Privacy Policy

1. About Us (Data Controller)

Validev is the talent and team-building practice of Automancers Pte Ltd, a Singapore-registered company (UEN: 202406230H). We are the data controller responsible for your personal data.

This policy explains how we collect, use, protect, and share your personal data in compliance with the Singapore Personal Data Protection Act (PDPA) and the EU General Data Protection Regulation (GDPR).

2. Information We Collect

We collect personal data only when you voluntarily provide it:

• Contact information: Name, email address, company name, phone number when you contact us or submit enquiries
• Workshop and consultation data: Business and technical information you share during consultations, including project requirements and company details
• Website usage data: IP address, browser type, device information, pages visited, and timestamps (standard server logs collected by our hosting provider)

3. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

Where we rely on legitimate interest, we have assessed that our interests do not override your fundamental rights and freedoms.

4. How We Use Your Information

• To respond to your enquiries and provide information about our services
• To deliver workshop, consultation, and engineering services
• To prepare and deliver project deliverables
• To maintain and improve our website and services
• To comply with legal obligations

5. Data Sharing

We do not sell your personal data. We may share information only in the following circumstances:

• Hosting provider: Vercel Inc. (USA) for website operation - see Vercel's Privacy Policy
• Government agencies or official partners: Where you have been referred to us through their programmes and such sharing is required by our partnership obligations
• Legal requirements: When required by law, court order, or government authority
• Professional advisors: Accountants and legal advisors, bound by confidentiality obligations

6. International Data Transfers

Your data may be transferred to and processed in countries outside Singapore and the European Economic Area (EEA), including:

• United States: Our hosting provider Vercel operates infrastructure globally, including in the US

For transfers from the EEA, we rely on the following safeguards:

• Singapore: The European Commission has recognised Singapore as providing an adequate level of data protection
• Vercel (USA): Vercel implements Standard Contractual Clauses (SCCs) and additional technical safeguards for EU data transfers. See their Data Processing Addendum

7. Cookies and Tracking

Our website uses minimal cookies:

• Essential cookies: Required for basic website functionality (no consent required)
• Analytics: We use Vercel Analytics to understand website usage. This collects anonymised, aggregated data and does not track individual users across sites

We do not use advertising cookies or sell data to advertisers. You can control cookies through your browser settings.

8. Confidentiality

We keep all business information shared during workshops and consultations strictly confidential. Your product details, expansion plans, technical architecture, and business information will only be accessible to personnel directly involved in delivering your services and will not be shared with any third party without your explicit consent.

9. Data Retention

We retain your personal data for:

• Contact enquiries: 2 years from our last interaction
• Client project data: 7 years after project completion (for legal and accounting requirements)
• Website logs: 90 days

You may request earlier deletion at any time, subject to our legal obligations.

10. Your Rights

Under GDPR and PDPA, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request that we limit how we use your data
• Data portability: Request your data in a structured, machine-readable format (e.g., CSV or JSON) for transfer to another service
• Objection: Object to processing based on legitimate interest
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects you. All decisions regarding our services are made by our team members.

12. Right to Lodge a Complaint

If you are unsatisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority:

• Singapore: Personal Data Protection Commission (PDPC) - www.pdpc.gov.sg
• European Union: Your local Data Protection Authority. A list is available at edpb.europa.eu

We would appreciate the opportunity to address your concerns before you approach a regulator, so please contact us first.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated revision date. We encourage you to review this policy periodically.

14. Contact Us

For any questions about this privacy policy or to exercise your data rights, please contact: