.
- Service communications: sending you updates, written summaries, or notes relevant to your engagement.
- Website improvement: using aggregated, anonymised analytics data to understand which parts of our website are useful.
- Legal and regulatory compliance: meeting obligations under Singapore law, including responding to lawful requests from authorities.
We do not sell, rent, or trade your personal data with any third party for commercial purposes. We may share data with trusted service providers (for example, our email platform or analytics provider) who are contractually obligated to handle it appropriately.
4. Data protection measures
We take reasonable precautions to keep your information safe. These include:
- Encrypted transmission: our website uses HTTPS/TLS to protect data in transit between your browser and our servers.
- Restricted access: only authorised team members with a need to access specific data may do so.
- Reputable processors: we use established, well-regarded platforms for email and analytics, and review their compliance practices.
- Breach notification: in the event of a data breach affecting your rights, we will notify you and the Personal Data Protection Commission (PDPC) within the timeframes required by the PDPA.
No transmission over the internet is entirely without risk. We do our best to protect your information, but we cannot guarantee absolute security.
6. Your rights
Under the PDPA, you have the following rights regarding your personal data:
- Access: you may request a copy of the personal data we hold about you.
- Correction: if information we hold is inaccurate or incomplete, you may ask us to correct it.
- Withdrawal of consent: where we rely on your consent to process data (such as for marketing emails), you may withdraw it at any time without affecting any processing already carried out.
- Data portability: in certain circumstances you may request your data in a structured, commonly used format.
- Erasure: you may ask us to delete personal data we hold where there is no longer a lawful reason to retain it.
- Complaints: if you believe we have not handled your data properly, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.
To exercise any of these rights, please write to us at [email protected]. We aim to respond within 10 business days.
7. Third-party links
Our website may contain links to external sites for your reference. We are not responsible for the privacy practices of those sites, and this policy does not apply to them. We encourage you to read the privacy notices of any site you visit.
8. Children's privacy
Our services are intended for business owners and their staff, and are directed at adults aged 18 and above. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information to us, please contact us at [email protected] and we will delete it promptly.
9. Updates to this policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the "Last updated" date at the top of this page. Where a change is material, we will make reasonable efforts to notify affected individuals. Continued use of our website after any update constitutes acceptance of the revised policy.
10. Contact us
For any data-related questions, access requests, or concerns, please reach out to us directly. We aim to handle all requests promptly and clearly.
Sinar Works — Data Controller