Privacy policy

Controller: API Orbit Consulting Pte. Ltd. (UEN 201947382M), 12, Tanjong Pagar Road, 088535 Singapore.
Data Protection Officer: Darren Koh — contact via info@apiorbit.digital or +65-6000-1905.

This policy explains how we collect, use, and protect personal data under the Personal Data Protection Act 2012 (PDPA) as amended.

What we collect

When you submit the contact form we collect your name, email address, optional phone number, and message content. We also store your cookie consent choice locally in your browser (see our Cookie policy). We do not run analytics, advertising pixels, or third-party tracking on this website.

Purposes and legal bases

We process inquiry data to respond to your request, prepare proposals, and perform pre-contract steps you initiate (PDPA consent and legitimate interest in operating our business). We do not use inquiry data for unrelated marketing lists.

Retention

Inquiry records are kept for up to twenty-four months after our last meaningful correspondence unless a longer period is required for legal or accounting obligations. Consent preferences remain in your browser until you clear site data.

Protection and transfers

Data is accessed only by staff who need it to respond. Systems holding inquiry email are protected with access controls and encryption in transit (TLS). We do not sell personal data. If we ever use a processor outside Singapore, we will ensure PDPA-compliant safeguards and update this policy.

Your rights

You may request access to, correction of, or withdrawal of consent for your personal data, subject to legal exceptions. Contact the DPO at the details above. You may also lodge a complaint with the Personal Data Protection Commission (PDPC).

Do Not Call

If you provide a Singapore telephone number, we will not use it for unsolicited marketing calls or messages unless you have given clear consent or an exemption applies.

Data breaches

If we assess a data breach as notifiable under PDPA, we will notify the PDPC as soon as practicable and no later than three calendar days after that assessment, and notify affected individuals where significant harm is likely.

Updates

We may update this policy to reflect legal or operational changes. The current version is published at https://apiorbit.digital/privacy/.

Last reviewed: 23 October 2026.