Legal
Privacy Policy
Last Updated: 14 April 2025
1. Introduction
Quintaro ("we", "us", "our") is committed to handling personal information with care. This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and what rights you have in relation to it. It applies to all users of this website and to individuals who engage with us in connection with our consulting services.
Quintaro operates from 80 Raffles Place, #36-01, Singapore 048624, and is subject to Singapore's Personal Data Protection Act 2012 (PDPA). If you have any questions about this policy, please contact us at [email protected].
2. What Personal Data We Collect
We collect personal data in the following circumstances:
- Contact form submissions: Name, email address, phone number (optional), and any information you include in the message field.
- Email and phone enquiries: Your name, contact details, and the content of your communication.
- Engagement process: Background documents, company information, and other materials you share with us as part of a consulting engagement. This material is treated with strict confidentiality beyond the scope of this policy.
- Website analytics: Anonymous usage data such as pages visited, browser type, and referral source, collected through cookies where you have consented.
We collect only the personal data that is necessary for the purpose for which it is being collected. We do not purchase, rent, or obtain personal data from third-party sources.
Legal basis for processing: We process personal data on the basis of your consent (for analytics cookies), legitimate interest (for responding to enquiries and managing engagements), and contractual necessity (where you have engaged our services).
Retention: Contact enquiry data is retained for up to 24 months unless an engagement results, in which case it is retained for 7 years in line with standard business record-keeping. Analytics data is retained for up to 14 months.
3. How We Use Your Personal Data
- To respond to enquiries submitted via the contact form or by email or phone.
- To arrange and conduct consulting engagements you have requested.
- To prepare written documents related to your engagement.
- To comply with legal obligations applicable to us in Singapore.
- To improve our website's usability, using aggregated and anonymised analytics data.
We do not use your personal data for unsolicited marketing purposes. We do not share your personal data with third parties for their own marketing use.
Third-party service providers: We may share limited data with trusted service providers who assist us in operating this website (such as web hosting and analytics). These providers are bound by appropriate data processing agreements and may not use your data for their own purposes.
4. Data Protection Measures
We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. These measures include:
- Encrypted data transmission via HTTPS on this website.
- Access controls limiting who within our practice can access personal data.
- Secure storage of engagement-related documents with restricted access.
- Regular review of our data handling practices.
In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify the Personal Data Protection Commission (PDPC) and affected individuals as required under the PDPA Notification Obligation.
5. Cookies
This website uses cookies — small text files stored on your device. Essential cookies are required for basic site functionality. Analytics and preference cookies are only activated with your consent, which you can manage at any time. For full details, please see our Cookie Policy.
6. Your Rights Under the PDPA
Under Singapore's Personal Data Protection Act, you have the following rights in relation to personal data we hold about you:
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may request that inaccurate or incomplete personal data be corrected.
- Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time, though this will not affect processing that has already taken place.
- Data portability: Where applicable, you may request that your data be provided in a commonly used electronic format.
- Erasure: In certain circumstances, you may request that we delete personal data we hold about you.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
If you are dissatisfied with how we handle your personal data, you may also lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.
7. Third-Party Links
This website may contain links to external sites. Quintaro is not responsible for the privacy practices of those sites and we encourage you to review their privacy policies before providing any personal data to them.
8. Children's Privacy
Our services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have done so, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page will reflect when the policy was last updated. Continued use of this website following any changes constitutes your acceptance of the revised policy.
10. Contact
For any privacy-related questions or requests, please contact: