Privacy Policy

Last Updated: January 15, 2026

1. Introduction

Iridael ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We comply with Singapore's Personal Data Protection Act (PDPA) and other applicable data protection laws. By using our website or services, you consent to the data practices described in this policy.

If you have questions about this Privacy Policy, please contact us at [email protected].

2. Information We Collect

2.1 Personal Data You Provide

We collect information that you voluntarily provide when you:

  • Fill out contact forms on our website (name, email address, phone number, message content)
  • Communicate with us via email or phone (contact details, correspondence content)
  • Engage us for AI services (business information, project requirements, technical specifications)
  • Subscribe to our newsletters or updates (email address, communication preferences)

2.2 Automatically Collected Data

When you visit our website, we may automatically collect:

  • Device information (browser type, operating system, device identifiers)
  • Usage data (pages visited, time spent, referring URLs)
  • IP address and approximate geographic location
  • Cookie data (see our Cookie Policy for details)

2.3 Project Data

During service engagements, we may process data you provide for model training, system development, or testing purposes. The specific categories depend on your project requirements and are detailed in our engagement agreements.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Delivery

  • Responding to inquiries and providing customer support
  • Delivering AI services and technical solutions as contracted
  • Communicating about projects, updates, and service-related matters
  • Processing payments and managing billing

3.2 Website Improvement

  • Analysing website usage to improve functionality and user experience
  • Identifying and fixing technical issues
  • Understanding visitor patterns and preferences

3.3 Marketing and Communications

  • Sending newsletters, updates, and relevant information (with consent)
  • Informing you about new services or features
  • Sharing industry insights and thought leadership content

3.4 Legal Compliance

  • Complying with legal obligations and regulatory requirements
  • Protecting our rights and interests
  • Preventing fraud and ensuring security

4. Legal Basis for Processing

Under the PDPA and applicable data protection laws, we process your personal data based on:

  • Consent: Where you have explicitly agreed to the processing
  • Contract: Where processing is necessary to fulfill our service agreements
  • Legitimate Interest: Where processing serves our legitimate business interests while respecting your privacy rights
  • Legal Obligation: Where processing is required by law

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

5.1 Service Providers

We work with third-party service providers who assist with:

  • Web hosting and infrastructure
  • Email delivery and communication tools
  • Analytics services (Google Analytics)
  • Payment processing

These providers are contractually obligated to protect your data and use it only for specified purposes.

5.2 Legal Requirements

We may disclose information when required by law, court order, or government regulation, or when necessary to protect our rights or the safety of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

  • Encryption of data in transit and at rest
  • Secure servers with access controls
  • Regular security assessments and updates
  • Employee training on data protection
  • Restricted access to personal data on a need-to-know basis

While we strive to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but maintain industry-standard safeguards.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

  • Contact form inquiries: Retained for 2 years or until resolved
  • Service engagement data: Retained for the duration of the project plus 7 years for legal and accounting purposes
  • Marketing communications: Retained until you withdraw consent
  • Website analytics: Typically retained for 26 months

Once data is no longer needed, we securely delete or anonymise it.

8. Your Privacy Rights

Under Singapore's PDPA and applicable laws, you have the following rights:

8.1 Right to Access

You can request a copy of the personal data we hold about you.

8.2 Right to Correction

You can request that we correct inaccurate or incomplete data.

8.3 Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements.

8.4 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

8.5 Right to Object

You can object to processing based on legitimate interests or for direct marketing.

8.6 Right to Data Portability

You can request your data in a structured, machine-readable format.

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies and Tracking

We use cookies and similar technologies to improve your experience on our website. For detailed information, please see our Cookie Policy.

You can manage cookie preferences through your browser settings or our cookie consent tool.

10. International Data Transfers

Your data is primarily processed and stored in Singapore. If we transfer data outside Singapore, we ensure appropriate safeguards are in place through:

  • Adequacy decisions recognising equivalent data protection standards
  • Standard contractual clauses with service providers
  • Other mechanisms approved under applicable law

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Sending email notifications for material changes

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Iridael

Data Protection Officer

20 Cecil Street, #14-06 PLUS Building

Singapore 049705

Email: [email protected]

Phone: +65 8493 1762

14. Supervisory Authority

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with Singapore's Personal Data Protection Commission (PDPC):

Personal Data Protection Commission

10 Pasir Panjang Road, #03-01 Mapletree Business City

Singapore 117438

Website: www.pdpc.gov.sg