Privacy Policy
Last Updated 26 Jun 2026
CoInside Pte Ltd ("we", "us") collects, uses, and protects information you provide when you visit our website or interact with us. We are incorporated in Singapore and operate globally. Our primary obligation is under Singapore's Personal Data Protection Act 2012 (PDPA). Where we work with clients based in the European Union or United Kingdom, we also comply with GDPR and UK GDPR respectively.
By using our website or submitting information to us, you consent to the practices described in this policy.
1. What we collect
Contact and enquiry data
Name, email address, phone number, and company name submitted via our contact form; the content of any message or correspondence you send us.
Business information
Information you provide through any diagnostic or quiz tool on our website, including details about your business, challenges, or goals.
Email and marketing data
Email address and communication preferences if you subscribe to any newsletter or updates from us.
Website usage data
Pages visited, session duration, and interaction behaviour collected automatically via analytics tools; IP address, browser type, and device information; referral source.
2. How we use your information
To respond to your enquiries and manage our relationship with you; to assess whether and how we can help, including reviewing any business information you share with us; to send you relevant updates or newsletters where you have opted in; to understand how our website is used and improve it; to meet our legal obligations and comply with applicable law or respond to lawful requests from authorities.
We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.
3. Legal basis for processing
Consent — where you have actively submitted information or opted into communications. Legitimate interests — to operate and improve our business, where this does not override your rights. Legal obligation — where required by applicable law.
For EU and UK residents: you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
4. Tools and third-party services
We use third-party tools to operate our website and communications. These providers act as data processors on our behalf and are contractually required to handle your data securely and only as instructed.
Google Analytics — website traffic and behaviour analysis. Data may be transferred to Google servers internationally.
LinkedIn Insight Tag — to understand how visitors arrive from LinkedIn and, when active, to measure the performance of LinkedIn advertising campaigns.
PostHog — product analytics and session behaviour tracking.
Cloud database infrastructure — secure storage of form and quiz submissions.
Email marketing platform — delivery and management of newsletters and communications (specific provider to be named when active).
We may add, change, or remove tools over time. This policy will be updated when we do. We will not introduce tools that materially change how your data is used without updating this policy first.
5. Cookies
Essential cookies — required for the website to function. These cannot be disabled.
Analytics and marketing cookies — used to understand how the site is used and, when active, to measure advertising performance. These include cookies set by Google Analytics, LinkedIn, and PostHog. You can disable these through your browser settings or a cookie management tool without affecting your ability to use the website.
6. How long we keep your data
Contact form enquiries that do not result in an engagement: 2 years from submission.
Email subscribers: until unsubscribe, deleted within 30 days.
Business information submissions that do not result in an engagement: 3 years.
Client data: duration of engagement plus 3 years after conclusion.
Analytics data: subject to each tool's retention settings, typically 12–14 months.
After these periods, data is securely deleted or anonymised.
7. International data transfers
As a Singapore-based business working with clients globally, your data may be transferred to and stored in countries outside Singapore. Where this occurs, we take reasonable steps to ensure it is protected to a standard consistent with PDPA requirements.
For EU and UK residents: where your data is transferred outside the EEA or UK, we ensure appropriate safeguards are in place, including standard contractual clauses where required.
8. Your rights
You have the right to access the personal data we hold about you; request correction of inaccurate data; request deletion of your data, subject to any legal obligations we have to retain it; withdraw consent to marketing communications at any time; and lodge a complaint with the relevant data protection authority in your jurisdiction.
EU and UK residents also have the right to data portability and to object to processing based on legitimate interests.
To exercise any of these rights, contact us at hello@co-inside.co. We will respond within 30 days.
9. Data security
We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. Our infrastructure uses industry-standard encryption and access controls. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Children
Our website and services are directed at businesses and business professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.
11. Changes to this policy
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated via our website. The date at the top of this page reflects the most recent update. Continued use of our website after an update constitutes acceptance of the revised policy.
12. Contact
CoInside Pte Ltd
hello@co-inside.co
We will aim to resolve it within 30 days.