Privacy Policy

1. Introduction

Nolux ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our services. This Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with our machine learning development services and this website.

This policy applies to personal data collected through our website at noluxanars.live, through our contact forms, and in the course of service engagements. If you have questions about this policy, please contact us at [email protected].

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, submitted via our contact form or by email
• Communication data: the content of messages you send us regarding enquiries or project discussions
• Usage data: information about how you navigate our website, including pages visited, time spent, and referral source (collected via analytics cookies where consent has been given)
• Client project data: data shared with us during a service engagement, governed separately by a project agreement and mutual NDA

We do not collect sensitive personal data (such as health, financial, or biometric data) through this website. Any such data shared in the context of a service engagement is handled under separate contractual terms.

4. How We Use Personal Data

We use personal data for the following purposes:

• Responding to enquiries and communicating about potential or active engagements
• Administering service agreements and project delivery
• Improving our website based on aggregated usage data (analytics, where consented)
• Complying with legal obligations under applicable Singapore law
• Marketing communications, only where you have given explicit consent

5. Legal Basis for Processing

We process personal data on the following bases under Singapore's Personal Data Protection Act (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR):

• Consent: where you have given explicit consent, such as subscribing to communications or accepting analytics cookies
• Contract performance: where processing is necessary to fulfil a service agreement
• Legitimate interests: for responding to enquiries and managing business operations, where these interests are not overridden by your rights
• Legal obligation: where processing is required by applicable law

6. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy:

• Contact enquiries: retained for 24 months from the date of last communication
• Client project data: retained for the duration of the project plus 12 months, then deleted unless a longer period is required by law
• Analytics data: retained in aggregated form for up to 26 months from collection

7. Data Sharing and Third Parties

We do not sell personal data. We may share data with the following categories of third parties in limited circumstances:

• IT infrastructure providers (hosting, email delivery) under data processing agreements
• Analytics services (where consent has been given, under anonymisation or data processing agreements)
• Legal or regulatory authorities where required by law

Any third party processing data on our behalf is contractually required to maintain appropriate security standards and to use the data only for the specified purpose.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted storage and transmission of personal data
• Access controls limiting data access to authorised team members only
• Regular review of data handling practices
• Procedures for responding to suspected data breaches

In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required by the PDPA and applicable law.

9. Cookies

We use cookies on our website. Essential cookies are necessary for the website to function and are always active. Optional cookies (analytics and marketing) are only used with your consent. For full details, see our Cookie Policy.

10. Your Rights

Under the PDPA and applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for processing based on consent (without affecting the lawfulness of prior processing)
• Request erasure of your data where it is no longer needed for the purpose it was collected
• Object to processing based on legitimate interests
• Lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy notices of any third-party sites you visit.

12. Children's Privacy

Our services are directed at business professionals and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will provide notice on our website. The date at the top of this page reflects the most recent revision. Continued use of our website following notice of changes constitutes acceptance of the updated policy.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights:

Email: [email protected]
Address: 8 Shenton Way, #24-01, AXA Tower, Singapore 068811
Phone: +65 6294 8537