Privacy Policy

This Privacy Policy describes how DataSpark Pte. Ltd. ("DataSpark", "we", "us" or "our") collects, uses, discloses and protects personal data when you visit dataspark.pro, contact us, enrol in programmes or engage our analytics services. We are committed to compliance with the Personal Data Protection Act 2012 of Singapore ("PDPA") and applicable subsidiary legislation.

1. Data Controller

DataSpark Pte. Ltd. is the organisation responsible for personal data processed through this website and our enterprise analytics platform services. Our registered address is 80 Raffles Place, #32-01 UOB Plaza 1, Singapore 048624. You may contact our data protection enquiries team at [email protected] or +65 6285 1743.

2. Personal Data We Collect

We may collect the following categories of personal data depending on your interaction with DataSpark:

• Identity and contact data: full name, job title, company name, email address, telephone number and business address provided through contact forms, programme enquiries or service proposals.
• Communication data: messages, subject lines and attachments you submit via our contact form or email correspondence.
• Technical data: IP address, browser type, device identifiers, referring URLs, pages viewed and session timestamps collected through cookies and server logs as described in our Cookie Policy.
• Programme and service data: enrolment details, attendance records, assessment outcomes and billing information when you participate in DSX programmes or engage professional analytics services.
• Consent records: timestamps and preferences associated with PDPA consent checkboxes, cookie banner selections and marketing opt-in or opt-out choices.

We do not intentionally collect sensitive personal data such as national identification numbers, financial account credentials or health records through this public website. If such data is required for a specific enterprise engagement, it will be handled under a separate data processing agreement with enhanced safeguards.

3. How We Collect Personal Data

Personal data is collected through direct interactions when you complete forms on contact.php, email [email protected], register for programmes, attend studio sessions at our Raffles Place office or engage our platform engineering team. We also collect limited technical data automatically when you browse dataspark.pro, including through essential and optional cookies managed via our cookie consent banner.

We may receive personal data from third parties where you have authorised disclosure, such as corporate procurement portals, event registration partners or referral introductions from existing enterprise clients. In such cases, we process data only for the purposes communicated at the point of collection.

4. Purposes of Processing

We process personal data for the following purposes, relying on consent, contractual necessity, legitimate interests or legal obligation as appropriate under the PDPA:

• Responding to enquiries submitted through our website contact form or direct email.
• Administering programme enrolment, scheduling studio sessions and delivering DSX-101 through DSX-601 training modules.
• Providing analytics architecture reviews, sandbox provisioning, predictive modelling sprints and other professional services.
• Managing billing, invoicing and corporate account relationships with Singapore enterprise clients.
• Improving website performance, security and user experience through aggregated analytics where consent is granted.
• Sending service-related communications about programme updates, briefing confirmations or platform maintenance.
• Complying with legal obligations, regulatory requests and internal audit requirements.
• Protecting against fraud, abuse and unauthorised access to our systems.

We will not use your personal data for purposes incompatible with those described above without providing notice and, where required, obtaining fresh consent.

5. Legal Basis and Consent

Where the PDPA requires consent, we obtain it through explicit mechanisms such as the PDPA checkbox on our contact form. You may withdraw consent at any time by emailing [email protected], though withdrawal may affect our ability to provide certain services. For contractual processing related to programme delivery or paid engagements, processing may continue as necessary to fulfil our obligations under applicable agreements.

6. Disclosure of Personal Data

We may disclose personal data to the following categories of recipients on a need-to-know basis:

• Platform infrastructure providers hosting dataspark.pro on Singapore and Asia-Pacific data centres.
• Email delivery and communication tools used to process contact form submissions.
• Professional advisers including legal, accounting and insurance providers bound by confidentiality obligations.
• Government authorities when required by applicable law, court order or regulatory directive.
• Corporate affiliates or subprocessors engaged under written data protection terms for specific analytics engagements.

We do not sell personal data to third parties. We do not disclose contact form submissions to marketing agencies, advertising networks or unrelated IT outsourcing firms.

7. International Transfers

DataSpark prioritises Singapore and Asia-Pacific hosting for website and platform operations. Where personal data is transferred outside Singapore, we implement appropriate safeguards consistent with PDPA requirements, including contractual clauses ensuring comparable protection standards.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy. Contact form submissions are typically retained for twenty-four months unless a business relationship develops. Programme records may be retained for seven years for corporate governance and audit purposes. Cookie consent preferences are stored locally in your browser for six months. Technical logs are rotated on a rolling ninety-day schedule unless extended for security investigations.

9. Data Security

We implement administrative, technical and physical safeguards appropriate to the nature of personal data processed. These include access controls, encrypted transport for web traffic, honeypot spam filtering on contact forms and staff training on PDPA obligations. No method of electronic transmission or storage is completely secure; we cannot guarantee absolute security but commit to prompt notification where legally required in the event of a qualifying data breach.

10. Your Rights Under the PDPA

Subject to exceptions under the PDPA, you may request access to personal data we hold about you, correction of inaccurate data, withdrawal of consent and information about how your data has been used or disclosed in the past year. Submit requests to [email protected] with sufficient detail to verify your identity. We aim to respond within thirty days.

Access requests should specify the categories of data sought and approximate date ranges where relevant. Correction requests should identify the inaccurate field and the proposed correction. We may request supporting documentation to confirm your identity or authority to act on behalf of an organisation. Where access is denied under PDPA exceptions, we will provide reasons where permitted by law. You may also lodge a complaint with the Personal Data Protection Commission of Singapore if you believe your rights have been infringed, though we encourage you to contact us first so we may address your concern directly.

10A. Data Protection Officer

DataSpark has designated a data protection contact responsible for overseeing PDPA compliance across website operations, programme administration and enterprise service delivery. Enquiries directed to [email protected] with the subject line "DPO Enquiry" will be routed to this function. The data protection contact maintains internal records of processing activities, consent logs and subprocessor agreements relevant to dataspark.pro operations.

10B. Automated Decision-Making

DataSpark's enterprise analytics platform may support automated decision-making and profiling within client-controlled environments deployed under separate service agreements. This public website does not make solely automated decisions producing legal or similarly significant effects about individual visitors. Contact form triage may use automated spam filtering including honeypot detection, but human review applies before substantive responses are issued.

11. Third-Party Links

Our website may contain links to external resources such as font providers or documentation portals. This Privacy Policy applies only to dataspark.pro and DataSpark-controlled services. We are not responsible for the privacy practices of third-party websites.

12. Children

DataSpark services are directed at enterprise professionals and organisations. We do not knowingly collect personal data from individuals under eighteen years of age through this website.

13. Updates to This Policy

We may update this Privacy Policy to reflect changes in law, technology or business practices. Material changes will be indicated by updating the effective date at the top of this page. Continued use of dataspark.pro after changes constitutes acknowledgment of the revised policy where permitted by law.

14. Contact

For privacy-related questions or to exercise your PDPA rights, contact DataSpark Pte. Ltd. at 80 Raffles Place, #32-01 UOB Plaza 1, Singapore 048624, email [email protected], telephone +65 6285 1743. UEN 202534918M.