Privacy Policy

Introduction

catalyx ar is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our website and services, in accordance with Singapore's Personal Data Protection Act (PDPA).

1. Data Controller Information

2. Data We Collect

We collect the following types of personal data:

• Contact Information: Name, email address, phone number, company name
• Usage Data: IP address, browser type, pages visited, time spent on pages
• Communication Data: Messages sent through contact forms, email correspondence
• Cookie Data: Session preferences, authentication tokens, analytics information

3. How We Use Your Data

We process your personal data for the following purposes:

• Responding to inquiries and providing requested services
• Processing consultation requests and project proposals
• Sending service updates and technical information
• Improving our website functionality and user experience
• Analyzing website usage patterns and performance metrics
• Complying with legal and regulatory obligations

4. Legal Basis for Processing

We process your data based on:

• Consent: For marketing communications and optional cookies
• Contract: To provide services you have requested
• Legitimate Interest: For business operations and website improvements
• Legal Obligation: For compliance with Singapore regulations

5. Data Retention

We retain your data for the following periods:

• Contact form submissions: 3 years from last contact
• Service engagement records: 5 years after project completion
• Financial records: 7 years (regulatory requirement)
• Marketing consent: Until withdrawn by you

6. Data Security

We implement appropriate security measures to protect your personal data:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorized personnel
• Regular security assessments and updates
• Secure data storage with reputable cloud providers
• Employee training on data protection practices

7. Your Rights Under PDPA

Under Singapore's Personal Data Protection Act, you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Withdraw consent for data processing
• Request data portability
• Lodge a complaint with the Personal Data Protection Commission

To exercise these rights, contact us at privacy@catalyx ar.sg

8. Third-Party Services

We may share your data with:

• Cloud Infrastructure Providers: For website hosting and data storage
• Analytics Services: For website performance analysis (Google Analytics)
• Communication Tools: For email delivery and customer support
• Payment Processors: For secure payment handling (when applicable)

All third parties are contractually required to protect your data and use it only for specified purposes.

9. International Data Transfers

Your data may be transferred to and processed in countries outside Singapore. When we transfer data internationally, we ensure appropriate safeguards are in place through standard contractual clauses and adequacy decisions.

10. Cookies

We use cookies to enhance your experience. For detailed information about our cookie usage, please visit our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or our data practices, contact: