Personal Data Protection Policy
Controller: Core Weave Consulting Pte. Ltd. (UEN 201934864K), 24, Upper Thomson Road, 574354 Singapore, Singapore.
Data Protection Officer: Lakshmi Venkatesh — contact via info@core-weave.digital or +65-6000-1908.
This policy explains how we collect, use, and protect personal data under the Personal Data Protection Act 2012 (PDPA) of Singapore, including amendments effective 2020 and data breach notification requirements in force from 1 February 2021.
What we collect
- Inquiry form: name, email, optional phone, and your message. A hidden honeypot field may be logged server-side for spam filtering.
- Cookie preference: a value stored in your browser’s local storage when you accept or reject the cookie notice (see Cookies).
- Server logs: our hosting provider may process technical connection data when you load pages; we do not use that data for profiling or advertising.
We do not run analytics, advertising pixels, or third-party tracking on this website.
Purposes and legal bases
We process inquiry data to respond to your request, prepare proposals, and perform steps prior to entering a contract. Consent is obtained when you submit the form. Cookie preference storage supports your choice about non-essential storage as described on the cookie page.
Retention
Inquiry records are kept for up to twenty-four months after the last meaningful correspondence unless a longer period is required for legal or accounting obligations. Cookie preference values remain until you clear site data or change your choice via the footer link.
Security and transfers
We apply access controls appropriate to a small consultancy. Inquiry submissions are posted to a same-domain API endpoint (/api/inquiry) operated for our business. We do not sell personal data. Cross-border transfers, if any via hosting, are limited to service providers bound by confidentiality and security obligations.
Your rights
You may request access to, correction of, or withdrawal of consent for personal data we hold about you, subject to exceptions under the PDPA. Contact the DPO at the email above. You may also register with the Do Not Call Registry for marketing voice/text messages; we do not send unsolicited marketing based on inquiry forms.
Data breaches
If we assess a notifiable data breach, we will notify the Personal Data Protection Commission as soon as practicable and no later than three calendar days after that assessment, and notify affected individuals where significant harm is likely, consistent with PDPA breach notification duties.
Updates
We may update this policy to reflect legal or operational changes. The review date for this version is 23 October 2026.