Privacy Policy
Last Updated: October 2025
Our Commitment to Privacy
At prism aiyden, we take data protection seriously. This privacy policy explains how we collect, use, protect, and manage your personal information when you interact with our website and services.
We are committed to transparency in our data practices and compliance with applicable data protection regulations including the Personal Data Protection Act (PDPA) of Singapore.
Information We Collect
Personal Information You Provide
We collect information you voluntarily provide through forms and direct communications:
- Contact Information: name, email address, phone number
- Professional Information: company name, job title, industry
- Communication Data: messages sent through contact forms or email
- Service Preferences: information about services of interest
Automatically Collected Information
We automatically collect certain technical information when you visit our website:
- Usage Data: pages visited, time spent, navigation patterns
- Device Information: IP address, browser type, operating system
- Referral Data: source of website visit, referring URLs
- Cookie Data: preferences and session information (see Cookie Policy)
How We Use Your Information
We process your personal data for the following purposes:
Service Delivery
To provide requested services, respond to inquiries, and fulfill contractual obligations.
Communication
To send service updates, respond to questions, and provide information about our offerings.
Website Improvement
To analyze usage patterns, optimize user experience, and enhance website functionality.
Legal Compliance
To comply with legal obligations, resolve disputes, and enforce our agreements.
Marketing Communications
To send relevant information about services and updates (only with your consent).
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: For marketing communications and optional cookies
- Contract: To provide requested services and fulfill agreements
- Legitimate Interest: For business operations, security, and fraud prevention
- Legal Obligation: To comply with tax, regulatory, and legal requirements
Data Protection Measures
We implement comprehensive security measures to protect your personal information:
Encryption
Data encryption both in transit (SSL/TLS) and at rest on secure servers.
Access Controls
Role-based access restrictions ensuring only authorized personnel can access data.
Monitoring
Regular security audits and continuous monitoring for unauthorized access attempts.
Breach Response
Incident response procedures including notification within 72 hours if required.
Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Contact form submissions: 3 years from last interaction
- Service records and contracts: 5 years from service completion
- Financial records: 7 years as required by law
- Marketing data: Until consent is withdrawn
- Website analytics: 26 months (Google Analytics standard)
After retention periods expire, data is securely deleted or anonymized.
Data Sharing and Third Parties
We do not sell your personal information. We may share data with the following third parties:
Service Providers
Third-party vendors who assist in business operations:
- Cloud hosting and infrastructure services
- Email service providers
- Analytics and website optimization tools
- Payment processors (if applicable)
Legal Requirements
Government authorities when required by law, legal process, or to protect rights and safety.
Business Transfers
In connection with mergers, acquisitions, or asset sales (you will be notified).
Your Privacy Rights
You have the following rights regarding your personal data:
How to Exercise Your Rights
To exercise any of these rights, please contact us using the information provided below. We will respond to your request within 30 days.
International Data Transfers
Your personal data may be transferred to and processed in countries outside Singapore. When we transfer data internationally, we ensure appropriate safeguards are in place:
- Adequacy decisions recognizing equivalent data protection standards
- Standard contractual clauses approved by relevant authorities
- Privacy Shield certification (where applicable)
- Explicit consent for transfers when required
Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately for removal.
Contact Information
For privacy-related questions, concerns, or to exercise your rights, please contact us:
Changes to This Privacy Policy
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through prominent notice on our website or direct notification to registered users. The "Last Updated" date indicates when the policy was last modified. We encourage you to review this policy regularly to stay informed about how we protect your information.