Privacy Policy

Effective date: 1 January 2026  ·  Last updated: 8 May 2026

CodeHunters Singapore Pte. Ltd. ("CodeHunters", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect when you use www.codehunterssg.com or engage us as a client, why we collect it, how long we keep it, and the rights you have under Singapore's Personal Data Protection Act 2012 ("PDPA").

For information about cookies and tracking specifically, please see our Cookie Policy.

1. Who we are

CodeHunters Singapore Pte. Ltd. is a Singapore-incorporated company registered with ACRA, with its registered office at 3 Soon Lee Street, #03-05 Pioneer Junction, Singapore 627606. We are the data controller for personal data collected via this Site.

2. Personal data we collect

We collect the following categories of personal data:

2.1 Information you give us

Category	Examples	When collected
Contact details	Name, business email, phone / WhatsApp number, company name	When you submit the contact form, request a Cyber Snapshot, or reach out via WhatsApp
Project details	Service interest, project description, budget range	When you submit a contact form
Scan inputs	Website URL you ask us to scan	When you use the Free Cyber Risk Snapshot
Communications	Email exchanges, WhatsApp messages, meeting notes	During engagement with our team

2.2 Information we collect automatically

Category	Examples
Technical data	IP address, browser type, device type, referrer URL, pages visited
Cookie data	Your cookie consent preferences (see Cookie Policy)
Scan output	The findings of any cyber snapshot you run, including the posture score and severity counts (linked to the URL you scanned and your contact details)

3. Why we use your data (purposes)

We use your personal data only for the following purposes:

• Responding to enquiries — to reply to your contact form, WhatsApp message, or email
• Delivering services — to design, build, audit, or maintain the products and services you engage us for
• Running the Cyber Snapshot — to scan the URL you provide and email or WhatsApp the report to you
• Improving our service — anonymous analytics on which pages and services are most useful (only with your consent)
• Compliance — to meet our obligations under Singapore tax, accounting, and corporate law
• Marketing — to send our monthly "CodeHunters Brief" newsletter, only if you have opted in. You can unsubscribe at any time.

4. Legal basis (PDPA)

Under the PDPA, we rely on one of the following bases for each use of your data:

• Consent — you ticked the consent box on the form, or otherwise gave us clear permission
• Contractual necessity — we need the data to deliver a service you have engaged us for
• Legitimate interests — for example, basic security logs of who accessed our scanner endpoint, balanced against your rights
• Legal obligation — when required by Singapore law (e.g. tax records)

5. Who we share data with

We share personal data only with the following types of recipients, and only to the minimum extent necessary:

Recipient type	Purpose
Hosting provider	Storing the Site and any application infrastructure (we host in Singapore-region data centres where possible — typically AWS Asia Pacific (Singapore) or GCP asia-southeast1)
Form / email service	Processing contact form submissions and newsletter delivery (e.g. Formspree, Brevo)
Threat intelligence	The Cyber Snapshot looks up URLs against URLhaus by abuse.ch (a free public threat database). The URL is shared, but no contact details are.
Professional advisers	Lawyers, accountants, auditors when required by law
Authorities	If required by a Singapore court order or law enforcement request

We do not sell, rent, or trade your personal data to anyone.

6. International transfers

We aim to keep all personal data within Singapore. Some service providers (e.g. Formspree, Brevo, URLhaus) may process data outside Singapore. When that happens, we ensure they provide a level of protection comparable to the PDPA, either through contractual safeguards or by selecting providers in jurisdictions with adequate data protection laws.

7. How long we keep data (retention)

Data type	Retention period
Contact form leads (no engagement)	Up to 24 months from last contact, then deleted
Client records (active engagement)	Duration of engagement + 7 years (for audit / tax)
Cyber Snapshot lead log	12 months unless you become a client
Server access logs / IPs	30 days, then deleted or aggregated
Newsletter subscription	Until you unsubscribe
Cookie consent record	12 months, then re-prompted

8. How we protect your data

• HTTPS / TLS in transit on all pages and form submissions
• Encrypted storage on managed cloud providers (Singapore region where available)
• Access to client data is restricted to staff who need it; logged where appropriate
• Annual review of our security posture (we use our own ChsCompliance checklist)
• Mandatory MFA on all admin systems (email, hosting, CMS, code repos)

9. Your rights under the PDPA

The PDPA gives you the following rights regarding your personal data:

• Access — ask us what personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Withdrawal of consent — withdraw any consent you previously gave (note: this may stop us from delivering some services)
• Deletion — ask us to delete your data, subject to our legal obligations to retain certain records
• Complaint — lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC) at pdpc.gov.sg

To exercise any of these rights, email our Data Protection Officer at manager@codehunterssg.com. We will respond within 30 days as required by the PDPA.

10. Children's privacy

Our services are intended for businesses and adults over 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted information to us, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make a material change, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or a prominent banner.

12. Contact our Data Protection Officer

For any privacy-related question, request, or complaint:

CodeHunters Singapore Pte. Ltd. — Data Protection Officer
3 Soon Lee Street, #03-05 Pioneer Junction, Singapore 627606
Email: manager@codehunterssg.com
WhatsApp: +65 8901 2026

This policy is provided as part of CodeHunters Singapore's commitment to transparent, PDPA-compliant delivery. It does not constitute legal advice. If your business is drafting its own privacy policy, consult a Singapore-licensed lawyer or our ChsCompliance team.