Privacy Policy

1. Introduction

Dataveil ("we", "us", "our") is committed to the responsible handling of personal data. This Privacy Policy describes how we collect, use, store, and protect personal data in connection with our website and services. It applies to visitors to our website and to individuals who engage with us for advisory services.

Our registered address is 50 Raffles Place, #37-01, Singapore Land Tower, Singapore 048623. If you have questions about this policy or our data practices, please contact us at privacy@dataveilieopn.

2. Data We Collect

Information you provide directly

• Name and email address when submitting a contact form
• Phone number if provided voluntarily in a form or communication
• Messages and descriptions of your situation that you include in inquiries
• Information exchanged during scoping calls and engagement discussions

Information collected automatically

• IP address and browser type when visiting our website
• Pages visited and time spent on each page (via analytics cookies if consented)
• Device type and operating system
• Referring website or search query

Legal basis for processing

We process personal data on the basis of your consent (for marketing communications and analytics cookies), legitimate interest (for responding to inquiries and improving our services), and contractual necessity (for delivering engagement work). Where consent is the basis, you may withdraw it at any time.

3. How We Use Your Data

• To respond to inquiries and assess whether an engagement is a suitable fit
• To communicate with you about scoping, proposals, and ongoing engagement work
• To deliver services as agreed in engagement documentation
• To improve the content and functionality of our website using aggregated analytics
• To comply with applicable legal obligations under Singapore law

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Data Retention

Contact form submissions are retained for up to 12 months unless an engagement commences, in which case relevant correspondence is retained for the duration of the engagement plus five years for record-keeping purposes. Analytics data is retained for up to 26 months in aggregated form. You may request deletion of your data at any time by contacting us at privacy@dataveilieopn.

5. Data Sharing

Dataveil does not sell, rent, or trade personal data. We share data only in the following circumstances:

• With service providers who assist in website hosting and analytics (Google Analytics, where consented)
• With professional advisers (legal, accounting) under confidentiality obligations where necessary
• With regulatory or law enforcement authorities when required by applicable Singapore law

Any third-party service provider processing personal data on our behalf is bound by appropriate data processing agreements.

6. Data Protection Measures

• Communications are transmitted over encrypted connections (TLS)
• Access to client data is restricted to the practitioners directly involved in the relevant engagement
• Internal documentation containing personal data is stored in access-controlled environments
• In the event of a data breach, affected individuals will be notified within 72 hours to the extent required under applicable law

7. Cookies

We use cookies to support website functionality and, with your consent, to understand how the website is used. Essential cookies are always active. Analytics and preference cookies are used only when you have provided consent. You may manage your cookie preferences at any time via our Cookie Policy page or by updating your browser settings.

8. Your Rights

Under Singapore's Personal Data Protection Act 2012 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights:

• Right to access the personal data we hold about you
• Right to correct inaccurate or incomplete personal data
• Right to withdraw consent at any time without affecting the lawfulness of prior processing
• Right to request erasure of your personal data (subject to applicable legal retention requirements)
• Right to data portability (where processing is based on consent or contract)
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore or a relevant supervisory authority in your jurisdiction

To exercise any of these rights, please contact us at privacy@dataveilieopn. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external websites. Dataveil is not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any third-party site you visit.

10. Children's Privacy

Our services are directed at organisations and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe such data has been collected inadvertently, please contact us for prompt deletion.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the most recent revision is shown at the top of this page. Continued use of our website after an update constitutes acceptance of the revised policy. For material changes, we will provide a more prominent notice.

12. Contact

For any questions about this Privacy Policy or to exercise your data rights:

• Email: privacy@dataveilieopn
• Address: 50 Raffles Place, #37-01, Singapore Land Tower, Singapore 048623
• Phone: +65 6471 3928