Privacy Policy

This Privacy Policy explains how Grout Coffee AI (UEN: 201938472K) collects, uses, and protects your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

1. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number, company name, and job title when you submit an enquiry or contact form.
• Enquiry details: solution of interest, budget range, preferred meeting date, and message content.
• Technical data: IP address, browser type, device information, pages visited, and time spent on our website.
• Cookies: small text files stored on your device to improve site functionality and analyse traffic patterns.

2. Purposes of Collection

We collect and use your personal data for the following purposes:

• Responding to your enquiries and scheduling meetings or demonstrations.
• Providing information about our AI solutions, services, and pricing.
• Improving our website, services, and user experience through analytics.
• Sending marketing communications about our products and events, where you have provided consent.
• Complying with legal obligations under Singapore law.

3. Legal Basis (PDPA 2012)

Under the PDPA, we rely on the following bases for processing your personal data:

• Consent: where you have voluntarily provided your data through our contact form or cookie banner.
• Notification: we inform you of the purposes for which your data is collected at or before the point of collection.
• Legitimate business interests: for website analytics and service improvement, balanced against your privacy rights.

4. Cookies and Similar Technologies

Our website uses cookies to enhance your browsing experience and collect anonymised usage statistics. You may accept or decline cookies via our cookie banner. Essential cookies required for site functionality cannot be disabled. Analytics cookies help us understand how visitors interact with our site.

5. Third-Party Providers

We may share your data with trusted third-party service providers who assist us in operating our website and delivering services, including:

• Web hosting providers (data stored in Singapore or approved jurisdictions).
• Email and CRM platforms for enquiry management.
• Analytics providers for website traffic analysis.

All third-party providers are contractually bound to protect your data and use it only for specified purposes.

6. Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiry data: up to 24 months from last contact, unless a business relationship is established.
• Client data: for the duration of the engagement plus 7 years for legal and accounting purposes.
• Analytics data: anonymised after 26 months.

7. Your Rights

Under the PDPA, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Withdraw consent: withdraw your consent for marketing communications at any time.
• Data portability: request your data in a commonly used format where technically feasible.

To exercise any of these rights, contact our Data Protection Officer at [email protected].

8. Cross-Border Transfer

Where personal data is transferred outside Singapore, we ensure that the recipient country provides a comparable standard of protection, or we obtain your consent and implement appropriate safeguards as required under the PDPA.

9. Data Protection Officer

For privacy-related enquiries or complaints, contact our DPO:

Email: [email protected]
Address: 45 Tras Street, #03-01, Singapore 078984

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our website after changes constitutes acceptance of the updated policy.