Privacy Policy

Introduction

Lumitask is committed to protecting the privacy and security of personal information we collect in the course of our business operations. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and applicable data protection regulations.

This policy applies to all personal data collected through our website, services, and business interactions. By using our services or providing us with personal information, you consent to the practices described in this policy.

For questions regarding this policy or our data practices, contact us at [email protected].

Data Collection

What Personal Data We Collect

We collect the following categories of personal information:

• Contact information including name, email address, phone number, and business address
• Company details including organisation name, role, and department
• Technical data from website usage including IP addresses, browser types, and access times
• Business data related to project requirements and analytical objectives
• Communication records including inquiry content and correspondence history

How We Collect Data

Personal data is collected through these methods:

• Direct submission via contact forms and inquiry submissions
• Email correspondence and phone communications
• Service engagement agreements and project documentation
• Website analytics through cookies and similar technologies
• Business meetings and consultation sessions

Legal Basis for Processing

We process personal data based on these legal grounds:

• Consent: You have provided explicit consent for specific processing activities
• Contract: Processing is necessary for service delivery and contractual obligations
• Legitimate Interests: Business operations, service improvement, and communication purposes
• Legal Compliance: Meeting regulatory requirements and legal obligations

Data Retention

We retain personal data for these timeframes:

• Inquiry data: Two years from last contact unless consent withdrawn
• Client engagement data: Seven years from project completion for business records
• Technical logs: Ninety days unless required for security investigation
• Marketing communications: Until consent is withdrawn or request for removal

Data Usage

How We Use Personal Data

Personal information is used for these purposes:

• Service delivery including assessment, model development, and implementation
• Communication regarding inquiries, projects, and business matters
• Administrative processes including invoicing and contract management
• Service improvement through feedback analysis and usage patterns
• Legal compliance and record-keeping requirements

Data Sharing with Third Parties

We may share personal data with:

• Service providers including cloud hosting and email services (subject to data processing agreements)
• Professional advisors including legal and accounting services under confidentiality obligations
• Regulatory authorities when required by law or legal process

We do not sell personal data to third parties. Any data sharing occurs under contractual protections ensuring appropriate data handling standards.

Marketing Communications

We may send marketing communications about our services with your consent. You can opt out at any time through:

• Unsubscribe links in email communications
• Email request to [email protected]
• Written notice to our business address

Data Protection Measures

Security Measures

We implement these security measures to protect personal data:

• Encryption of data in transit and at rest using industry-standard protocols
• Secure access controls with authentication requirements for data systems
• Regular security monitoring and vulnerability assessments
• Staff training on data protection and confidentiality requirements
• Incident response procedures for security breaches

Breach Notification

In the event of a data breach affecting personal information, we will:

• Assess the severity and scope of the breach within twenty-four hours
• Notify affected individuals within seventy-two hours if significant risk exists
• Report to Singapore's Personal Data Protection Commission as required
• Take remedial measures to prevent future occurrences

Cookie Information

Our website uses cookies and similar technologies to improve user experience and analyse website usage. Cookies are small text files stored on your device.

Types of Cookies We Use

• Essential cookies: Required for website functionality and security
• Analytics cookies: Help us understand how visitors use our website
• Preference cookies: Remember your settings and choices

For detailed information about our cookie practices and how to manage cookie preferences, please see our Cookie Policy.

Your Rights

Under Singapore's PDPA, you have these rights regarding your personal data:

Right to Access

You may request a copy of the personal data we hold about you. We will provide this information within thirty days of receiving a valid request.

Right to Correction

You may request correction of inaccurate or incomplete personal data. We will update records promptly upon verification of requested changes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time. This does not affect the lawfulness of processing prior to withdrawal.

Right to Data Portability

You may request personal data in a structured, machine-readable format where technically feasible.

Right to Object

You may object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds.

How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: [email protected]
• Address: 80 Robinson Road, #17-02, Singapore 068898

Third-Party Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of these external sites.

We recommend reviewing the privacy policies of any third-party websites you visit. This Privacy Policy applies only to information collected by Lumitask.

Children's Privacy

Our services are directed at business users and not intended for individuals under eighteen years of age. We do not knowingly collect personal data from minors.

If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete such information promptly.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through:

• Updated posting on our website with revised date
• Email notification to existing clients and contacts
• Notice during active service engagements

Continued use of our services after policy updates constitutes acceptance of the revised terms.