Your trust guides every AI engagement.

We collect information you choose to send when you contact us, discuss a project, or work with our consultants. This can include your name, work email, phone number, organisation, role, project brief, and correspondence.

• Website details such as the pages you view, approximate location, browser type, and referring page.
• Business and project information needed to scope analytics, machine learning, or AI governance work.
• Information provided by your organisation for an engagement, handled under the agreed project instructions.

We do not ask for sensitive personal information through this website. Please remove unnecessary personal details from an enquiry.

We use information to reply to enquiries, prepare proposals, deliver agreed consulting work, manage invoices, and keep our business records accurate.

• We use project data to assess requirements, test agreed models, and report findings to the client.
• We use contact details to send service updates or relevant business information where the law permits.
• We use website analytics to understand which pages need clearer information and to protect the site from misuse.

You can ask us to stop marketing messages at any time. We do not sell personal information.

Under the Singapore PDPA, we generally rely on consent, a reasonable purpose, or the need to perform a contract. We explain the purpose before collecting personal data whenever practical.

For a consulting engagement, the client remains responsible for confirming that it has the right to provide data to us. We document roles, permitted uses, access limits, and deletion steps in the project agreement where the work involves personal data.

We share information only where it supports the stated purpose or is required by law. This may include a hosting provider, analytics provider, professional adviser, or specialist delivery partner working under confidentiality and data protection obligations.

Some technology providers may process information outside Singapore. Before a transfer, we take steps required by the PDPA to provide a comparable standard of protection, including contractual safeguards and access controls. We do not permit a provider to use client project data for its own advertising.

Client data security is part of project planning. We use role-based access, strong authentication, secure file exchange, and encrypted connections where supported by the system. Access is reviewed when a project changes or ends.

No online system removes every risk. If we identify a suspected data incident, we assess it promptly, contain the issue, and notify affected parties or the Personal Data Protection Commission when notification is required.

We keep personal information only for as long as it supports the purpose for which it was collected, meets contractual needs, or is required for accounting and legal records. Project retention periods are agreed with the client where appropriate.

When information is no longer needed, we delete it, anonymise it, or arrange secure disposal. Backup copies may remain briefly until the normal backup cycle replaces them.

Subject to the PDPA, you may ask us for access to personal data we hold about you and information about how it has been used or disclosed. You may also request correction of inaccurate or incomplete data.

Send a written request to our DPO using the details below. We may need to verify your identity before responding. We aim to handle requests within the statutory timelines and will explain any delay or lawful limitation.

Our website may use essential cookies to keep pages working and analytics cookies to measure visits and page performance. Analytics information is reviewed in aggregate where possible.

You can adjust cookie settings in your browser. Blocking some cookies may affect site features, yet you can still contact Lorong AI by email or phone.