Privacy policy
Last updated 23 September 2026
Draft. Not yet reviewed, and not yet true in every particular.
This text was drafted against what the site’s code actually does. The highlighted items are facts nobody has supplied yet, and the whole document needs a lawyer before it is relied on. Brief §7 and open decision 6.
This page explains what personal data this website collects, why, who sees it, how long we keep it, and how to ask us to change or delete it. It covers kavio.tech. Our products run on their own sites and have their own policies.
The short version: the only personal data this site collects is what you type into the contact form, plus the IP address the request came from. There are no cookies, no analytics and no trackers.
Who we are
This site is operated by [registered entity name] ([UEN]), trading as Kavio, at 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051.
We are the organisation responsible for the personal data described here, in the sense the Personal Data Protection Act 2012 uses that term.
What we collect
Only what you type, plus what a web request carries by necessity. There is no tracking on this site.
When you send us a message through the contact form, we receive and store:
- Your name and email address, which the form requires.
- Your company and your reason for contacting us, if you fill them in.
- The message itself.
- The IP address the request came from.
- The date and time of the submission.
The form also carries a hidden field that people never see and automated submitters usually fill in. If it arrives with anything in it, we treat the submission as spam.
When you join a product waitlist, we receive the same set, with a note of which product you asked about.
When you message us on WhatsApp, that conversation happens on WhatsApp, not here. It is covered by Meta’s privacy policy as well as ours, and we hold whatever you send us in it.
We do not use cookies and we run no analytics, no advertising pixels and no third-party trackers. The single thing this site stores in your browser is a note that you dismissed the WhatsApp button, which your browser discards when you close the tab and which never leaves your device. Our fonts are served from our own domain, so loading a page here does not tell anyone else that you visited.
Why we collect it, and on what basis
To reply to you. That is the whole purpose of the contact form, and under the PDPA our basis for handling what you send is the consent you give when you tick the box and submit it.
We use the IP address for one narrow purpose: limiting how many submissions can come from the same address in a short window, which is what keeps the form usable for people. We do not use it to identify or profile you, and it is never combined with anything else.
We do not sell personal data, we do not share it for anyone else’s marketing, and we will not add you to a mailing list because you asked us a question.
Who sees it
People at Kavio who are handling your enquiry. A submission also generates an email to our team so that somebody sees it promptly.
It is stored in our own database, hosted with [hosting provider and region], and the notification email is sent through [email provider]. Those two suppliers process the data on our instructions and for no purpose of their own.
We disclose personal data outside that set only where the law requires it of us.
How long we keep it
Enquiries are kept for [retention period], after which they are deleted. If a conversation turns into work, the records of that work are kept for as long as our engagement and our statutory obligations require, and no longer.
You can ask us to delete an enquiry sooner. See below.
Your choices
Under the PDPA you may ask us to:
- Tell you what personal data of yours we hold and how we have used it in the past year.
- Correct anything that is wrong.
- Delete what we hold, where we are not required to keep it.
- Withdraw the consent you gave. We will stop using your data for the purpose you withdraw it from, and tell you what that means for anything in progress.
Write to [DPO name and email]. We will respond within 30 days, and tell you sooner if we need longer and why.
How we protect it
Access is on a need-to-know basis, the connection between your browser and this site is encrypted, and enquiry data is stored in a system only our team can reach.
No system is perfect, and anyone who tells you theirs is should not be trusted with your data. If a breach ever affects you, we will notify you and the Personal Data Protection Commission as the law requires.
Children
This site is for people doing business with us, and is not directed at children. We do not knowingly collect personal data from anyone under 13.
Changes to this policy
When we change how we handle personal data, we change this page and move the date at the top. If a change is significant, we will say so here rather than leaving you to spot the difference.
Contacting us
Data protection questions go to [DPO name and email]. Anything else can go to hello@kavio.tech, or by post to the address above.
If you are not satisfied with how we have handled a request, you can raise it with the Personal Data Protection Commission of Singapore.
Questions about this page? Ask us, or write to the address in the footer.