Privacy Policy

Draft — pending legal review. This page is a working draft, complete enough to review but not to publish. It requires review by a Singapore-qualified adviser, and several details are still to be confirmed. Do not treat it as the published policy. (Remove by setting features.legalDraftNotice to false in params.js, once that review is done.)

1. About this policy

This Privacy Policy explains how CYPHER MAX PTE. LTD. (UEN 202637936N), trading as CypherMax (“CypherMax”, “we”, “us”), collects, uses, discloses and protects personal data. It applies to this website, cyphermaxsg.com, and to personal data we handle in the course of providing our services.

Our registered office is 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051.

We handle personal data in accordance with the Personal Data Protection Act 2012 of Singapore (the “PDPA”).

2. The personal data we collect

Information you give us directly

  • Name, business email address, company name, job title and telephone number, when you submit an enquiry form or contact us by email or phone.
  • The content of your enquiry, including any information you choose to tell us about your technical environment.
  • Contact details and correspondence, in the course of a customer relationship.

Information collected automatically when you visit this website

  • IP address, browser type and version, operating system, referring page, pages visited and the time of your visit.
  • Cookie identifiers, where you have consented to non-essential cookies.

Information we receive in the course of providing services

Where we operate cloud environments on a customer's behalf, we may have access to systems that contain personal data belonging to that customer's own users. We access such data only as necessary to provide the agreed service.

3. Why we use personal data

We use personal data for the following purposes:

  • To respond to your enquiry and to provide information you have asked for.
  • To provide, operate, support and bill for our services.
  • To manage our relationship with you, including service reporting and reviews.
  • To send you marketing communications, where you have separately consented to receive them.
  • To maintain the security and proper functioning of this website.
  • To comply with legal, regulatory and accounting obligations.

We do not sell personal data. We do not use enquiry data for any purpose unrelated to the enquiry without your consent.

Where the PDPA requires consent, we collect, use and disclose personal data on the basis of the consent you give us, or where collection, use or disclosure is permitted or required by law.

You may withdraw your consent at any time by contacting us using the details in section 11. We will action a withdrawal request within a reasonable time and tell you the likely consequences — for example, that we may no longer be able to provide a service you have asked for.

Marketing consent is collected separately from enquiry consent, and withdrawing marketing consent does not affect anything else.

5. Who we disclose personal data to

We disclose personal data only as follows:

  • Service providers acting on our behalf — for example website and email hosting, customer relationship management, and support ticketing. Each is bound to handle the data only for the purposes we specify.
  • Cloud platform partners — where necessary to provision, support or escalate a service you have engaged us to deliver. This includes Amazon Web Services, Google Cloud, Alibaba Cloud, Tencent Cloud, Huawei Cloud and BytePlus, as applicable to your service.
  • AI platform providers — where you have engaged us to provision or operate AI services, data you send to a model endpoint is processed by the platform operating that model, under that platform's terms. We will identify the applicable platform and terms for your configuration before anything is provisioned.
  • Professional advisers — legal, accounting and audit, where required.
  • Where required by law — in response to a valid legal or regulatory requirement.

6. Transfers outside Singapore

Some of our service providers and cloud platform partners process data outside Singapore. Where we transfer personal data out of Singapore, we take steps to ensure the recipient is bound to provide a standard of protection comparable to that required under the PDPA.

7. How long we keep personal data

We retain personal data only as long as necessary for the purpose it was collected for, or as required by law.

8. How we protect personal data

We apply reasonable security arrangements to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Access to, and correction of, your personal data

You may request access to the personal data we hold about you, and information about how it has been used or disclosed in the past year. You may also ask us to correct personal data that is inaccurate or incomplete.

To make a request, contact us using the details in section 11. We may need to verify your identity before we can act, and we may charge a reasonable fee for an access request, which we will tell you about before proceeding. We will respond within the time required by the PDPA.

10. Cookies

Essential cookies are necessary for the website to function and are set without consent.

Analytics cookies are set only if you consent through the cookie banner. You can change or withdraw your choice at any time using the cookie settings link, which is also in the footer of every page.

Most browsers also let you block or delete cookies. Blocking essential cookies may prevent parts of this site from working.

11. Contacting us about personal data

Our Data Protection Officer is responsible for our compliance with the PDPA. To ask a question, make an access or correction request, withdraw consent, or make a complaint, contact:

Data Protection Officer
CYPHER MAX PTE. LTD.
60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051
Phone:

If you are not satisfied with our response, you may refer the matter to the Personal Data Protection Commission of Singapore.

12. Changes to this policy

We may update this policy from time to time. The current version is always available at this page, and the date at the top shows when it was last changed. Where a change materially affects how we handle your personal data, we will take reasonable steps to notify you.