Privacy Policy

1. Introduction

Orchid Flux Pte. Ltd. ("Orchid Flux", "we", "us", or "our") is committed to protecting the personal data of individuals who interact with our services and website. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and its subsequent amendments.

This policy applies to personal data collected through our website at orchidffluxxs.info, our services, and any communication you have with us.

2. Data We Collect

We collect personal data that you provide directly, or that is generated through your use of our website:

• Contact information: name, email address, phone number
• Business information: company name, job title, department (where provided)
• Enquiry details: the content of messages you submit through our contact form
• Technical data: IP address, browser type, pages visited, session duration (via analytics cookies where consent is given)

We do not collect sensitive personal data (such as NRIC numbers, financial account details, or health information) through our website.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and service requests
• Providing and administering our services (workshops, training programmes, process redesign engagements)
• Sending service-related communications and updates
• Improving our website and service offerings based on usage patterns
• Complying with legal and regulatory obligations
• Sending marketing communications where you have given consent (you may withdraw consent at any time)

We process personal data on the following legal bases: performance of a contract, your consent, compliance with legal obligations, and our legitimate interests in operating and improving our business.

4. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Enquiry and contact form data: retained for 24 months from last interaction
• Client engagement records: retained for 7 years for business record purposes
• Analytics data: retained for 26 months (Google Analytics default)

Data is securely deleted or anonymised when retention periods expire.

5. Data Sharing and Third Parties

We do not sell personal data. We may share data with the following categories of third parties where necessary to operate our services:

• Email service providers (for sending correspondence)
• Website analytics providers (Google Analytics — only where you have consented to analytics cookies)
• IT and hosting service providers (for website infrastructure)
• Professional advisors (legal, accounting — where required)

All third-party service providers are required to handle personal data in accordance with applicable data protection laws and our contractual requirements.

6. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• HTTPS encryption for all website communications
• Access controls limiting who within Orchid Flux can access personal data
• Regular review of data handling practices
• Staff awareness of data protection obligations

In the event of a data breach, we will notify affected individuals and the Personal Data Protection Commission (PDPC) in accordance with the PDPA's mandatory breach notification requirements.

7. Cookies

Our website uses cookies. Essential cookies are required for the website to function. Optional analytics and preference cookies are only placed with your consent. For full details, please see our Cookie Policy.

8. Your Rights

Under the PDPA, you have the right to:

• Access your personal data held by us
• Correct inaccurate or incomplete personal data
• Withdraw consent for processing based on consent (this will not affect lawfulness of prior processing)
• Request data portability in a machine-readable format
• Object to processing in certain circumstances
• Lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal data.

10. Children's Privacy

Our services are directed at business professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting a notice on our website and updating the "Last Updated" date. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions, data access requests, or complaints:

• Email: [email protected]
• Address: Orchid Flux Pte. Ltd., 1 Raffles Place, #28-03, Singapore 048616
• Phone: +65 6412 8573

For complaints unresolved by us, you may contact the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.