Privacy Policy

Last updated: 27 October 2026

1. Who we are

This website, dataheartbeat.ai, is operated by Data Heartbeat Pte. Ltd., a company based in Singapore ("Data Heartbeat", "we", "us"). We provide data and AI governance and transformation advisory services. We are responsible for personal data collected through this website in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA").

2. Personal data we collect

We collect only the personal data that you choose to give us:

• Enquiries: when you email us through the links on this website, we receive your name, email address, organisation, role and any other information you include in your message.
• Diagnostic inputs: if you take part in the Executive Heartbeat Assessment or a similar diagnostic, we collect the responses and contact details you provide for that purpose.

This website does not contain contact forms, user accounts or payment facilities.

3. Purposes

We use your personal data to respond to your enquiry; to arrange meetings, proposals and services you request; to deliver and report on diagnostics you take part in; to maintain business records; and to comply with legal obligations. We will not use your personal data for other purposes without notifying you and, where required, obtaining your consent.

4. Consent and legal basis

Under the PDPA, we rely on your consent, which is deemed given when you voluntarily provide personal data to us for a purpose, and on other bases permitted by the PDPA, including the business improvement and legitimate interests exceptions where applicable. You may withdraw consent at any time by contacting us; we will inform you of the likely consequences of withdrawal.

5. Disclosure to third parties

We do not sell, rent or trade personal data. We disclose personal data only to service providers that support our operations, namely our email and productivity service provider, which processes enquiry emails, and Netlify, Inc., which hosts this website and may process technical request data such as IP addresses in server logs. We may also disclose personal data where required by law. Where data is transferred outside Singapore, we take steps to ensure it receives a standard of protection comparable to the PDPA.

6. Cookies and analytics

This website does not set advertising or analytics cookies and does not use tracking pixels. Our hosting provider may record basic technical information in server logs for security and operational purposes. If we introduce analytics or cookies in future, we will update this policy.

7. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required for legal or business purposes. Enquiry correspondence that does not lead to an engagement is generally deleted or anonymised within 24 months.

8. Protection

We take reasonable security arrangements, including encrypted connections (HTTPS) and access controls, to protect personal data against unauthorised access, collection, use, disclosure, modification or disposal.

9. Access and correction

You may ask to access the personal data we hold about you, request information on how it has been used or disclosed in the past year, or ask us to correct it. We will respond as soon as reasonably possible and in accordance with the PDPA. We may charge a reasonable fee for access requests, and will tell you of any fee in advance.

10. Contact and Data Protection Officer

Questions, requests and complaints about this policy or your personal data should be sent to our Data Protection Officer at mohammed.rahim@dataheartbeat.ai. If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore.

11. Changes

We may update this policy from time to time. The current version will always be published on this page with its last updated date.