Privacy Policy

Last Updated: October 2025

Our Commitment to Your Privacy

At nexusays, we recognize that protecting your personal information is essential to maintaining trust. This Privacy Policy explains how we collect, use, protect, and manage your personal data when you interact with our website and services.

We comply with Singapore's Personal Data Protection Act (PDPA) and implement industry-standard security measures to safeguard your information. By using our website or engaging our services, you consent to the practices described in this policy.

Information We Collect

Contact Information

When you submit inquiries through our contact forms, we collect:

  • Full name
  • Email address
  • Phone number (if provided)
  • Organization name (if provided)
  • Message content and service interest

Usage Data

We automatically collect certain information when you visit our website:

  • IP address and approximate location
  • Browser type and version
  • Device information and operating system
  • Pages visited and time spent on each page
  • Referring website or source

Cookie Data

We use cookies and similar technologies to:

  • Remember your cookie preferences
  • Analyze website traffic and usage patterns
  • Improve website functionality and user experience
  • Support marketing and advertising efforts (with your consent)

You can manage your cookie preferences on our Cookie Policy page.

How We Use Your Information

Service Delivery

We use your contact information to respond to inquiries, schedule consultations, provide requested services, and communicate about project progress. This processing is necessary to fulfill our contractual obligations to you.

Business Communications

With your consent, we may send you information about our services, industry insights, and relevant updates. You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

Website Improvement

We analyze usage data to understand how visitors interact with our website, identify popular content, diagnose technical issues, and improve overall user experience. This helps us make informed decisions about website enhancements.

Legal Compliance

We may process your information to comply with legal obligations, respond to lawful requests from authorities, protect our rights and property, and ensure the safety and security of our services and users.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent:

For marketing communications and optional cookies, we rely on your explicit consent which you can withdraw at any time.

Contract Performance:

Processing necessary to provide requested services and fulfill our contractual obligations to clients.

Legitimate Interest:

For website analytics, security measures, and business operations that don't override your privacy rights.

Legal Obligation:

To comply with applicable laws, regulations, and valid legal processes.

Data Protection and Security

We implement comprehensive security measures to protect your personal information:

Encryption

Data transmitted between your browser and our servers is encrypted using TLS/SSL protocols. Sensitive data at rest is encrypted using industry-standard algorithms.

Access Controls

Access to personal data is restricted to authorized personnel who require it for legitimate business purposes. We implement role-based access controls and regular access reviews.

Security Monitoring

We maintain comprehensive logging systems and monitor for suspicious activities. Regular security assessments identify and address potential vulnerabilities.

Breach Procedures

In the unlikely event of a data breach, we will notify affected individuals and relevant authorities within 72 hours as required by law.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

Contact form submissions: 3 years
Client service records: 5 years
Financial and tax records: 7 years
Marketing data: Until consent withdrawn
Website analytics: 26 months

After the retention period expires, we securely delete or anonymize personal data unless longer retention is required by law.

Your Privacy Rights

Under Singapore's PDPA and applicable data protection laws, you have the following rights:

Right to Access

Request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

Request correction of inaccurate or incomplete personal data we maintain about you.

Right to Erasure

Request deletion of your personal data when it's no longer necessary for the purposes collected or when you withdraw consent.

Right to Data Portability

Receive your personal data in a structured, commonly used format for transfer to another service provider.

Right to Object

Object to processing of your personal data for direct marketing purposes or based on legitimate interests.

Right to Withdraw Consent

Withdraw previously given consent for data processing at any time without affecting prior lawful processing.

To exercise these rights, contact us at:

[email protected]

We will respond to your request within 30 days and may request verification of your identity before processing.

Data Sharing and Third Parties

We do not sell your personal data. We may share information with:

Service Providers:

Cloud hosting, email services, analytics platforms, and payment processors who help us deliver our services. These providers are contractually bound to protect your data.

Legal Requirements:

Government authorities, law enforcement, or regulatory bodies when required by law or to protect our legal rights.

Business Transfers:

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. You will be notified of any such change.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately and we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings. We will notify you of material changes by:

  • Posting the updated policy on this page with a new "Last Updated" date
  • Sending email notification to registered users for significant changes
  • Displaying a prominent notice on our website homepage

We encourage you to review this policy periodically. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

nexusays Privacy Team

[email protected]

+65 6537 9428

50 Collyer Quay, OUE Bayfront, Singapore 049321

You also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe your privacy rights have been violated.