Who we are
This Privacy Policy explains how UFUQORA AI PTE. LTD (“UFUQORA AI”, “we”, “us”), a company registered in Singapore, handles personal data when you visit ufuqora.com, contact us, or do business with us. We are the organisation responsible for that personal data (the “controller” under the EU General Data Protection Regulation).
This policy is designed to meet the requirements of Singapore’s Personal Data Protection Act 2012 (PDPA), the EU General Data Protection Regulation (GDPR) and applicable United States state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
Where we process personal data on behalf of a customer as part of a service (for example, data a customer uploads to an AI service we run for them), we act as a data intermediary or processor and handle that data under our agreement with the customer. This policy does not cover that processing.
Information we collect
Information you send us. When you email us or use the contact form, we receive the details you choose to include, such as your name, work email address, company, country or region, the service you are interested in and your message. The contact form does not send anything to a server; it opens your own email app with a pre-filled message, so we only receive what you decide to send.
Business relationship information. If you become a customer or supplier, we keep contact details, contract and billing records, and correspondence needed to run the relationship, including information required for export-control and sanctions screening.
Information collected by this website. This website does not use cookies, analytics, advertising tags or similar tracking technologies, and it does not ask your browser to store anything. Fonts and images are served from our own domain. Our hosting provider, Cloudflare, processes technical data such as IP addresses and request details to deliver the website and protect it from abuse; see the section on service providers below.
We do not knowingly collect sensitive personal data through this website, and we ask you not to include it in messages.
How we use your information
We use personal data to:
- respond to your enquiries and provide quotations;
- enter into and perform contracts with customers and suppliers;
- carry out export-control, sanctions and other legally required checks;
- operate, secure and improve our services and this website;
- meet our legal, accounting and regulatory obligations; and
- establish, exercise or defend legal claims.
We do not use personal data from enquiries for automated decision-making that produces legal or similarly significant effects, and we do not use it to train AI models.
Legal bases for processing
Under the PDPA, we collect, use and disclose personal data with your consent, or where the PDPA otherwise permits, such as for the performance of a contract you have requested or for legitimate business purposes as the PDPA allows.
Under the GDPR, we rely on:
- contract, where processing is needed to take steps at your request before entering into a contract, or to perform it;
- legitimate interests, such as responding to business enquiries, securing our systems and managing our business, balanced against your rights;
- legal obligation, such as tax, accounting and export-control requirements; and
- consent, where we ask for it. You can withdraw consent at any time without affecting earlier processing.
Sharing your information
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
We share personal data only with:
- service providers who help us operate, such as email, hosting (including Cloudflare), cloud infrastructure, accounting and professional advisers, under contracts that require them to protect it and use it only on our instructions;
- authorities and regulators, where required by law or to comply with export-control and sanctions obligations; and
- a successor organisation, if our business is reorganised or transferred, subject to this policy.
International transfers
We are based in Singapore and some of our service providers operate in other countries. When we transfer personal data outside Singapore, we take steps to ensure it receives a standard of protection comparable to the PDPA, as the PDPA requires. When we transfer personal data from the European Economic Area or the United Kingdom to countries without an adequacy decision, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
How long we keep information
We keep enquiry correspondence for up to 12 months after our last contact, unless it leads to a business relationship. We keep contract, billing and screening records for as long as the law requires, which in Singapore is generally at least five years. When we no longer need personal data, we delete or anonymise it.
How we protect information
We protect personal data with administrative, technical and physical safeguards appropriate to the risk, including encryption in transit, access controls based on least privilege, and logging. Our practices are described on our Data Security page. No system is completely secure, but we work to prevent, detect and respond to incidents. If a data breach is likely to result in significant harm, we will notify the Personal Data Protection Commission and affected individuals as the PDPA requires, and supervisory authorities as the GDPR requires.
Your rights
Singapore (PDPA). You may ask to access the personal data we hold about you and how it has been used or disclosed in the past year, ask us to correct it, and withdraw your consent to its collection, use or disclosure.
European Economic Area and United Kingdom (GDPR). You may request access, rectification, erasure, restriction of processing and data portability, and you may object to processing based on our legitimate interests. You also have the right to complain to your local data protection authority.
United States (CCPA/CPRA and similar state laws). Depending on where you live, you may have the right to know what personal information we collect and how we use it, to access, correct or delete it, and to opt out of its sale or sharing. We do not sell or share personal information as those laws define it. We will not discriminate against you for exercising your rights.
To make a request, email us using the details below. We may need to verify your identity before acting on it, and we will respond within the time the applicable law requires.
Children
Our services are intended for businesses. This website is not directed at children, and we do not knowingly collect personal data from anyone under 18.
Data Protection Officer and contact
You can contact our Data Protection Officer at [email protected], marked “Attn: Data Protection Officer”.
If you are in Singapore and are not satisfied with our response, you may contact the Personal Data Protection Commission. If you are in the European Economic Area or the United Kingdom, you may contact your local data protection authority.
Changes to this policy
We may update this policy from time to time. The effective date shown on this page tells you when it last changed. If we make material changes, we will take reasonable steps to let you know.