Who we are
This policy explains how Alpha CISO Pte. Ltd. (UEN 202338803N), registered at #14-04, SBF Center, 160 Robinson Road, Singapore 068914, handles personal data collected through alphaciso.com. We comply with Singapore's Personal Data Protection Act 2012 (PDPA).
What we collect
This site has no user accounts and takes no payments. We collect personal data in exactly two places:
- Contact form: your name, email address, and message. The submission is stored in our database and a copy is emailed to our company inbox so we can respond.
- Newsletter form: your email address. It is stored in our database and we send you a welcome email to confirm the subscription.
We do not collect anything else through forms, and we do not run analytics or advertising trackers on this site.
Why we collect it
We use contact form submissions to respond to your enquiry and, where relevant, to discuss a potential engagement. We use newsletter email addresses to send you the updates you subscribed to. We do not use either for unrelated purposes without asking first.
Consent
We collect personal data only when you choose to submit it, and we treat that submission as your consent for the purposes described above — this is the basis the PDPA requires. You can withdraw consent at any time: unsubscribe links appear in every newsletter, and you can write to hello@alphaciso.com to have your contact details or enquiry history removed.
Storage and retention
Form submissions are stored in a managed Postgres database, encrypted in transit. We retain contact enquiries for as long as needed to handle the enquiry and any engagement that follows, and newsletter addresses for as long as you remain subscribed. When data is no longer needed for its purpose, we delete it.
Who processes it
We use a small number of service providers to run the site: a hosting provider that runs the website and database, and an email delivery provider (SMTP) that delivers contact notifications and welcome emails. Each processes data only on our instructions. We do not sell personal data, and we do not share it with third parties for their own marketing.
International transfers
Our hosting and email providers may store or process data on servers outside Singapore. Where personal data is transferred overseas, we ensure the recipient provides a standard of protection comparable to the PDPA, as the Act requires.
Your rights under the PDPA
You may ask us for access to the personal data we hold about you and how it has been used, ask us to correct inaccurate data, and withdraw consent to our continued use of it. Write to our Data Protection Officer at hello@alphaciso.com and we will respond within the timelines the PDPA sets out.
Cookies
We use functional cookies only — no analytics, no advertising:
- banner-dismissed — remembers that you closed the announcement banner.
- alphaciso-intro-seen — skips the intro animation on repeat visits.
- A theme preference cookie — remembers your light or dark mode choice.
These exist solely to make the site behave the way you left it. Blocking them in your browser will not break the site, only reset those preferences.
Visitors from the EEA
If you are in the European Economic Area, the GDPR also applies to our handling of your data. Our legal basis is consent for the newsletter and legitimate interest (responding to your enquiry) for the contact form, and you additionally have rights to erasure, restriction, portability, and to lodge a complaint with your local supervisory authority.
Changes
We update this policy when our data practices change. The lastUpdated date at the top reflects the current version, and material changes will be posted on this page.
Contact
Privacy questions, access or correction requests, and consent withdrawals: hello@alphaciso.com (Data Protection Officer). Legal notices: legal@alphaciso.com. Postal mail: Alpha CISO Pte. Ltd., #14-04, SBF Center, 160 Robinson Road, Singapore 068914.