Privacy Policy
Last Updated: 18 January 2026
1. Introduction
Helioquant ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy explains what data we collect, why we collect it, and how we protect it. It applies to all visitors and users of our website and services.
We operate from Singapore and comply with the Personal Data Protection Act 2012 (PDPA). If you have questions about our data practices, you may reach us at [email protected].
By using our website or engaging our services, you acknowledge that you have read and understood this policy. We encourage you to review it periodically, as we may update it from time to time.
2. Data We Collect
We collect information that you provide directly, as well as certain data generated through your use of our site. The categories include:
Information you provide: When you fill out our contact form, request a consultation, or correspond with us by email, we may collect your name, email address, phone number, organisation name, and any details you choose to share about your project requirements.
Usage data: Our website may collect technical information such as your IP address, browser type, operating system, pages visited, and timestamps. This data helps us understand how visitors interact with our site and identify opportunities to improve the experience.
Cookies and similar technologies: We use cookies to support core website functions and, with your consent, to gather analytics. Please see our Cookie Policy for full details on the types of cookies we employ and how you can manage your preferences.
3. How We Use Your Data
We process personal data for the following purposes:
Service delivery: To respond to enquiries, prepare proposals, deliver AI services, and provide ongoing support throughout our engagements.
Communication: To send you information relevant to your enquiry or engagement, including project updates, scheduling, and follow-up correspondence. We will not send unsolicited marketing unless you have opted in.
Website improvement: To analyse aggregate usage patterns, diagnose technical issues, and refine the content and structure of our website.
Legal obligations: To comply with applicable laws, regulations, and legal processes, including Singapore's PDPA requirements and any relevant tax or business record-keeping obligations.
4. Legal Basis for Processing
Under the PDPA, we process your personal data based on one or more of the following grounds:
Consent: Where you have given us clear consent to process your data for a specific purpose — for example, when you submit a contact form or opt in to receive updates.
Contractual necessity: Where processing is necessary to fulfil our obligations under a service agreement with you or your organisation.
Legitimate interest: Where processing is reasonably necessary for our legitimate business operations, provided that your rights and interests are not overridden. This includes website analytics and security monitoring.
5. Data Sharing and Third Parties
We do not sell personal data to third parties. We may share your data in limited circumstances:
Service providers: We may share data with trusted partners who assist us in operating our website, conducting analytics, or delivering services. These providers are contractually required to handle data in accordance with our instructions and applicable privacy laws.
Analytics services: We may use services such as Google Analytics to understand website traffic patterns. These services may process certain data independently under their own privacy policies.
Legal requirements: We may disclose data if required by law, regulation, court order, or governmental authority.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typical retention periods include:
Enquiry data: Retained for up to 24 months after the last interaction, unless an ongoing engagement requires longer retention.
Client engagement data: Retained for the duration of the engagement and for up to 5 years afterwards, in line with Singapore business record-keeping requirements.
Analytics data: Aggregated and anonymised data may be retained indefinitely, as it does not identify individual users.
7. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
Encryption of data in transit using TLS/SSL protocols.
Access controls limiting data availability to personnel who require it for their role.
Regular review of security practices and vulnerability assessments.
While we work diligently to safeguard your data, no method of electronic transmission or storage is entirely without risk. We encourage you to take precautions with your own information as well.
8. Your Rights Under the PDPA
Under Singapore's PDPA, you have the following rights regarding your personal data:
Access: You may request information about the personal data we hold about you and how it has been used or disclosed in the past year.
Correction: You may request that we correct or update personal data that is inaccurate or incomplete.
Withdrawal of consent: You may withdraw your consent for any particular purpose at any time, subject to legal or contractual restrictions. We will inform you of the likely consequences of withdrawal.
Data portability: In applicable circumstances, you may request the transfer of your data to another organisation.
To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe, generally within 30 business days.
9. Cookies
Our website uses cookies and similar technologies. Essential cookies are required for basic functionality. Optional cookies for analytics and preferences are activated only with your consent. For detailed information on the cookies we use and how to manage them, please visit our Cookie Policy page.
10. Third-Party Links
Our website may contain links to external sites that are not operated by Helioquant. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any site you visit through links on our pages.
11. Children's Privacy
Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make meaningful changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our data protection team:
182 Cecil Street, #17-01 Frasers Tower, Singapore 069547
You may also lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe your data has been handled improperly.