Legal
Privacy Policy
Who we are
AI Sherpa Pte. Ltd. (UEN 202639805D) is a Singapore company that helps organisations across Singapore and the Asia-Pacific region adopt AI safely. This policy explains how we handle personal data collected through ai-sherpa.io and through email to us. We are responsible for that data under Singapore's Personal Data Protection Act 2012 (PDPA).
Data Protection Officer: dpo@ai-sherpa.io
What we collect
When you visit this website
The site is a set of static pages. It sets no cookies; our Cookies Policy has the details. Loading a page still involves some data passing to the services that deliver it:
- Hosting. Amazon Web Services (AWS) serves the pages from storage in Singapore through its CloudFront network. To deliver each page, AWS processes your IP address, browser details and the address of the page you asked for. We do not currently keep access logs of these requests; if we turn them on, we will update this policy first.
- Fonts. Every page loads its typefaces from Google Fonts, so your browser sends your IP address and browser details to Google.
- Videos. If you open "Watch recent videos" on the home page, your browser fetches the video list from the YouTube Data API and the thumbnail images from YouTube. Both requests go to Google and carry your IP address and browser details. Nothing is requested from YouTube until you open that panel.
- Domain name. Cloudflare runs the DNS for ai-sherpa.io in DNS-only mode, so requests for the pages go straight to AWS and do not pass through Cloudflare.
When you email us
We receive your name, your email address and whatever you write or attach. Our email is hosted on Google Workspace. At present, email is the only way personal data reaches us through this website.
When you work with us
If your organisation engages us for an Advisory engagement or an Academy workshop, we collect the business contact details and other information needed to scope and deliver that work. We will tell you what we need, and why, at the time.
If we introduce services that collect more information, such as questionnaires or a paid Insights tier, we will say what they collect when we introduce them and update this policy.
Why we use it, and on what basis
We use personal data to:
- reply to your enquiry and follow up on what you asked about;
- discuss, arrange and deliver Advisory engagements or Academy workshops that your organisation asks us for;
- keep the records that the law requires us to keep.
Under the PDPA we collect, use and disclose personal data with your consent, or where the PDPA allows us to do so without it. When you email us, you are taken to consent to us using your details to reply and to deal with your enquiry. For anything beyond that, we will tell you the purpose before or when we collect the data. Where the PDPA permits, we may also rely on its legitimate interests exception.
We do not sell personal data, and we do not use it to make automated decisions about you.
Transfers outside Singapore
AI Sherpa is based in Singapore, and the website's files are stored in Singapore. Google and AWS run infrastructure in many countries, and CloudFront serves pages from locations around the world, so personal data may be processed outside Singapore. When that happens, we rely on the contractual data protection commitments these providers make to their customers.
How long we keep it
We keep personal data only for as long as we need it for the purpose we collected it for, or for as long as the law requires. After that, we delete it or anonymise it so that it no longer identifies you.
Security
We make reasonable security arrangements to protect the personal data we hold against unauthorised access, collection, use, disclosure, copying, modification or disposal, and against loss. No method of sending or storing data is completely secure, so we cannot guarantee that it will never be compromised.
Your rights
Under the PDPA you can ask us:
- for access to the personal data we hold about you, and how it has been used or disclosed in the past year;
- to correct personal data that is wrong or incomplete;
- to stop using your personal data, by withdrawing your consent.
Email our Data Protection Officer at dpo@ai-sherpa.io with your request. We may need to confirm your identity before we act on it. We will respond as soon as reasonably possible. If you withdraw consent, we will explain what that means in practice; for example, we may be unable to continue a piece of work that depends on the data.
Children
This website and our services are meant for organisations and the people who work in them. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, email us and we will delete it.
Changes to this policy
When we change this policy, we will publish the new version on this page and update the date at the top.
Contact and complaints
Send any question or complaint about how we handle personal data to our Data Protection Officer at dpo@ai-sherpa.io. We will work with you to resolve it.