1. About this policy

Adair Advisory Pte Ltd ("Adair," "we," "us") respects the privacy of everyone who visits this website or contacts us about our work. This policy describes what personal data we collect, why we collect it, how we handle it, and the rights you have under the Singapore Personal Data Protection Act 2012 ("PDPA").

This is the kind of document most people skim. We've kept it short, written it in plain English, and put the things that matter most near the top.

2. What we collect

We collect personal data only when you provide it, when you visit our website, or when it is strictly necessary for our work.

You provide directly:

• Name, email address, and any details you share when you contact us, book a call, or correspond with us.

• Information you choose to share during a confidential conversation, including details about your business, your decisions, and your plans.

We collect automatically:

• Technical data: IP address, browser type, device type, referring URL, pages visited.

• Cookie data (described in Section 7).

We do not collect:

• Sensitive personal data unless you explicitly choose to share it during an engagement.

• Payment card data. We do not process card payments through this website.

3. How we collect it

• Through our contact form and email correspondence.

• Through scheduling tools when you book a call (e.g., Calendly).

• Through standard server logs.

• Through analytics cookies, with your consent where required.

• Through any document, file, or message you choose to share with us during an engagement.

4. Why we collect it

We collect personal data for the following purposes:

1. To respond to your enquiry or arrange a confidential conversation.

2. To prepare for and deliver an engagement, if we agree to work together.

3. To send a single follow-up after our first conversation, if appropriate. We do not operate a marketing list and we do not send unsolicited follow-ups.

4. To meet our legal and regulatory obligations.

5. To secure and improve this website.

We do not use personal data for automated decision-making.

5. How we use and disclose it

Personal data you share with us during an engagement is treated as confidential. It is used only by:

• The principal handling your engagement.

• Specialists we coordinate on your behalf, to the extent strictly required to do their work, and only with your prior consent.

• Our service providers (email, calendar, document storage, analytics), who process data under contract on our behalf.

• Where we are legally required to disclose it, including in response to a court order or regulatory request from a Singapore authority.

We do not sell, rent, or trade personal data. We do not share it with third parties for marketing purposes.

6. International transfers

Our service providers are based in Singapore, the European Union, and the United States. Where personal data is transferred outside Singapore, we take the steps required by the PDPA to ensure it receives a comparable standard of protection, including through contractual safeguards.

7. Cookies and analytics

We use a small number of cookies on this website:

• Strictly necessary cookies to make the site function.

• Analytics cookies to understand how visitors use the site, in aggregate. We use [Google Analytics / Plausible / Fathom — pick one].

You can disable cookies in your browser settings. Disabling strictly-necessary cookies may break parts of the site.

8. Data retention

We retain personal data only as long as necessary for the purposes described above:

• Contact form submissions: up to 24 months from your last interaction.

• Engagement records: up to 7 years after the engagement closes, in line with standard professional retention practice.

• Server logs: up to 90 days.

• Analytics data: up to 14 months in aggregated form.

After these periods, we delete or anonymise the data.

9. Security

We protect personal data with reasonable administrative, physical, and technical safeguards, including encryption in transit, access controls, and regular review of our service providers. No system is perfectly secure, and we cannot guarantee absolute security.

10. Your rights under the PDPA

You have the right to:

• Access the personal data we hold about you.

• Correct any inaccuracy in that data.

• Withdraw consent for ongoing processing, where consent is the legal basis.

• Make a complaint to the Personal Data Protection Commission of Singapore (pdpc.gov.sg).

We respond to access and correction requests within 30 days, in line with PDPA timeframes. A reasonable fee may apply to access requests, as permitted under the PDPA.

11. Children

This website is not directed at, and we do not knowingly collect personal data from, anyone under the age of 18. If you believe a child has provided personal data to us, please contact our DPO and we will delete it.

12. Changes to this policy

We will update this policy when our practices change or the law requires it. The "Effective" date at the top of the page tells you when the current version became effective. Material changes will be flagged on the home page for at least 30 days.

13. Contact and Data Protection Officer

For any privacy-related question, including a data access or correction request, please contact our Data Protection Officer:

Adair Advisory Pte Ltd
Attention: Data Protection Officer