Legal

Privacy Policy

Last Updated: 20 February 2025

Quorient ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our website and services. This Privacy Policy explains what data we collect, how we use it, and the rights available to you under Singapore's Personal Data Protection Act 2012 (PDPA).

Questions regarding this policy should be directed to: [email protected]

1. Data Controller

The data controller responsible for your personal data is:

Quorient
3 Fusionopolis Way, #09-21, Symbiosis
Singapore 138633
Email: [email protected]

2. Data We Collect

We collect the following categories of personal data through our website contact form and during client engagements:

• Full name
• Email address
• Phone number (where provided voluntarily)
• Organisation name and role (where provided)
• Message content submitted via the contact form
• Technical data: IP address, browser type, pages visited, time on site (via analytics cookies, subject to consent)

We do not collect sensitive personal data (as defined under the PDPA) through our website. Data shared during project engagements is governed by a separate data processing agreement.

3. How We Use Your Data

We use the data collected for the following purposes:

• Responding to enquiries submitted through our contact form
• Communicating about proposed or active project engagements
• Sending relevant service updates where you have consented
• Improving website functionality and user experience using aggregated analytics
• Complying with legal obligations under Singapore law

We do not use your data for unsolicited marketing communications. We do not sell personal data to third parties.

4. Legal Basis for Processing

We process personal data on the following bases under the PDPA:

• Consent: For analytics cookies and optional communications, where you have actively consented.
• Contractual necessity: For processing data required to fulfil or prepare for a service engagement.
• Legitimate interests: For responding to contact form enquiries and maintaining basic website security logs.
• Legal obligation: Where required by applicable Singapore legislation.

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined above:

• Contact form enquiries: up to 24 months from last interaction
• Active client records: duration of engagement plus 5 years (for legal and accounting purposes)
• Analytics data: 14 months (standard Google Analytics retention)
• Cookie consent records: 13 months

After the applicable retention period, data is deleted or anonymised.

6. Data Sharing

We share personal data only in limited circumstances:

• Service providers: Third-party tools used to operate our website (e.g., hosting, analytics) under appropriate data processing arrangements.
• Legal requirements: Where disclosure is required by Singapore law or a lawful order from a competent authority.
• Business transfers: In the event of a business reorganisation, subject to confidentiality commitments.

We do not transfer personal data outside Singapore except where adequate protections are in place consistent with PDPA requirements.

7. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• HTTPS encryption for all data transmitted via our website
• Access controls limiting who within our organisation can access personal data
• Regular review of data handling practices
• Data processing agreements with all third-party service providers

In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with the PDPA Notification Obligation.

8. Cookies

Our website uses cookies to support core functionality and, with your consent, to gather analytics data. For detailed information on the cookies we use and how to manage your preferences, please read our Cookie Policy.

9. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right of correction: Request correction of inaccurate or incomplete personal data.
• Right of portability: Request that your data be provided in a portable format (where technically feasible).
• Right to withdraw consent: Withdraw consent for consent-based processing at any time, without affecting the lawfulness of prior processing.
• Right to lodge a complaint: Lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Children's Privacy

Our services are directed to businesses and professionals. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that such data has been collected, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. Where changes are material, we will update the "Last Updated" date at the top of this page. Continued use of our website after any update constitutes acceptance of the revised policy.

13. Contact

For all privacy-related questions or to exercise your rights:

Email: [email protected]
Address: 3 Fusionopolis Way, #09-21, Symbiosis, Singapore 138633