Privacy Policy
Last Updated: 17 January 2026
Cortexia is committed to protecting your privacy and handling your personal data transparently. This Privacy Policy explains how we collect, use, store, and protect information when you use our consulting services or interact with our website.
1. Information We Collect
1.1 Personal Data
We collect personal data that you provide directly to us, including:
- Name and contact information (email address, phone number, business address)
- Organisation details (company name, role, department)
- Information provided during consultations and engagements
- Communication preferences and correspondence history
1.2 Technical Data
When you visit our website, we may automatically collect:
- IP address and browser type
- Pages visited and time spent on site
- Referring website and navigation patterns
- Device and operating system information
2. How We Use Your Information
2.1 Service Delivery
We use your personal data to:
- Provide consulting services you have requested
- Communicate about engagements and deliverables
- Process payments and maintain financial records
- Respond to inquiries and provide customer support
2.2 Business Operations
Your data may also be used for:
- Improving our services and website functionality
- Conducting internal research and analysis
- Complying with legal and regulatory requirements
- Protecting against fraud and security threats
2.3 Marketing Communications
With your consent, we may send you information about our services, industry insights, or relevant updates. You can opt out of marketing communications at any time by contacting us at [email protected] or using the unsubscribe link in our emails.
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract Performance: Processing necessary to provide consulting services you've engaged us for
- Legitimate Interest: Business operations, fraud prevention, and service improvement where not overridden by your rights
- Legal Obligation: Compliance with Singapore's Personal Data Protection Act and other applicable regulations
- Consent: Marketing communications and optional data processing where you've provided explicit consent
4. Data Sharing and Third Parties
4.1 Service Providers
We may share your data with trusted third-party service providers who assist in our operations:
- Website hosting and analytics services
- Email communication platforms
- Payment processors
- Professional advisors (legal, accounting)
These providers are contractually obligated to protect your data and use it only for specified purposes.
4.2 Legal Requirements
We may disclose your information when required by law, court order, or government regulation, or when necessary to protect our rights, property, or safety.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal data:
- Encrypted data transmission using SSL/TLS protocols
- Secure server infrastructure with access controls
- Regular security assessments and updates
- Staff training on data protection practices
- Confidentiality agreements with all team members and contractors
While we take reasonable precautions, no internet transmission or electronic storage is completely secure. We cannot guarantee absolute security but will notify you of any data breaches as required by applicable law.
6. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:
- Client Data: Retained for the duration of the engagement plus seven years for financial and legal compliance
- Marketing Communications: Until you withdraw consent or request deletion
- Website Analytics: Typically retained for 26 months
- Inquiry Data: Retained for two years unless converted to client relationship
After the retention period expires, we securely delete or anonymise your personal data.
7. Your Rights
Under Singapore's Personal Data Protection Act, you have the following rights:
7.1 Access and Correction
You may request access to your personal data and ask us to correct any inaccuracies.
7.2 Withdrawal of Consent
Where processing is based on consent, you may withdraw your consent at any time. This will not affect the lawfulness of processing before withdrawal.
7.3 Data Portability
You may request a copy of your personal data in a structured, commonly used format.
7.4 Deletion
You may request deletion of your personal data, subject to our legal and contractual obligations.
To exercise these rights, contact us at [email protected]. We will respond to requests within 30 days.
8. Cookies and Tracking
Our website uses cookies to enhance functionality and analyse usage. Cookies are small text files stored on your device. We use:
- Essential Cookies: Required for basic site functionality (always active)
- Analytics Cookies: Help us understand how visitors use our site
- Preference Cookies: Remember your settings and choices
You can manage cookie preferences through our Cookie Policy page or your browser settings.
9. International Data Transfers
Our primary operations are in Singapore. If we transfer your data internationally, we ensure adequate protection through:
- Transfers to countries with adequate data protection laws
- Standard contractual clauses approved by data protection authorities
- Appropriate safeguards as required by Singapore's PDPA
10. Children's Privacy
Our services are intended for business and professional use. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware of such collection, we will delete the data promptly.
11. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top indicates when changes were last made. Significant changes will be communicated via email to registered clients or through a notice on our website.
12. Contact Information
For questions about this Privacy Policy or our data practices, please contact:
Data Protection Contact
Cortexia
12 Marina Boulevard, #17-01
Marina Bay Financial Centre
Singapore 018982
Email: [email protected]
Phone: +65 6453 7192
13. Complaints
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with Singapore's Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.