Privacy Policy

Information we collect

The information collected depends on how you interact with us and the fields shown on the relevant form:

• Contact and professional information, such as your name, company or brand, role, work email and any optional phone number.
• Enquiry and application information, such as public product or solution links, target markets, sales channels, buyer information, business questions and competitors you describe.
• Other information you choose to include in a message or in subsequent communications with us.
• When an email subscription option is offered, we also record the email subscription choice, the notice and consent wording shown, their version and language, the source form and the server receipt time. An unticked box is not marketing consent.
• Website measurement records page views, navigation, email-link clicks and form interactions, without the text you enter or your marketing choice in those events. Google Analytics also receives technical information, as described under “Browser storage and measurement”. Hosting and security services also process the technical information needed to deliver and protect the site.

How and why we use it

We use contact messages to reply to the enquiry. Our team reviews Pilot applications and contacts applicants about their application and next steps. Required fields are needed to handle the request; fields marked optional can be left blank.

Submitting an enquiry or application does not subscribe you to marketing, open a product account, or authorize access to your systems. We use website measurement to understand visits and improve the site, and security checks to prevent abuse.

Optional email updates

Only if you actively select the separate, optional email subscription box may we use your work email to send WaveWise product updates, industry insights and event invitations. The box starts unticked. Declining or withdrawing this permission does not affect the handling of your enquiry or Pilot application.

You can withdraw at any time by writing to contact@wavewise.sg. If we begin sending marketing emails, each will include an unsubscribe link. After withdrawal, we will not use that permission to send marketing emails to you. Withdrawal does not affect processing that was lawful before it. We may still reply to a request you have made.

This permission covers email from WaveWise only; it does not authorize phone or SMS marketing, marketing by another company, advertising tracking or the use of the rest of your application for marketing. Previous submissions without this separate permission are not subscriptions.

Legal bases

Where the EU or UK GDPR applies, we rely on consent for optional marketing emails. For enquiries and business applications, our legitimate interest is to respond to people who contact us and assess prospective business relationships. Where the request is for steps necessary before entering a contract with you personally, we may instead rely on that contractual basis. We also process information when required by law. Where permitted by applicable law, we rely on our legitimate interest in respecting your choices to maintain minimal opt-out records.

For website operation and abuse prevention, our interest is to provide a functioning, secure website. These bases do not replace any separate permission required for storage or access on your device. Where Singapore’s PDPA applies, we process personal data in accordance with its consent, deemed-consent or other applicable provisions. Applicable rights and exceptions depend on the context and jurisdiction.

Who receives information

Submitted contents are stored in our lead database and included in notification emails to the team handling the request. Authorized team members and providers supporting hosting, data storage, website measurement, security and email delivery may process information for these purposes.

The website uses Cloudflare for hosting, its D1 database, Analytics Engine, Web Analytics and Turnstile anti-bot checks, and Google Tag Manager to run Google Analytics. Team notifications are routed through Cloudflare Email Routing to Google Gmail, which our team uses to receive and handle these messages. Information may also be disclosed where required by law.

Submitting a form does not authorize us to sell its contents or provide them to another company for that company’s own marketing.

International processing

WaveWise is a Singapore company. Our service providers may process information outside your country. The countries and safeguards depend on the service used; you can contact us for information about the arrangements relevant to your data.

An email subscription is not consent to an international transfer. Any transfer must separately meet applicable data protection requirements, including safeguards or separate notices and consent where required.

Retention and deletion

Our policy sets 180 days for raw submissions and up to 24 months for application outcomes without the original answers. Database rows carry a deletion-due date and are reviewed for manual cleanup; that date does not itself perform deletion.

Email subscriptions have no fixed expiry date. If you choose to subscribe, we keep your email address and the minimum records needed to document and manage your subscription separately from your enquiry or application, while your subscription remains active and the purpose remains relevant. You can unsubscribe at any time. We periodically review whether these records are still needed and delete them when no longer necessary.

After withdrawal, we retain only the minimum record needed to honour your opt-out and prevent accidental re-subscription, for as long as needed for that purpose or required by law. A new enquiry or application does not by itself restart a withdrawn subscription. Subscribing does not extend the retention period for the other information in your form.

Form handlers do not write field contents to application logs. Notification emails are separate copies; database deletion alone does not remove those emails. We check relevant copies when handling a deletion request.

Your choices and rights

Write to contact@wavewise.sg, or use our contact form, for privacy questions, withdrawal or a rights request. Please describe what you are asking for; do not send passwords, identity documents or sensitive records with an initial request. We may ask for proportionate information to verify your identity.

Depending on the law that applies, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent. Some requests are subject to statutory conditions or exceptions. We respond within the time limits required by applicable law.

You may complain to the relevant data protection authority, including Singapore’s Personal Data Protection Commission, an EU supervisory authority or the UK Information Commissioner’s Office. You do not have to contact us first to exercise that right.

Browser storage and measurement

Our own website code does not set cookies. It uses sessionStorage for a random session identifier to group page views during one visit. The identifier is replaced after a sliding half-hour window and is normally removed when the tab closes; it is not joined to form submissions or used for cross-site tracking.

Google Analytics may set its own first-party cookies (`_ga` and `_ga_…`) so that a returning browser is not counted as a new one — only outside the EEA, the UK and Switzerland. They hold a random number, not your name or email, and are never joined to a submission. No advertising cookie is set anywhere.

The production site loads Cloudflare Web Analytics and Google Tag Manager, which runs Google Analytics. Google receives the address of the page, your browser’s details and your IP address in order to count the visit. In the EEA, the UK and Switzerland, Google Analytics runs without cookies. Form pages load Cloudflare Turnstile to protect submissions; its script can load before you press submit. These services can process technical browser and connection information. Not setting a cookie does not mean no personal data is processed.

The optional email checkbox controls email marketing only. It does not provide consent for analytics, cookies or other device storage.

Information you should not submit

The website forms and current public-information Pilot do not ask for:

• Passwords, keys, tokens or other credentials, or access permissions for your systems.
• Your customer lists, customer personal information, order records, payment details or financial statements.
• Sensitive personal information or private contact channels beyond the work contact information you choose to provide.

Changes to this policy

We update this policy when our practices change and show the version date above. Publishing a new policy does not expand an existing consent; if a new purpose requires consent, we will ask separately.