Privacy Policy

1. Introduction

Nusa Cortex Pte. Ltd. ("Nusa Cortex", "we", "us", "our"), a company registered in Singapore, is committed to handling personal data with care, transparency, and in compliance with Singapore's Personal Data Protection Act 2012 (PDPA). This Privacy Policy explains what personal data we collect, how we use it, who we may share it with, and what rights you have in relation to it.

If you have questions about this policy or how we handle your data, please contact us at [email protected].

2. Data We Collect

We collect personal data through the following means:

• Contact forms: Name, email address, phone number (optional), and message content submitted via our website.
• Engagement communications: Information shared during initial consultations, scoping calls, or programme enquiries.
• Cookies and analytics: Website usage data collected through analytics cookies, including pages visited, time spent, and referral sources.
• Business contact information: Names, email addresses, and phone numbers of client organisation representatives provided in the course of a professional engagement.

We do not collect special categories of personal data (such as health data, race, or religion) and do not knowingly collect data from individuals under 18.

3. Legal Basis and Purpose of Processing

We process personal data on the following bases:

• Consent: For marketing communications and optional analytics cookies, where you have given explicit consent.
• Contractual necessity: To deliver services under a client engagement agreement.
• Legitimate interest: To respond to enquiries, improve our services, and maintain client relationships.

We use personal data for the following purposes: responding to enquiries and contact form submissions; delivering and managing client engagement programmes; sending service-related communications; improving our website and understanding how visitors use it; maintaining records for compliance and audit purposes.

4. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected. Enquiry and contact data is retained for up to 12 months if no engagement follows. Client engagement data is retained for up to 5 years following the end of an engagement for legal, accounting, and audit purposes. Analytics data is retained for up to 24 months.

You may request deletion of your data at any time by contacting us at [email protected].

5. Data Sharing

We do not sell personal data. We may share personal data with:

• Service providers: Third-party tools used to deliver our services (e.g., email platforms, cloud storage), bound by data processing agreements.
• Analytics providers: Website analytics services (e.g., Google Analytics) under applicable data processing terms.
• Legal authorities: Where required by Singapore law, court order, or regulatory requirement.

Where data is transferred outside Singapore, we apply appropriate safeguards in line with the PDPA's requirements for overseas transfers.

6. Data Protection Measures

Nusa Cortex implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or loss. These include: encrypted storage for personal data; access controls limiting data access to authorised personnel; regular review of data handling practices; incident response procedures in the event of a data breach.

In the event of a data breach that is likely to result in significant harm, we will notify the Personal Data Protection Commission (PDPC) and affected individuals in line with the PDPA's mandatory breach notification requirements.

7. Cookies

Our website uses cookies to understand how visitors interact with our content and to maintain your preferences. Essential cookies are always active; optional analytics, marketing, and preference cookies require your consent. For full details, please see our Cookie Policy.

8. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act, you have the following rights:

• Access: Request a copy of personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Withdrawal of consent: Withdraw consent for data processing where consent is the basis.
• Data portability: Request your personal data in a portable format, where applicable.
• Erasure: Request deletion of personal data where retention is no longer necessary.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you have concerns about how we handle your data, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of third-party sites and recommend reviewing their privacy policies independently.

10. Children's Privacy

Our services are directed at professionals and business organisations. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

12. Contact Information

Nusa Cortex Pte. Ltd.
12 Marina Boulevard, #34-06, Singapore 018982
Email: [email protected]
Phone: +65 6581 4273