Privacy Policy

AI Force Singapore Pte. Ltd. (“AI Force”, “we”, “us”, or “our”) is incorporated in Singapore and operates as an enterprise artificial intelligence solutions and consulting company. We are committed to protecting the privacy and security of personal data entrusted to us.

This Privacy Policy (“Policy”) describes how AI Force collects, uses, discloses, retains, and protects personal data in connection with our website, marketing activities, client engagements, and business operations. It applies to:

• Visitors to our website at www.aiforce-ai.net
• Prospective clients who submit enquiries or book consultations
• Existing clients and their representatives
• Subscribers to our newsletter and marketing communications
• Job applicants and candidates
• Business contacts and partners

This Policy is governed by the Personal Data Protection Act 2012 of Singapore (PDPA), and where applicable, relevant international data protection laws including the General Data Protection Regulation (GDPR) for data subjects in the European Economic Area.

The data controller responsible for your personal data is:

For all privacy-related enquiries, data access requests, or complaints, please contact our Data Protection Officer (DPO) via the contact form on our Contact page or by writing to us at our registered Singapore address. We will acknowledge your request within 2 business days and respond fully within 30 days.

We collect personal data that you voluntarily provide to us, data generated through your use of our website, and in some cases data obtained from third-party sources. The categories of personal data we may collect include:

3.1 Data You Provide Directly

• Identity data: first name, last name, job title, company name
• Contact data: email address, telephone number, business address
• Enquiry data: the content of messages, project descriptions, and information you share when completing our contact form or booking a session
• Commercial data: budget range, project timeline, and industry sector (when volunteered)
• Communication preferences: newsletter subscription status, marketing consent
• Employment data: CV, cover letter, work history (for job applicants only)

3.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type
• Usage data: pages visited, time spent on pages, referral source, clickstream data
• Cookie data: session identifiers, preference cookies, analytics identifiers (see Section 6)

3.3 Data from Third Parties

• Publicly available professional information (e.g., LinkedIn profiles) for business development purposes
• Referrals from existing clients or partners
• Analytics providers (aggregated, anonymised where possible)

We do not knowingly collect sensitive personal data (such as health information, financial account details, race, religion, or political opinions) unless strictly necessary for a specific service and with your explicit consent.

We process your personal data only for specified, explicit, and legitimate purposes. The legal basis for each processing activity is identified below:

We will never use your personal data for automated decision-making that produces legal or similarly significant effects without your explicit consent and the ability to request human review.

We will never sell, rent, or trade your personal data to third parties for their own marketing purposes.

AI Force does not sell or rent personal data. We may share personal data with third parties only in the following circumstances:

• Service providers & processors: Trusted vendors who process data on our behalf (e.g., cloud hosting, CRM, email marketing platforms) under strict data processing agreements aligned to PDPA requirements
• Professional advisors: Lawyers, auditors, and insurers under duties of confidentiality
• Business partners: Where you have engaged us jointly with a partner, and with your prior knowledge
• Legal requirements: Where required by Singapore law, court order, or regulatory authority, including the Personal Data Protection Commission (PDPC)
• Business transfers: In connection with a merger, acquisition, or asset sale, subject to equivalent privacy protections being maintained
• With your consent: Any other disclosure for which you have given explicit prior consent

All third-party service providers are contractually required to implement appropriate technical and organisational security measures and to process personal data only on our documented instructions.

Our website uses cookies and similar tracking technologies to enhance user experience, analyse traffic, and support our marketing activities.

Types of Cookies We Use

• Strictly necessary cookies: Essential for website operation (session management, security). Cannot be disabled without affecting core functionality.
• Analytical / performance cookies: Help us understand how visitors use our website (e.g., Google Analytics). Used in anonymised or aggregate form where possible.
• Functionality cookies: Remember your preferences and settings to improve your experience.
• Marketing / targeting cookies: Track visits across websites to deliver relevant advertising. Only set with your explicit consent.

Your Cookie Choices

You may configure your browser to refuse some or all cookies or to alert you when cookies are being sent. However, disabling strictly necessary cookies may affect website functionality. You can withdraw cookie consent at any time by adjusting your browser settings or contacting us.

For opt-out tools for specific analytics services, please visit the respective provider’s privacy settings (e.g., Google Analytics opt-out browser add-on).

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

When personal data is no longer needed, we securely delete or anonymise it using industry-standard data destruction methods.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for data at rest in our systems
• Role-based access controls and principle of least privilege
• Multi-factor authentication for all internal systems
• Regular security assessments and penetration testing
• Employee privacy and security training
• Incident response and data breach notification procedures

In the event of a personal data breach that poses a risk to affected individuals, we will notify the Personal Data Protection Commission (PDPC) and affected data subjects in accordance with PDPA mandatory breach notification requirements within the required timeframes.

AI Force is headquartered in Singapore. Some of our service providers and cloud infrastructure partners may process data outside Singapore. Where we transfer personal data internationally, we ensure:

• Transfers are made only to countries with adequate data protection levels as determined under PDPA Section 26
• Appropriate contractual safeguards are in place (e.g., PDPC-approved model clauses, Standard Contractual Clauses for EU data)
• Service providers have certified compliance with recognised frameworks (e.g., ISO 27001, SOC 2)
• Your consent is obtained where required by applicable law

If you are located in the European Economic Area (EEA) or United Kingdom, your personal data may be transferred to and processed in Singapore. We have implemented appropriate safeguards under GDPR Article 46 for such transfers.

Subject to applicable law and reasonable verification of your identity, you have the following rights regarding your personal data:

• Right of access: Request confirmation of whether we hold your personal data and obtain a copy of that data
• Right of correction: Request correction of inaccurate or incomplete personal data
• Right of erasure: Request deletion of personal data where there is no compelling reason for continued processing
• Right to withdraw consent: Withdraw previously given consent at any time, without affecting the lawfulness of processing before withdrawal
• Right to data portability: Where technically feasible, receive your personal data in a structured, commonly used format
• Right to restrict processing: Request restriction of processing in certain circumstances
• Right to object: Object to processing based on legitimate interests, including direct marketing
• Right not to be subject to automated decisions: Not be subject to purely automated decision-making with significant effects, without human review

To exercise any of these rights, please submit a request via our Contact page. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are dissatisfied with our handling of your personal data, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) Singapore at www.pdpc.gov.sg. EEA residents may also contact their local supervisory authority.

Our website and services are directed exclusively at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately and we will take steps to delete such information promptly.

Our website may contain links to third-party websites, plugins, or services (including LinkedIn, Twitter/X, and other platforms). Clicking these links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on our website does not constitute an endorsement of the third party’s privacy practices.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last Updated” date at the top of this Policy
• Post a notice on our website homepage for a reasonable period
• For significant changes, notify registered users or newsletter subscribers by email where reasonably practicable

We encourage you to review this Policy periodically. Your continued use of our website or services after any changes constitutes acceptance of the updated Policy. If you do not agree with any changes, please discontinue use and contact us to exercise your rights.

For any questions, concerns, or requests relating to this Privacy Policy or our data handling practices, please contact our Data Protection Officer:

We are committed to working with you to achieve a fair and prompt resolution of any privacy concern. We will acknowledge receipt of your request within 2 business days and provide a substantive response within 30 days.

Effective Date: January 2025  •  Last Updated: January 2025  •  © 2025 AI Force Singapore Pte. Ltd. All rights reserved.