Privacy Policy
Last updated: March 2026
This privacy policy explains how Mobiloitte Singapore collects, uses, stores, and protects personal data. It follows Singapore's PDPA rules and sound data governance.
It covers the data we process, how long we keep it, your rights, and how to contact us about privacy, data requests, or compliance.
Overview
At Mobiloitte Singapore, we recognise that trust is the foundation of digital partnership. This Privacy Policy outlines how we collect, use, and protect personal data in accordance with Singapore's Personal Data Protection Act (PDPA). Our approach is further informed by the Personal Data Protection Commission (PDPC) and IMDA's guidance on AI Governance and Privacy-Enhancing Technologies (PETs).
Categories of Data Collected
We collect data strictly necessary for providing professional services and maintaining website security. This includes:
- Contact Information: Full name, professional email address, and phone number provided via enquiry forms.
- Professional Details: Job title, organisation name, and regional operating context.
- Project Context: Specific service interests, project stages, and implementation timelines shared during consultation requests.
- Technical Indicators: IP addresses, browser types, and navigation patterns collected via enterprise-grade analytics tools.
Digital Service and Workflow Usage
Mobiloitte Singapore processes data to ensure high-quality, practical delivery of digital solutions:
- Service Fulfilment: To respond to enquiries and provide tailored technical advice for AI and software initiatives.
- Operational Security: To protect our infrastructure and your interactions from unauthorised access or bots.
- System Improvement: To analyse website performance and refine user experience in line with Singapore's Digital Service Standards.
- Compliance: To maintain records as required by Singapore's regulatory frameworks and governance expectations.
Retention Principles
In line with the PDPA Retention Limitation Obligation, we retain personal data only for as long as:
- The original business purpose for collection is being served.
- There is a legitimate legal or regulatory requirement for its continued storage.
When these conditions are no longer met, data is securely deleted or anonymised using Privacy-Enhancing Technologies (PETs) where applicable.
Data requests and user rights
Under the PDPA, users in Singapore have the right to access and correct their personal data. You may withdraw consent for the use of your data at any time, subject to legal or contractual restrictions.
Contact route
To trigger a request or discuss our data protection practices, please contact our Singapore Data Privacy team:
Singapore Data Protection Office
Contact usWe aim to verify and respond to all formal requests within 30 days.

