Privacy and PDPA Notice

1. What we collect

We collect only what we need, mostly from you directly:

• Forms (waitlists, course sign-ups, free kit updates, custom kit and customisation enquiries, proposal requests): your name, company, email, phone number if you give it, type of business and what you tell us in the message.
• Purchases and plans: your name, email, billing details and what you bought. Payments are handled by Stripe. We never see or store your full card number.
• Account sign-in: your email, to send you a one-time sign-in link and show your downloads, receipts and invoices.
• Website use: Google Analytics records pages viewed, device and browser type, approximate location and how you reached us. Your browser also keeps your cart, your sign-in and the link that brought you here, on your own device.
• Messages: anything you send us by email or WhatsApp.

Our AI skill kits run inside your own AI tools, and our interactive artifacts work in your browser. We do not receive the files, figures or text you work on with them.

2. How we use it

• to deliver your purchase, downloads, plan and receipts, and to provide support
• to reply to your enquiry, prepare a quote or proposal, or run a course you signed up for
• to tell you about launches you asked to hear about, such as a waitlist or kit updates
• to keep the site secure, prevent fraud and spam, and understand which pages help visitors
• to keep proper business, accounting and tax records and meet our legal obligations

3. Consent and withdrawing it

We collect, use and disclose your personal data with your consent, or where the PDPA otherwise allows, for example to fulfil a purchase you asked for. You may withdraw consent at any time by emailing info@halynceadvisory.sg, or by using the unsubscribe link in any update email. We will tell you if withdrawing means we can no longer provide something, such as access to a plan, and we will stop using your data for that purpose within a reasonable time.

4. Who we share it with

We do not sell or rent your personal data. We share it only with service providers who help us run the site, and only for that purpose:

• Stripe: payments, invoices, receipts and plan billing
• Resend: sending form submissions to us and sign-in links to you
• Vercel: hosting the website
• Google: Google Analytics and web fonts
• our business email provider, where we receive and answer your messages

We may also disclose personal data where the law requires it, for example to a government authority.

5. Overseas transfers

Some of these providers store or process data outside Singapore, including in the United States. Where personal data leaves Singapore, we use providers bound by contract and their own policies to protect it to a standard comparable to the PDPA, as the PDPA's transfer limitation obligation requires.

6. Analytics and cookies

Google Analytics uses cookies to count visits and see which pages are useful. It does not tell us who you are. You can block or delete cookies in your browser settings, or use Google's Analytics opt-out browser add-on. The site still works without analytics cookies.

7. How long we keep it

We keep personal data only as long as it is needed for the purposes above, or as the law requires. Purchase, invoice and payment records are kept for at least five years, because Singapore law requires businesses to keep their accounting and tax records for that long. Enquiries and waitlist sign-ups are deleted when they are no longer needed, or sooner if you ask.

8. How we protect it

The site runs over HTTPS. Access to personal data is limited to people who need it to serve you. Card payments are handled entirely by Stripe, and sign-in uses one-time links rather than stored passwords.

9. Access and correction

You may ask what personal data we hold about you, how it has been used or disclosed in the past year, or ask us to correct it. Email info@halynceadvisory.sg. We will reply as soon as reasonably possible. If we need more than 30 days, we will tell you in writing within 30 days when we will respond. We may charge a reasonable fee for an access request, and we will tell you the amount before we proceed.

10. Data breaches

If a data breach happens, we will assess it promptly. Where the PDPA requires, we will notify the Personal Data Protection Commission within three calendar days of deciding the breach is notifiable, and tell the people affected.

11. Marketing

We send updates only to people who asked for them, and every email has an unsubscribe link. We do not send marketing calls or text messages to Singapore numbers unless you have given clear consent, and we follow the Do Not Call Registry rules.

12. Complaints and contact

If you have a concern, please contact our Data Protection Officer at info@halynceadvisory.sg first, and we will try to resolve it quickly. You can also contact the Personal Data Protection Commission.

We may update this notice. The latest version is always on this page. See also our Terms of Business.