CROSVA Privacy &
Data Protection Policy.
How CROSVA PTE LTD collects, uses, handles, and protects business enquiry and diagnostic information under the Singapore Personal Data Protection Act 2012 (PDPA).
How does CROSVA handle enquiry data under Singapore PDPA?
CROSVA PTE LTD collects only the business contact details (name, work email, company) and operational context needed to qualify enquiries and prepare AI Readiness Assessments. Data is transmitted via encrypted TLS 1.3, processed server-side without persistent browser storage, and never sold, rented, or used to retrain public AI models.
Statutory Basis: Personal Data Protection Commission Singapore (PDPC) · PDPA 20121. Our Commitment to Data Privacy
CROSVA PTE LTD ("CROSVA", "we", "us", or "our") respects the privacy and confidentiality of individuals and business representatives who interact with our website (crosva.com.sg) and services. This Privacy Policy outlines our data management practices in accordance with the Singapore Personal Data Protection Act 2012 (PDPA).
Categories of Information Collected & Purpose Limitation
| Data Category | Specific Data Items | Purpose Limitation | Retention Schedule |
|---|---|---|---|
| Business Contact Details | Representative Name, Work Email Address | Enquiry communication, consultation scheduling | Retained during active engagement; archived per Singapore statutory requirements |
| Organizational Context | Company Name, Indicative Headcount, Industry | Scoping diagnostic relevance and feasibility | Archived with commercial project record |
| AI Operational Indicators | Current AI adoption stage, primary challenge, concern | Customizing the AI Readiness Assessment report | Used for diagnostic synthesis; never shared externally |
| Marketing Consent | Opt-in status (un-ticked by default) | Sending opt-in technical briefings; revocable anytime | Retained until consent withdrawal or unsubscribe notice |
2. What We Collect Through Lead Forms
When you request a Free AI Readiness Assessment, schedule a strategy consultation, or make a general business enquiry, we collect only the business contact and qualification data necessary to evaluate your request:
- Representative Details: Full name and work email address.
- Organisation Context: Company name, indicative company size, and industry sector.
- Operational AI Indicators: Current AI usage stage, primary operational bottleneck, main data/governance concern, indicative timeline, and project notes.
Important Notice: We do not request, require, or ingest passwords, bank details, unredacted customer records, or confidential commercial contracts through our public website forms. Please do not submit sensitive personal data (such as NRICs or biometric records) through web intake.
3. Purpose of Collection & Use
The information you provide is used solely for legitimate business purposes:
- Evaluating your company's operational profile to prepare the AI Readiness Assessment.
- Contacting your representative via email to discuss scoping, technical feasibility, and consultation availability.
- Responding to specific service inquiries regarding engineering, governance, and workflow automation.
- Maintaining business records and preventing duplicate submissions or automated spam.
4. Marketing Communications & Consent
Submitting a business enquiry does not automatically subscribe you to marketing or promotional newsletters. Marketing updates are governed by a separate, un-ticked consent option. If you opt in, you may withdraw your consent at any time by contacting our Data Protection Officer or by using the unsubscribe link in our correspondence.
5. Data Storage, Security & Retention
We apply industry-standard security safeguards to protect your personal data against unauthorised access, alteration, or disclosure:
- Encryption in Transit: All website interactions and form transmissions are encrypted via Transport Layer Security (TLS 1.3).
- No Client Storage: Personal enquiry data is transmitted directly to our secure server-side intake and is not stored in your browser's persistent local storage.
- Retention Schedule: We retain enquiry information only for as long as necessary to fulfil the business purpose for which it was collected or to comply with legal record-keeping obligations in Singapore.
- Zero Unauthorized Disclosure: We never sell, rent, or trade your contact details to third-party advertisers or data brokers.
6. Your Rights & Access Requests
Under the Singapore PDPA, you have the right to request access to the personal data we hold about you and to request the correction of any inaccurate data. You may also withdraw your consent for our collection, use, or disclosure of your personal data at any time, subject to legal and contractual conditions.
7. Contacting Our Data Protection Team
For any questions regarding this Privacy Policy, data access requests, or to exercise your rights under Singapore PDPA, please contact our designated Data Protection team: