Skip to content

Legal

Privacy Policy

Effective 11 November 2026

In short

  • We collect only what you give us in the enquiry form, plus the technical data needed to keep the form safe.
  • We use it to reply to you and to talk about your project. We do not sell it and we do not send marketing emails you did not ask for.
  • A small number of service providers handle it for us. Some are outside Singapore.
  • You can ask to see, correct or delete your details at any time by emailing privacy@qutrilabs.com.

Who we are

This website, qutrilabs.com, is run by QutriLabs Pte. Ltd. (UEN 202651481H), a software studio in Singapore ("QutriLabs", "we", "us"). We handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).

What we collect

When you send an enquiry. The name, company, business email, project type, optional budget answer and message you type into the form. Please do not include anything sensitive, such as identity numbers or financial details, and do not send us other people's personal data unless you are allowed to.

To keep the form safe. When you use the form, Cloudflare Turnstile checks that you are a person and not a bot. Turnstile looks at technical signals such as your IP address, browser details and the site you are on. We also use your IP address, through Cloudflare, to limit how many enquiries can be sent from one network in a short time. We do not store your IP address and it is not included in the enquiry we receive.

When you visit the site. Our hosting provider, Cloudflare, handles every request to the site, which includes your IP address and browser details, so that pages load and the site stays protected. We use Cloudflare Web Analytics to see which pages are visited and how fast they load. It does not use cookies or local storage and does not fingerprint individual visitors.

When you email us directly. If you write to hello@qutrilabs.com, we keep your message and your email address.

Cookies

We do not set cookies of our own and we do not use advertising or tracking cookies. Cloudflare Turnstile, which appears only on the Contact page, may use technical storage that is strictly needed to tell people from bots.

Why we use your data

  • To reply to your enquiry and talk with you about your project.
  • To prepare a quote or proposal if you ask for one.
  • To keep a record of our conversations, so we do not make you repeat yourself.
  • To protect the site from spam and abuse.
  • To understand, in aggregate, how the site is used and make it better.
  • To meet our legal obligations.

We will not use your details for anything else without asking you first.

Your consent

By sending the enquiry form after reading this policy, you agree to us collecting, using and disclosing your details for the purposes above. You can withdraw your consent at any time by emailing privacy@qutrilabs.com. If you do, we will stop using your details for those purposes, although we may not be able to continue a conversation about your project. We may still keep records the law requires us to keep.

Who we share it with

We share personal data only with service providers that help us run the site and handle enquiries, and only as needed for that:

  • Cloudflare: hosting, bot checks (Turnstile) and site analytics.
  • Resend: sends the enquiry from the website to our inbox. We have set Resend to send through its servers in Tokyo, Japan.
  • Zoho: hosts our email, so it stores the enquiries and emails we receive. Our Zoho mailbox is on servers in Singapore.

We may also share data with our professional advisers, such as accountants or lawyers, when we need their advice, and with authorities when the law requires it. We do not sell personal data.

Transfers outside Singapore

Your enquiry leaves Singapore when it is sent. Resend processes it on servers in Tokyo, Japan. Cloudflare runs a global network, so the technical data it handles when you visit the site, or use the bot check, may be processed in other countries too. Zoho stores our email on servers in Singapore. Before relying on a provider, we check that its terms commit it to protecting personal data to a standard comparable to the PDPA, as the PDPA requires for overseas transfers.

How long we keep it

  • An enquiry that does not lead to work: up to 12 months after our last contact, then we delete it.
  • If we work together: for the length of the project and afterwards for as long as we need the records for support, disputes or legal reasons. For example, accounting records are kept for at least 5 years.
  • Site analytics are aggregate numbers and do not identify you.

How we protect it

The site uses an encrypted (HTTPS) connection. Enquiries arrive by email in a mailbox that only people at QutriLabs can open, and the keys that connect the website to its services are stored as protected settings, not in the code. No system is perfectly secure. If a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commission as the law requires.

Your rights

You can ask us to:

  • tell you what personal data of yours we hold and how we have used or disclosed it in the past year;
  • correct anything that is wrong;
  • stop using your data, by withdrawing your consent;
  • delete your data, where we no longer need it.

Email privacy@qutrilabs.com. We may need to confirm who you are first. We aim to reply within 30 days and, if we cannot, we will tell you when you can expect an answer. Where the law allows, we may charge a reasonable fee for providing a copy of your data and will tell you the amount first.

Data protection contact

Our Data Protection Officer is Balasubramanian Manish, a co-founder, and he can be reached at privacy@qutrilabs.com. Please use this address for any request or question about your personal data.

Complaints

If you are unhappy with how we handled your data, please write to us first and we will try to put it right. You can also contact the Personal Data Protection Commission at pdpc.gov.sg.

Changes to this policy

If we change this policy, we will update this page and the date at the top. If a change affects how we use data you have already given us, we will ask for your consent again where the law requires it.