Privacy Policy

Introduction

Altus Works (“we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose personal data in accordance with the Personal Data Protection Act 2012 (“PDPA”) of Singapore and its subsidiary legislation.

Where we process personal data of individuals located in the European Economic Area or the United Kingdom, we also comply with the applicable provisions of the UK General Data Protection Regulation and the EU General Data Protection Regulation.

Data Controller

The data controller responsible for your personal data is:

Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: Name, job title, and professional affiliation provided when you contact us or register for the Platform.
• Contact data: Email address, telephone number, and business address.
• Technical data: IP address, browser type, operating system, device identifiers, and usage data collected automatically when you visit our website.
• Usage data: Information about how you use the Platform, including features accessed, session duration, and interaction patterns.
• Communication data: Records of correspondence when you contact us.

We do not collect or process special categories of personal data (sensitive data) as defined under the PDPA.

Lawful Basis for Processing

Under the PDPA, we process your personal data on the following lawful bases:

• Consent: Where you have given clear consent for us to process your data for a specific purpose, such as receiving communications.
• Contractual necessity: Where processing is necessary to perform our contract with you or to take pre-contractual steps at your request.
• Legitimate interests: Where processing is necessary for our legitimate business interests, such as improving our Platform, ensuring security, and conducting analytics, provided these do not override your fundamental rights and freedoms.
• Legal obligation: Where processing is necessary to comply with applicable Singapore law.

How We Use Your Data

• To provide and maintain the Platform and our services.
• To communicate with you regarding your account, enquiries, or demo requests.
• To improve, personalise, and optimise the Platform experience.
• To ensure the security and integrity of our systems.
• To comply with legal and regulatory obligations applicable in Singapore.
• To send you information about our products and research, where you have opted in to receive such communications.

Data Sharing and Transfers

We do not sell your personal data. We may share your data with:

• Service providers: Third-party vendors who assist with hosting, analytics, and communication services, bound by contractual obligations to protect your data.
• Altus Labs Ltd (UK): Our affiliated research entity, for the purposes of delivering research-backed content and insights. Altus Labs Ltd is registered in England & Wales and subject to UK GDPR.
• Legal and regulatory authorities: Where required by law or regulation, including relevant regulatory and data protection authorities in Singapore.

Where personal data is transferred outside Singapore, we ensure that adequate safeguards are in place in accordance with the PDPA's transfer limitation obligation, including transfers to jurisdictions with comparable data protection standards or through appropriate contractual arrangements.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for the duration of your relationship with us and for a period of five (5) years thereafter, in line with Singapore regulatory record-keeping requirements. Technical and usage data is retained for up to twenty-four (24) months.

Your Rights

Under the PDPA, you have the following rights with respect to your personal data:

• Right of access: Request confirmation of whether we process your data and obtain a copy.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where it is no longer necessary or where you withdraw consent.
• Right to restrict processing: Request limitation of processing in certain circumstances.
• Right to data portability: Request your data in a structured, commonly used, and machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within thirty (30) days as required by the PDPA.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, regular security assessments, and incident response procedures, in accordance with the PDPA's protection obligation.

Cookies and Tracking

Our website uses essential cookies required for functionality. We may also use analytics cookies to understand how visitors interact with our site. You can manage your cookie preferences through your browser settings. We do not use cookies for targeted advertising.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore. You may also contact us directly and we will endeavour to resolve your concern promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on this page with a revised date. We encourage you to review this policy periodically.