Privacy Policy

Introduction

sttratumma is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, protect, and share information about you when you use our AI integration services or visit our website.

This policy applies to all personal data we collect or process. By using our services, you acknowledge that you have read and understood this Privacy Policy. We comply with Singapore's Personal Data Protection Act (PDPA) and maintain appropriate safeguards for your information.

Data Collection Information

What Personal Data We Collect

We collect the following types of personal data:

• Contact information: name, email address, phone number, business address
• Professional information: job title, company name, industry sector
• Communication data: inquiry details, correspondence records, meeting notes
• Technical data: IP address, browser type, device information, usage patterns
• Project data: assessment findings, implementation documentation (when engaged for services)

How We Collect Data

• Directly from you when you contact us, request services, or participate in consultations
• Automatically through cookies and similar technologies when you visit our website
• From third-party analytics services (Google Analytics) to understand website usage
• Through business interactions during service delivery

Legal Basis for Processing

We process your personal data based on:

• Consent: When you voluntarily provide information through contact forms or service requests
• Contract: To deliver AI integration services you have engaged us for
• Legitimate interests: To improve our services, communicate about relevant offerings, and maintain business records
• Legal obligation: To comply with Singapore tax, accounting, and regulatory requirements

Data Retention Periods

We retain personal data for different periods depending on the purpose:

• Contact inquiries: 2 years from last contact
• Client project data: 5 years after project completion (for compliance and reference)
• Financial records: 7 years (Singapore statutory requirement)
• Website analytics: 26 months

Data Usage Explanation

How We Use Your Personal Data

• To respond to your inquiries and provide information about our services
• To deliver AI integration services you have contracted for
• To communicate project updates, schedules, and deliverables
• To improve our website, services, and client experience
• To maintain business records and fulfill legal obligations
• To send relevant service updates or information (with your consent)

Data Sharing with Third Parties

We share personal data only in these specific circumstances:

• Service providers: Cloud hosting (AWS Singapore), email services, analytics (Google Analytics)
• Professional advisors: Legal, accounting, and auditing firms when necessary
• Regulatory authorities: When required by Singapore law or regulation

We do not sell personal data to third parties. All service providers are bound by confidentiality agreements and process data only as instructed.

Marketing Communications

We will send you marketing communications only with your explicit consent. You can withdraw consent at any time by clicking the unsubscribe link in emails or contacting us at [email protected].

Data Protection Measures

Security Measures

• Encryption: All data transmissions use TLS/SSL encryption
• Secure storage: Data stored on servers in Singapore with encrypted databases
• Access controls: Role-based access with strong authentication requirements
• Regular audits: Quarterly security assessments and annual external reviews
• Staff training: All team members complete data protection training

Data Breach Procedures

In the event of a data breach affecting your personal information, we will notify you within 72 hours and inform the Personal Data Protection Commission (PDPC) as required by Singapore law. We maintain incident response procedures to contain and remediate breaches promptly.

Cookie Information

We use cookies and similar technologies to improve your website experience. These include:

• Essential cookies: Required for basic website functionality
• Analytics cookies: Help us understand how visitors use our website
• Preference cookies: Remember your settings and choices

For detailed information about our cookie usage and how to manage your preferences, please see our Cookie Policy.

Your Rights

Under Singapore's PDPA, you have the following rights regarding your personal data:

Right to Access

You can request a copy of the personal data we hold about you. We will provide this information within 30 days of your request.

Right to Correction

You can request correction of inaccurate or incomplete personal data. We will update our records within 30 days.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

Right to Data Portability

You can request your personal data in a structured, commonly used format for transfer to another service provider.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with your request. We will respond within 30 days and may require verification of your identity before processing requests.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We recommend reviewing the privacy policies of any third-party websites you visit.

Children's Privacy

Our services are designed for business use and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete the information promptly.

Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by email (if we have your contact information) or through a notice on our website. The updated policy will be effective from the date indicated at the top of the document.

Contact Information

For questions about this Privacy Policy or to exercise your data protection rights:

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore.