Privacy Policy

1. Introduction

Laksa Shift Pte. Ltd. ("Laksa Shift", "we", "us", or "our") is committed to protecting the personal data of individuals who interact with us through our website, enquiry processes, and service engagements. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

Our practices are designed to comply with Singapore's Personal Data Protection Act 2012 (PDPA) and the Personal Data Protection Commission (PDPC) guidelines. For any privacy-related questions, you may contact us at [email protected].

2. Personal Data We Collect

We collect personal data that you provide directly to us, and data collected automatically when you use our website.

Data you provide:

• Name and contact details (email address, phone number) from enquiry forms
• The content of messages you send to us through our contact form
• Details of your organisation and role where you choose to share them
• Communication preferences

Data collected automatically:

• IP address and device/browser type
• Pages visited, referring pages, and time spent on site (via analytics cookies, if consented)
• Cookie preferences as stored in your browser

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• Responding to your enquiries and providing information about our services
• Managing our engagement with you as a client or potential client
• Improving our website and services using aggregated, anonymised analytics data
• Sending service-related communications (e.g., session confirmations, deliverable sharing)
• Meeting our legal and regulatory obligations
• Marketing communications, only where you have provided explicit consent

We retain personal data for as long as it is needed for the purposes above, or as required by applicable law. Enquiry data is typically retained for 24 months; active client records are retained for 7 years for contractual and legal compliance purposes.

4. Legal Basis for Processing

Under the PDPA, we process personal data with your consent or where there is a legitimate business purpose. For enquiry responses and service delivery, we rely on contractual necessity and legitimate interest. For analytics and marketing, we rely on your explicit consent, which you may withdraw at any time.

5. Data Sharing

We do not sell your personal data. We may share data with trusted third parties for the purposes of:

• Web hosting and platform infrastructure (data centres in Singapore or other secure facilities)
• Website analytics (e.g., Google Analytics, where consent has been given)
• Email communication services used in our operations

All third parties are required to handle data in accordance with applicable data protection laws and our instructions. We do not share client data with any unauthorised parties.

6. Data Security

We take data security seriously. Our measures include:

• Encrypted data transmission (HTTPS/TLS) for all website communications
• Access controls limiting personal data to authorised personnel only
• Secure document storage practices for client engagement records
• Regular review of our data handling processes

In the unlikely event of a data breach involving your personal data, we will notify you and the PDPC in accordance with our legal obligations under the PDPA.

7. Cookies

We use cookies on our website to support basic functionality (essential cookies) and, where you consent, to understand how our site is used (analytics cookies). You can manage your cookie preferences at any time through our Cookie Policy page.

8. Your Rights

Under the PDPA and applicable data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Withdrawal of consent — withdraw your consent for marketing or analytics processing at any time
• Erasure — ask us to delete your personal data, subject to legal retention requirements
• Object to processing — object to processing where we rely on legitimate interest
• Lodge a complaint — contact the Personal Data Protection Commission (PDPC) at pdpc.gov.sg if you believe your data has been handled improperly

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies separately.

10. Children's Privacy

Our services are intended for business users and individuals aged 18 and above. We do not knowingly collect data from minors. If you believe we have collected data from a person under 18, please contact us immediately.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our website after an update constitutes acceptance of the revised policy.

12. Contact Information

Data Controller: Laksa Shift Pte. Ltd.

Address: 16 Collyer Quay, #21-03, Singapore 049318

Email: [email protected]

Phone: +65 6752 3918