Privacy notice
Last updated 10 November 2026
This notice explains what personal data we collect through arthiq.si, when you book a briefing or when you contact us, what we do with it, and the rights you have. It does not cover data we process for clients; see “Client data” below.
Who we are
Arthiq Tech Pte Ltd (“Arthiq”, “we”), a company registered in Singapore (UEN 202545750G), at 68 Circular Road, #02-01, Singapore 049422. For the personal data described here we are the organisation responsible for it (the “controller” under the EU and UK GDPR).
Our data protection officer can be reached at privacy@arthiq.co.
What we collect
- Contact and booking details you give us: name, work email, organisation, role, the topic you choose, guests you add, your time zone, and anything you write in a booking or email.
- Assessment details when you use a tool on this site, such as the deployment fit check: your answers, the result, and the name, work email, company and role you give to receive the full report.
- Meeting details: the date and time of a briefing, and our own notes from it. We don’t record calls unless everyone on the call agrees first.
- Technical data when you visit: IP address, browser and device type, pages requested and the time of the request, kept in our hosting provider’s (Cloudflare) logs for security and to keep the site running.
- Visit statistics from Umami, an analytics tool we host ourselves. It sets no cookies and doesn’t store your IP address. It records pages viewed, referring site, browser, device type and country.
- Google Analytics data, only if you accept analytics cookies: pages viewed, how you got here, approximate location, device and browser, and an identifier stored in a cookie. Google Analytics doesn’t log or store IP addresses. If you decline, Google’s tags don’t load at all.
We collect this data from you directly, from your browser when you use the site, and from Cal.com when you book. We don’t buy personal data or collect special categories of data (such as health data) through this site. Please don’t send us any.
Why we use it, and our legal basis
| Purpose | Data | Legal basis (EU/UK GDPR) |
|---|---|---|
| Arrange and hold the briefing you booked, and reply to your enquiries | Contact, booking, meeting | Steps at your request before a contract; legitimate interest in answering business enquiries |
| Show and email you your assessment report | Assessment | Steps at your request before a contract |
| Follow up about working together, if you asked us to, after a briefing, or after you request an assessment report | Contact, meeting, assessment | Legitimate interest |
| Keep the site secure and working, and investigate misuse | Technical | Legitimate interest |
| Understand which pages are useful (aggregate statistics) | Umami visit statistics | Legitimate interest |
| Measure site use in more detail | Google Analytics data | Consent |
| Meet legal, tax and accounting obligations, and handle legal claims | Any of the above, where needed | Legal obligation; legitimate interest |
Under Singapore’s Personal Data Protection Act (PDPA), we rely on the consent you give when you send us your details or accept analytics cookies, consent that is deemed when you voluntarily give us data for a purpose, and the exceptions the PDPA allows, such as legitimate interests.
You don’t have to give us any personal data, but we can’t arrange a briefing without a name and email address. We don’t make decisions about you based solely on automated processing.
Marketing
We don’t send newsletters or marketing emails unless you ask for them. If you ever receive one, you can unsubscribe from it or tell us to stop, and we will.
Who we share it with
We don’t sell personal data or share it for advertising. We share it only with:
- Cloudflare, Inc.: website hosting, content delivery and security, and the database that stores assessment requests.
- Amazon Web Services, Inc.: Amazon SES, which sends the emails for assessment reports.
- Cal.com, Inc.: booking and scheduling.
- Google LLC / Google Ireland Ltd: Google Workspace for email, calendar and video calls (Google Meet); Google Analytics, only with your consent.
- Railway Corporation: hosts the server that runs our Umami statistics.
- Professional advisers such as lawyers and accountants, under a duty of confidentiality.
- Authorities, where the law requires it or to protect our rights.
- A buyer or successor, if our business is reorganised or sold, under this notice.
These providers act on our instructions under data processing terms, except where they act as an independent controller under their own terms (for example, Google for some Analytics processing, which our settings limit).
The same providers, with purpose and region, are on our sub-processor list.
International transfers
We are based in Singapore, and our providers process data in other countries, including the United States and the European Union. When we transfer personal data out of the country it was collected in, we use safeguards that the law recognises: the EU Standard Contractual Clauses and the UK addendum to them, the EU–US Data Privacy Framework where a provider is certified, and contracts that meet the PDPA’s transfer requirements. You can ask us for details.
How long we keep it
- Enquiry, booking and assessment details: up to 24 months after our last contact. If we start working together, our contract with your organisation sets how long we keep them.
- Cloudflare logs: according to Cloudflare’s standard retention, typically days to weeks.
- Umami statistics: kept as aggregate statistics with no cookie or stored IP address attached.
- Google Analytics data: Google’s default retention, which keeps visit-level data for 2 months. After that, only aggregated reports remain, which don’t identify you.
- Records we must keep by law, such as invoices: for the period the law requires (in Singapore, generally 5 years).
How we protect it
Access to personal data is limited to the people who need it and protected by multi-factor authentication, and our providers encrypt it in transit and at rest. If a data breach is likely to cause you significant harm, we will tell you and the relevant regulator as the law requires.
Your rights
Depending on where you live, you can ask us to: tell you what personal data we hold about you and how we’ve used it; correct it; delete it; restrict or object to how we use it, including for direct marketing; send it to you or another organisation in a portable format; and withdraw your consent at any time. Withdrawing consent doesn’t affect anything done before you withdrew it. To withdraw analytics consent, use Cookie settings in the footer.
Email privacy@arthiq.co. We may need to confirm your identity first. We reply within 30 days and don’t charge a fee unless a request is clearly unfounded or excessive.
If you’re unhappy with how we’ve handled your data, please tell us first. You can also complain to Singapore’s Personal Data Protection Commission (pdpc.gov.sg), the data protection authority in your EU country, or the UK Information Commissioner’s Office (ico.org.uk).
Children
This site is meant for businesses and isn’t directed at anyone under 18. We don’t knowingly collect personal data from children. If you think a child has sent us their data, tell us and we’ll delete it.
Client data
When we build or run systems for clients, any personal data involved is handled under our contract and data processing agreement with that client, who decides how it is used. We act as a processor (in PDPA terms, a data intermediary). Questions about that data should go to the client first.
Changes to this notice
We’ll update this notice when our practices change, and the date at the top shows the latest version. If a change is significant, we’ll make it clear on this page and, where the law requires, ask for your consent again.
Contact
Arthiq Tech Pte Ltd, 68 Circular Road, #02-01, Singapore 049422. privacy@arthiq.co.