Privacy Policy

1. About this policy

Acuitas Singapore (“Acuitas”, “we”, “us”, “our”) is committed to handling personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This policy explains what personal data we collect through this website and our services, why we collect it, how we use and protect it, and the rights you have under the PDPA.

For matters specific to our compliance with the PDPA — including your rights and how to contact our Data Protection Officer — please also read our PDPA notice.

2. What we collect

We collect personal data you provide to us directly, and limited technical data from your use of this website.

Information you provide

• Contact details such as name, email address, phone number, and company.
• Business information you share with us through our contact form or during a consultation — for example business type, outlet count, current accounting setup, software used, and the operational issues you want help with.
• Information shared during the course of an engagement — accounting records, payroll information, tax information, banking information, supplier records, and other data necessary to deliver our services.

Information collected automatically

• Standard server logs (IP address, browser type, pages visited, referrer URL, timestamps).
• Aggregated, anonymised analytics via Vercel Analytics and Vercel Speed Insights, which we use to understand site performance and content effectiveness. These services do not use cookies that identify individuals.

3. Why we collect it

We use personal data for the following purposes:

• To respond to enquiries you make through our contact form or by email.
• To provide and deliver our accounting, corporate secretarial, tax, advisory, dashboards, and automation services.
• To meet our regulatory and statutory obligations as a service provider in Singapore.
• To communicate with you about your engagement — deliverables, deadlines, queries, billing.
• To improve this website, our service design, and our internal operations.
• To detect and prevent fraud or misuse of our services.

4. Legal basis and consent

We collect, use, and disclose personal data based on your consent, or where permitted or required under the PDPA — for example to perform a contract with you, to meet a legal obligation, or where the collection is reasonably appropriate in the circumstances.

You may withdraw consent for any non-mandatory use of your data by writing to us at hello@acuitas.sg. If you withdraw consent for processing that is necessary for us to deliver our services, we may no longer be able to provide those services.

5. Who we share data with

We do not sell personal data. We share personal data only with:

• Service providers we use to deliver our work. This includes our accounting platform (Xero), expenditure banking platform (Aspire), email infrastructure, hosting (Vercel), and similar operational tools. Each of these is bound by their own privacy and security commitments.
• Government agencies and regulators where we are required to file information on your behalf — for example ACRA, IRAS, and CPF Board.
• Professional advisors we engage on your behalf (for example external auditors or legal advisors), only with your consent and only to the extent necessary.
• Law enforcement or other authorities where disclosure is required by law.

6. Where data is held

Acuitas operates from Singapore. Our primary client data sits on cloud platforms operated by reputable providers (notably Xero and Aspire) which host data in regions appropriate to their certifications. Where data is transferred outside Singapore, we ensure transfers comply with the PDPA's transfer-limitation obligations — including, where applicable, the recipient being bound by legally enforceable obligations to provide a comparable standard of protection.

7. How long we keep data

We keep personal data only for as long as we need it for the purposes set out above, or for as long as we are required to keep it under applicable law. For accounting records, the Singapore Companies Act and Income Tax Act require retention for at least 5 years from the relevant Year of Assessment. After that, we securely dispose of or anonymise the data.

8. How we protect data

We take reasonable steps to protect personal data against unauthorised access, modification, disclosure, loss, or destruction. These include:

• Role-based access control on systems that hold client data.
• Encryption in transit (HTTPS / TLS) for all data moving between you, this site, and our systems.
• Two-factor authentication on the systems we use to deliver our services.
• Regular review of access logs and access rights.
• Reliance on platforms (Xero, Aspire, Vercel) with their own established security and compliance posture.

See our security and data-handling page for more detail.

9. Your rights

Under the PDPA, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent for non-mandatory uses of your personal data.
• Make a complaint to us, and, if unresolved, to the Personal Data Protection Commission (PDPC) of Singapore.

To exercise any of these rights, please contact us using the details below.

10. Cookies and tracking

This site uses minimal first-party tracking via Vercel Analytics and Vercel Speed Insights. These services collect anonymised, aggregated usage and performance data and do not use cookies that identify individual visitors. We do not use third-party advertising cookies or behavioural ad-tracking pixels.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page indicates when it was last revised. Material changes will be flagged on our website.

12. Contact

For any privacy-related question or to exercise your rights under the PDPA, please email hello@acuitas.sg. Our Data Protection Officer can be reached at the same address.