Privacy Policy

1. Introduction

Tengah Works ("we", "us", "our") is committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices you have regarding your information.

This policy applies to all personal data collected through our website at https://tengahworks.live and through our service engagements. If you have questions about anything in this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: Name, email address, phone number (optional), and message content.
• Service engagements: Business name, contact details, and operational information shared during Centring Sessions, Aligned Integrations, or Even Keel Retainer arrangements.
• Website usage: Cookies and analytics data (see Section 5 and our Cookie Policy for details).

We do not collect sensitive personal data such as financial account details, national identity numbers, or medical information.

Retention: Contact form data is retained for up to 24 months. Engagement records are retained for up to 5 years for legal and business continuity purposes. Analytics data is typically retained for 14 months.

3. How We Use Your Data

Personal data is used for the following purposes:

• Responding to enquiries and delivering the services you have requested.
• Arranging and carrying out sessions, integrations, or retainer support.
• Sending written summaries, diagrams, and updates related to your engagement.
• Issuing invoices and maintaining financial records as required by law.
• Improving our website and services based on aggregate, anonymised usage patterns.

We do not use your personal data for unsolicited marketing purposes. If we wish to send you updates beyond the scope of your current engagement, we will ask for your explicit consent first.

Legal basis: We process personal data on the basis of your consent (contact form submissions), performance of a contract (service engagements), and legitimate interest (website security and analytics).

4. Data Sharing

We do not sell, rent, or trade personal data. We share personal data with third parties only in the following limited circumstances:

• Service providers: We use trusted third-party services for website hosting, email delivery, and analytics. These providers are bound by data processing agreements and may not use your data for their own purposes.
• Legal requirements: We may disclose data to comply with applicable law, a court order, or a regulatory authority in Singapore.

Where data is transferred outside Singapore, we take reasonable steps to ensure it receives comparable protection.

5. Cookies

Our website uses cookies to support basic site functionality and to understand how visitors use the site. We use four categories of cookies: essential (always active), analytics (optional), marketing (optional), and preference (optional).

You can manage your cookie preferences at any time through our Cookie Policy page. Declining non-essential cookies does not affect your ability to use the website.

6. Data Protection

We take the security of personal data seriously. Measures in place include:

• HTTPS encryption on all pages of our website.
• Access to client data limited to team members who need it for service delivery.
• Periodic review of data we hold to remove what is no longer needed.
• Confidentiality obligations in all service agreements.

In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) of Singapore within three calendar days of discovering the breach, as required under the PDPA.

7. Your Rights

Under the PDPA, you have the following rights in relation to personal data we hold about you:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Withdrawal of consent: Withdraw consent for any processing based on consent. This does not affect the lawfulness of processing before withdrawal.
• Erasure: Request deletion of data we no longer have a legal basis to retain.
• Portability: Request a structured copy of data you have provided to us, where technically feasible.

To exercise any of these rights, email [email protected]. We will acknowledge your request within five working days and respond within thirty days.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.

8. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information to them.

9. Children's Privacy

Our services are directed at business owners and their staff, who are expected to be 18 years of age or older. We do not knowingly collect personal data from persons under 18. If we become aware that we have collected data from a minor, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by an updated date at the top of this page. If changes are material, we will take reasonable steps to notify clients who have active engagements with us. Continued use of our website or services after the updated date constitutes acceptance of the revised policy.