Privacy Notice

This Privacy Notice explains how Quaintitative Private Limited (UEN 202601439C) ("we", "us", "the Company") collects, uses, discloses and protects your personal data. It covers our websites and services operated under the Quaintitative and Simply Boring AI names, including quaintitative.com, our learning platforms, our online courses and publications, our mailing lists, and our training, advisory and speaking services.

We comply with the Singapore Personal Data Protection Act 2012 (the "PDPA"). Where we serve visitors in the European Economic Area or the United Kingdom, we also have regard to the General Data Protection Regulation (GDPR).

1. What personal data we collect

Depending on how you deal with us, we may collect:

Contact and identity data: your name, email address, organisation, job title or role, and country, when you enquire, register for an event or course, join a mailing list, or engage our services.
Account and learning data: your sign-in details, course progress, submissions and assessment responses when you use our learning platforms.
Transaction data: records of the courses, publications or services you buy. Payments are handled by third-party payment providers; we do not collect or store your full card details.
Marketing data: your subscription to our newsletters or mailing lists and your communication preferences.
Usage and device data: your IP address, browser type, and how you use our sites, collected through analytics where you have agreed to it.
Communications: the content of your emails, messages and enquiries to us.

We do not set out to collect sensitive personal data. Please do not send us such data unless we ask for it for a specific, agreed purpose.

2. How and why we use your personal data

We use personal data to:

provide our training, advisory and speaking services, and respond to your enquiries;
operate our learning platforms and deliver the courses, publications and assessments you access;
process your purchases and keep proper business and accounting records;
send you updates, newsletters and marketing about our services, where you have consented or have an existing relationship with us, and always with a way to opt out;
maintain, secure and improve our sites and services; and
comply with our legal and regulatory obligations.

We collect and use your personal data with your consent, or where the PDPA otherwise allows, for example where it is reasonably necessary for a transaction you have asked for, or for our legitimate interests in running and improving our services. You may withdraw your consent at any time (see section 7).

3. Cookies and analytics

Our sites may store small amounts of information in your browser to make them work, for example to remember your progress or sign-in. We use analytics only after you have accepted it, and declining keeps the site free of analytics cookies. You can change your choice at any time.

4. Who we share your personal data with

We do not sell your personal data. We share it only as needed with:

Service providers who help us run our business, such as hosting and cloud storage, email and mailing-list tools, payment processing, and website and analytics providers. They may process your data only on our instructions and for these purposes.
Professional advisers such as our accountant or lawyers, where necessary.
Authorities, where we are required or permitted by law to disclose data.

5. Transfers outside Singapore

Some of our service providers store or process personal data outside Singapore. Where we transfer personal data overseas, we take steps to ensure it receives a standard of protection comparable to the PDPA, through the provider's contractual commitments and data protection terms. For visitors in the European Economic Area or the United Kingdom, transfers rely on standard contractual clauses or an equivalent safeguard.

6. How long we keep your personal data

We keep personal data only for as long as it is needed for the purposes above, or as required by law. For example, we keep mailing-list data until you unsubscribe, learning-account data while your account is active and for a reasonable period after, and financial records for at least five years as required for tax and accounting. We delete or anonymise data when it is no longer needed, or sooner on a valid request.

7. Your rights

Under the PDPA, you may:

ask for access to the personal data we hold about you and how we have used it;
ask us to correct personal data that is inaccurate or incomplete;
withdraw your consent to our use of your personal data, or unsubscribe from marketing at any time using the link in our messages; and
ask for a copy of certain data you have provided, in a commonly used electronic format.

To make a request, contact our Data Protection Officer (section 9). We will respond within a reasonable time, and ordinarily within 30 days. Withdrawing consent may mean we can no longer provide a service that depends on that data.

8. How we protect your personal data

We protect personal data with reasonable security measures, including encryption in transit and at rest, multi-factor authentication on our business accounts, access limited to those who need it, and the use of reputable service providers. If a data breach occurs that is likely to cause significant harm or is of significant scale, we will notify the Personal Data Protection Commission, and affected individuals where required, in line with the PDPA.

9. Data Protection Officer and contact

Our Data Protection Officer is Gary Ang. For any question, request or complaint about your personal data, contact:

Quaintitative Private Limited
Attention: Data Protection Officer
Email: ask@quaintitative.com

10. Changes to this notice

We may update this notice from time to time. The current version and its date are shown at the top. Material changes will be reflected here.