This notice explains how Adaptive Nautilus collects, uses, discloses, protects and retains personal data under Singapore’s Personal Data Protection Act 2012.
Scope
This notice applies when you contact, purchase from or use services provided by Adaptive Nautilus.
It covers our website, enquiries, quotations, orders, supplier and partner dealings, training and consultancy, publications, digital-learning services, feedback and related correspondence. It does not replace a more specific notice provided for a particular programme or service.
01
Personal data we collect
Depending on how you interact with us, we may collect your name, organisation, job role, email address, telephone number, delivery or operating location, enquiry details, order and payment records, correspondence, training or consultancy records, feedback and support history.
Our website and service providers may also process limited technical information needed to operate, protect and diagnose the website, such as device, browser, security-event and access-log information.
02
Why we use personal data
We use personal data to respond to enquiries; understand operational requirements; prepare quotations; process, deliver and support orders; administer training, consultancy, publications and digital learning; manage suppliers and partners; maintain business and accounting records; protect our services; and meet legal, regulatory and contractual obligations.
If we need to use your personal data for a materially different purpose, we will provide the relevant notice and obtain consent where required by law.
03
Consent and withdrawal
Where we rely on consent, you may withdraw it by contacting our Data Protection Officer. We will explain any likely consequences and stop the affected collection, use or disclosure after reasonable notice, unless continued handling is authorised or required by law.
Withdrawing consent does not affect processing that was lawfully carried out before the withdrawal took effect.
04
Who we may disclose data to
We may disclose the minimum necessary information to authorised personnel and service providers that support website hosting, email, cloud storage, payment, delivery, product fulfilment, training, professional advice, security or business administration.
We may also disclose information to clients, regulators, law-enforcement agencies or other parties where you have authorised it or where disclosure is permitted or required by law. We do not sell personal data.
05
Overseas processing
Some technology and service providers may process or store personal data outside Singapore. Where the PDPA requires it, we take reasonable steps to ensure that transferred personal data receives a standard of protection comparable to that provided under Singapore law.
06
Protection and retention
We use reasonable administrative, technical and physical safeguards appropriate to the nature of the information. No method of electronic transmission or storage is completely secure, so we review and improve our controls as our services develop.
We retain personal data only while it remains reasonably needed for the stated business or legal purpose. Inactive enquiry records are normally reviewed for deletion or anonymisation after 24 months. Transaction and accounting records are generally retained for at least five years, while training records may be retained for a period required by the relevant programme, contract or regulator.
07
Access and correction
You may ask to access personal data we hold about you or request correction of inaccurate or incomplete information. We may need to verify your identity and clarify the scope of your request. Applicable legal exceptions, limitations and permitted fees may apply.
08
Children and sensitive information
Please do not submit health information, identity numbers, financial credentials, information about children or other sensitive data through a general website enquiry unless we have specifically requested it through an appropriate channel.
09
Cookies and technical data
We do not currently use advertising cookies on this website. Essential website functions and our hosting or security providers may process technical logs needed to deliver, secure and troubleshoot the service. If we introduce analytics or other non-essential cookies, we will update this notice and provide any choices required by law.
Requests and concerns
Contact our Data Protection Officer.
For access, correction, consent withdrawal, a privacy complaint or a suspected personal-data incident, tell us what happened and how we can contact you. Please do not send identity documents or additional sensitive information unless we request them through an appropriate channel.
We may revise this notice when our services, providers or legal obligations change. The effective date above identifies the current version. Material changes will be communicated through this page or another appropriate channel.