Skip to content
Qhatulyst
Book a call

Draft. Review by a lawyer before publishing. This is a starting template and isn't legal advice.

Privacy policy

Effective date: [EFFECTIVE DATE]

In short

  • We collect only what you send us and what's needed to run this site.
  • We don't sell personal data or use advertising trackers.
  • You can ask to see, correct or delete your data at any time.

1. Who we are

This policy explains how QHATULYST PTE. LTD. (UEN [UEN]), a company registered in Singapore with its registered office at 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051 ("Qhatulyst", "we", "us") handles personal data, in line with Singapore's Personal Data Protection Act 2012 (PDPA).

2. What we collect

  • Contact form: your name, email, company, budget range, the service you're interested in, and your message.
  • Partnership application: company name, website, stage, revenue range, team size, what you want built, preferred model, and your pitch.
  • Booking a call: details you give the booking tool (Cal.com), such as your name, email and chosen time.
  • Payments: Stripe processes card payments. We receive your name, email, billing details and payment status, but never your full card number.
  • Technical data: a cookie that remembers your pricing region, a browser setting that remembers your colour theme, and spam-protection checks by Cloudflare Turnstile. Our host (Vercel) keeps standard server logs.

3. Why we use it

We rely on your consent (when you contact us) and on what's needed to perform a contract with you. We don't use your data for marketing unless you ask us to.

  • To reply to you, prepare proposals and deliver services you buy.
  • To invoice you and keep records the law requires.
  • To protect our forms from spam and abuse.
  • To show prices in the right currency.

4. Who we share it with

We share personal data only with service providers that help us run the business, under their own data-protection terms: Vercel (hosting), Resend (email delivery), Cal.com (booking), Stripe (payments), Cloudflare (spam protection), and any specialist who works on your project under a confidentiality agreement. We don't sell personal data.

5. Transfers outside Singapore

Some of these providers store data outside Singapore. Where we transfer personal data overseas, we take steps to ensure it receives protection comparable to the PDPA, as section 26 of the PDPA requires.

6. How long we keep it

Enquiries that don't lead to a project are deleted within 24 months. Project and billing records are kept for as long as the law requires (generally 5 years in Singapore).

7. Your rights

We'll reply within 30 days. We may need to confirm your identity first.

  • Ask what personal data we hold about you and how we've used it.
  • Ask us to correct data that is wrong.
  • Withdraw your consent. We'll explain what that means for any work in progress.

8. Security and breaches

We protect personal data with access controls, encrypted connections and reputable providers. If a data breach is likely to cause you significant harm, we'll notify you and the Personal Data Protection Commission as the PDPA requires.

9. Contact and Data Protection Officer

Our Data Protection Officer is [DPO NAME OR ROLE]. Email [SUPPORT EMAIL], or write to QHATULYST PTE. LTD., 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051.

10. Changes

We'll post any change to this policy here with a new effective date.