Our Privacy Policy

Effective Date: 30th June 2025

Introduction

Xerrata Pte Ltd is committed to protecting the privacy of our users. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over your data. We act as the 'Data Controller' for the personal data processed in relation to our website and services. This policy is written to be clear and easy to understand. We use headings and bullet points to make it simple to navigate.

1. Who We Are and How to Contact Us

Xerrata Pte Ltd
21 Collyer Quay
editor@theboardroom.life

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at the email or address listed above.

2. What Personal Data We Collect

We collect and process various types of personal data depending on how you interact with our website. The data we collect may include:

a. Identity and Contact Data: Name, email address, phone number, and physical address. We collect this when you sign up for an account, subscribe to our newsletter, or fill out a contact form.

b. Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform. This data is collected automatically when you visit our website through cookies and log files.

c. Usage Data: Information about how you use our website, products, and services, such as the pages you view, the time spent on each page, and your clickstream data.

d. Marketing and Communications Data:** Your preferences in receiving marketing from us and our third parties and your communication preferences.

3. How and Why We Use Your Personal Data

We only process your personal data when we have a valid legal basis to do so. The purposes for which we use your data and the corresponding legal bases are:

a. To provide our services: We use your personal data to fulfill our contractual obligations to you.
Legal Basis: Performance of a contract.
b. To manage your account: We use your data to create and maintain your user account and to provide customer support.
Legal Basis: Performance of a contract.
c. For marketing purposes:** With your consent, we will send you newsletters, promotional offers, and other marketing communications.
Legal Basis: Consent. You have the right to withdraw your consent at any time by unsubscribing.
d. To improve our website and services: We analyze usage data to understand how our website is used and to make improvements.
Legal Basis: Our legitimate interests in improving our business and services for our users.
e. To comply with legal obligations: We may process your data to comply with a legal or regulatory requirement.
Legal Basis: Legal obligation.

4. How We Share Your Personal Data

We may share your personal data with the following categories of third parties:

a. Service Providers: We work with third-party service providers who assist us with web hosting, analytics, payment processing, and marketing. These providers are only authorized to use your data on our behalf and must adhere to strict data protection standards.
b. Legal and Regulatory Authorities: We may disclose your data if required by law or to respond to valid requests by public authorities.

c. We do not sell your personal data to any third parties.

5. International Data Transfers

As a company based in Singapore, we may transfer your personal data to countries outside of the European Economic Area (EEA). When we do this, we ensure that appropriate safeguards are in place to protect your data, such as using standard contractual clauses approved by the European Commission.

6. Data Retention

We will only keep your personal data for as long as is necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure of your data, the purposes for which we process it, and applicable legal requirements.

7. Your Data Protection Rights

Under the GDPR, you have the following rights concerning your personal data:

a. The Right to Be Informed: You have the right to be informed about how we collect and use your data. This Privacy Policy is intended to provide this information.
b. The Right of Access: You have the right to request a copy of the personal data we hold about you.
c. The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
d. The Right to Erasure ("Right to Be Forgotten"): You have the right to request that we erase your personal data under certain conditions.
e. The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
f. The Right to Object to Processing: You have the right to object to our processing of your personal data under certain conditions.
g. The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
h. The Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

If you wish to exercise any of these rights, please contact us at [Your Contact Email Address]. We will respond to your request within one month.

8. Cookies and Other Tracking Technologies

Our website uses cookies to enhance your experience. For detailed information on the types of cookies we use, the data they collect, and your options for managing them, please see our dedicated **Cookie Notice**.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date" at the top.