Privacy Policy

Batik Compass (“we”, “us”, “our”) is a business consulting firm registered and operating in Singapore. We take our obligations under Singapore’s Personal Data Protection Act 2012 (PDPA) seriously, and this Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with our website and consulting services.

This policy applies to personal data collected through our website at batikcoms.biz, through our contact forms, and through the course of client engagements.

Questions about this policy may be directed to [email protected].

2.1 Data You Provide Directly

• Contact form submissions: name, email address, phone number, and message content.
• Engagement correspondence: communications exchanged during a consulting engagement, including emails, meeting notes, and documents you share with us.
• Contractual information: name, organisation, and contact details included in service agreements.

2.2 Data Collected Automatically

• Usage data: pages visited, time on site, browser type, and device type — collected via analytics tools where you have consented to analytics cookies.
• Cookie data: preferences stored in your browser’s local storage. See our Cookie Policy for details.

2.3 Data We Do Not Collect

We do not collect sensitive personal data (such as NRIC numbers, medical information, or financial account details) through our website. We do not collect data from individuals under 18 years of age.

• Responding to enquiries: processing contact form submissions and communicating with prospective clients about our services.
• Delivering consulting services: fulfilling obligations under service agreements with clients.
• Improving our website: analysing usage patterns, where you have consented to analytics cookies.
• Legal and contractual compliance: meeting our obligations under applicable Singapore law.
• Business communications: relevant updates to existing clients where there is a legitimate basis to do so.

We do not use your personal data for unsolicited marketing. We do not sell personal data to third parties under any circumstances.

• Consent: where you have voluntarily provided data through our contact form or agreed to optional cookie categories.
• Contractual necessity: where processing is required to fulfil a service agreement.
• Legitimate interests: where processing is reasonably necessary for our business purposes and does not override your rights.
• Legal obligation: where processing is required by applicable Singapore law or regulation.

• Service providers: third-party providers assisting with website operation or service delivery (hosting, email, analytics), bound by data processing agreements.
• Analytics services: anonymised or pseudonymised usage data may be processed by analytics providers such as Google Analytics, where you have consented.
• Legal requirements: where disclosure is required by Singapore law, a court order, or a competent regulatory authority.
• Business transfers: in the event of a merger or acquisition, personal data may transfer to a successor entity subject to the same protections.

• Contact form enquiries: 12 months from submission, or until resolved.
• Client engagement records: 5 years from conclusion of the engagement.
• Analytics data: per the analytics provider’s standard retention settings (typically 26 months).
• Cookie preferences: stored in your browser’s local storage until cleared by you.

• TLS encryption for data transmitted to and from our website
• Named-access only for all client engagement materials
• Access controls restricting client data to authorised personnel
• Secure disposal of client materials at the end of the retention period

In the event of a notifiable data breach under the PDPA, we will inform the Personal Data Protection Commission and affected individuals within the legally required timeframes.

Our website uses cookies and similar technologies. Essential cookies are always active. Optional cookies — analytics and marketing — are only activated with your consent. Manage your preferences at any time on our Cookie Policy page.

Our website may contain links to third-party websites. We are not responsible for their privacy practices. A link does not constitute endorsement of any third party’s data handling.

Our services are directed at business professionals and are not intended for individuals under 18. We do not knowingly collect data from minors. If we become aware of such data, we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. For material changes, we will take reasonable steps to bring them to your attention. Continued use of our website constitutes acknowledgement of the updated policy.