Privacy policy

This policy explains how Infochola Solutions Pte. Ltd. (UEN 201211853W), trading as INFOC ("INFOC", "we", "us"), handles personal data. It covers infoc.sg and the ways you contact us: website forms, email, phone, WhatsApp and the chat window on this site.

We follow the PDPA and the guidance of the Personal Data Protection Commission (PDPC).

• Details you give us: your name, company, work email, mobile number, number of staff and what you tell us about your systems. Our website forms do not send these details to us directly. They open your own email app with a message to hello@infoc.sg, which you can check before you send it.
• Messages: what you send us by email, WhatsApp, chat or phone, and our replies.
• Website data: when you visit, the servers that deliver this site record technical details such as your IP address, browser and the page you asked for, so that the site works and stays secure. This site does not set cookies. What it saves in your browser, and the choice you have over it, is set out in our cookie policy.
• Client data: when you become a client, the contact details of your staff and any personal data in systems we set up or support. We handle that data under our agreement with you.

Please do not send us sensitive personal data, such as NRIC numbers or health information, through our website forms.

Chat: if you use the chat window, the messages you send, and any name, email address or phone number you choose to give, reach the INFOC team so we can reply. While the chat is on a page, it also records which pages of this site you view, so the team can see where you are and help; those page records are kept for 30 days. The chat runs on askla.infoc.com, INFOC's own service. It also keeps your approximate country, worked out from your connection, for the same 30 days, and your IP address for up to 7 days.

To draft an answer from this site's pages, the chat sends your question to Anthropic, which provides the AI model. Contact details you give in the chat are kept out of those requests.

We use personal data to:

• reply to your enquiry and arrange the check, demo or call you asked for
• prepare proposals and deliver the services you buy
• manage our relationship with you, including billing and support
• improve our website and services
• meet our legal, tax and regulatory obligations

We do not sell personal data.

We collect, use and disclose personal data with your consent, or where the PDPA otherwise allows it. When you send us a form or a message, you consent to us using your details to reply and to follow up on your request.

We send marketing messages, such as newsletters or event invitations, only if you agree to receive them, and every marketing email includes a way to unsubscribe. We do not send marketing messages to a Singapore phone number listed on the Do Not Call Registry unless you have given us clear and unambiguous consent.

You can withdraw your consent at any time by contacting our Data Protection Officer. We will act on your request within a reasonable time and explain what it means for any work we are doing for you. Withdrawing consent does not affect data we must keep by law. To withdraw consent to analytics on this website, select Cookie settings at the foot of any page.

We share personal data only as needed for the purposes above, with:

• service providers who host our website, email, customer records and support tools
• software and hardware vendors, such as Microsoft, when we order licences or set up services you have asked for
• our professional advisers, such as auditors and lawyers
• authorities, where the law requires it

We require service providers to protect personal data and to use it only for the work we give them.

Some of our service providers store data outside Singapore. When we transfer personal data overseas, we take steps to make sure it is protected to a standard comparable to the PDPA, for example through contracts with the recipient.

We use reasonable security arrangements, including access controls, multi-factor sign-in, encryption where appropriate and staff training. No way of sending or storing data is completely secure, so we review our controls regularly.

We keep personal data only as long as we need it for the purposes above, or as long as the law requires. When we no longer need it, we delete it or make it anonymous.

You can ask for a copy of the personal data we hold about you, for information on how it has been used or disclosed in the past year, or for a correction. Send your request to our Data Protection Officer.

We reply as soon as reasonably possible. If we cannot respond within 30 days, we will tell you within that time when we can. We may charge a reasonable fee for an access request, and we will tell you the fee before we proceed.

If a data breach happens, we assess it promptly. Where the PDPA requires it, we notify the PDPC within 3 calendar days of deciding the breach is notifiable, and we tell the people affected.

We may update this policy from time to time. The date at the top of this page shows when it last changed.