Privacy Policy

1. About this policy

Cifra ("Cifra", "we", "us") is a sole proprietorship registered in Singapore (UEN 53533143J). We are committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA"). This policy explains what personal data we collect, how we use it, and your rights.

2. Personal data we collect

• Information you give us: when you contact us (e.g. by email), we may collect your name, email address, phone number, company, and the content of your message.
• Information collected automatically: when you visit cifra.sg, we may collect technical and usage data such as your IP address, browser and device type, pages viewed, and referring site, through cookies and analytics tools.

3. How we use your personal data

We use your personal data to: respond to your enquiries and provide our services; operate, maintain and improve our website; understand how our website is used (analytics); comply with legal obligations; and, where you have consented, send you updates about our services.

4. Consent

By contacting us or using our website, you consent to the collection, use and disclosure of your personal data as described in this policy. You may withdraw your consent at any time by contacting our Data Protection Officer (below); we will cease the relevant processing, subject to any legal requirements.

5. Cookies and analytics

We use cookies and third-party analytics (including Google Analytics, deployed via Google Tag Manager) to understand website usage. You can disable cookies in your browser settings or opt out of Google Analytics using Google's opt-out tools. Disabling cookies may affect how the site works.

The tags loaded through Google Tag Manager may include Google Analytics 4, Meta Pixel, TikTok Pixel and LinkedIn Insight Tag. These tags collect standard usage data such as pages viewed, approximate location, device and browser type, referring site, and interactions such as clicking our email link. They use cookies or similar identifiers so that the platforms can measure visits and, where we run advertising, show relevant ads to people who visited this site. You can also limit this tracking using the opt-out tools each platform provides (for example, Google Analytics opt-out, Meta ad preferences, TikTok and LinkedIn ad settings).

6. Advertising-platform data accessed through our tools

To manage and report on advertising campaigns, Cifra uses internal software that connects to advertising platforms' APIs, including the Google Ads API and the Meta Marketing API, under accounts that our clients have linked to Cifra's manager accounts.

• What we access: aggregate campaign performance data such as spend, impressions, clicks, conversions and video views, together with campaign, ad group and ad settings. We do not access or store end-user personal data from these platforms.
• Why: to produce performance reports for the client who owns the account, to monitor those accounts for delivery problems, and to plan budgets.
• Where it is stored: on Cifra's own equipment in Singapore. Data is kept for the duration of the client engagement plus a reasonable period for historical reporting, after which it is deleted on request.
• Who it is shared with: only the client whose account the data belongs to. We do not sell data, share it with other clients, or use it to train artificial-intelligence models.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Access is granted by clients through each platform's own account-linking process and can be revoked by the client at any time from that platform.

7. Disclosure of personal data

We do not sell your personal data. We may share it with (a) service providers who support our business (e.g. website hosting, email and analytics providers), and (b) authorities or parties where required by law. These providers may use your data only to provide services to us.

8. Transfers outside Singapore

Some service providers (e.g. analytics, email and hosting) may store or process data outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure it receives protection comparable to the PDPA.

9. Protection and retention

We take reasonable administrative and technical measures to protect personal data against unauthorised access, use or disclosure, and retain it only for as long as necessary for the purposes above or as required by law.

10. Your rights: access and correction

You may request access to, or correction of, the personal data we hold about you, or ask how we handle it, by contacting our Data Protection Officer below. A reasonable fee may apply to an access request, as permitted under the PDPA.

11. Data Protection Officer

Cifra's Data Protection Officer can be contacted at: hello@cifra.sg

12. Third-party links

Our website may link to third-party sites. We are not responsible for their privacy practices; please review their policies.

13. Changes to this policy

We may update this policy from time to time. The latest version will be posted on this page with the "Last updated" date.

14. Contact

For any questions about this policy or your personal data, email us at hello@cifra.sg.