Privacy Policy

1. Who we are

"We", "us", and "our" refer to the Innovate Solution group: Innovate Solution Global Pte. LTD., headquartered at 101 Kitchener Road, #03-02, Jalan Besar Plaza, Singapore 208511, Singapore; Innovate Solution Global FZ-LLC in Ras Al Khaimah, United Arab Emirates; and Innovate Solution in Dhaka, Bangladesh. The three offices operate together under the Innovate Solution brand.

Innovate Solution Global Pte. LTD. is the data controller for personal information collected through innovatesolution.com.

What this policy covers. This policy covers this website and our own sales, marketing and support activity. When a customer uses one of our products, the personal data of their customers is processed by us on the customer's behalf; that processing is governed by the customer's agreement and our Data Processing Agreement, not by this policy. Products with their own website publish their own privacy notices.

2. Information we collect

2.1 Information you give us

• Contact & enquiry data — your name, email address, phone number, company, country, and the contents of any message you send us through the contact form, the meeting-booking page, email, or phone.
• Product Advisor answers — if you use the AI Product Advisor and ask for your recommendation, we store the answers you gave (business type, team size, budget range and similar), your contact details, and the language you used.
• Account data — if you become a customer, your login credentials, billing details, and account preferences.
• Project & communications data — files, documents, briefs, and correspondence shared during the course of an engagement.

2.2 Information we collect automatically

• Server and security logs — IP address, browser type, operating system, referrer URL, pages requested and timestamps. These are recorded by our web server and by our content-delivery and security provider for every request, and are used to keep the site running and secure.
• Technical details with your enquiry — when you send the contact form or a Product Advisor request, we record the IP address it came from, the device type (mobile, tablet or desktop), operating system, browser name and version, and the browser's User-Agent string. This is read from the request your browser already sends — we ask you for nothing extra and use no third-party lookup service. We use it to spot spam and abuse, to troubleshoot problems with the form, and to understand which devices our enquiries come from. Only authorised staff can see it.
• Form-abuse protection — to stop automated submissions we keep a short-lived counter keyed to a one-way hash of your IP address. The IP address itself is not stored in that counter.
• Analytics, with your consent only — see section 5.
• Product Advisor usage counts — anonymous daily totals (how many people started, reached each step, or left). These contain no personal information and cannot be linked to you.

2.3 Information from third parties

• Public business data — we may augment your enquiry with publicly available information about your company (size, sector, location) to prepare for our conversation.
• Referrals & partners — if you reach us through a partner or referrer, we receive your contact details from them with your knowledge.

3. Why we use your information

• Responding to enquiries — to reply to demo, quote and support requests and general questions, including sending you the recommendation you asked the Product Advisor for.
• Delivering services — to operate our products, deliver custom projects, and provide ongoing support to customers.
• Billing & accounting — to invoice, collect payment, and meet tax and accounting obligations.
• Service improvement — to understand how our website is used and to improve it.
• Marketing — to send relevant updates to existing customers and to prospects who have opted in. You can unsubscribe at any time.
• Security, legal & compliance — to protect our systems, prevent abuse and fraud, meet our obligations under applicable law, and defend against claims.

4. Legal basis

Where the EU or UK GDPR applies, we rely on the following legal bases:

• Contract — to deliver services you have requested or signed up for, and to take steps you ask for before entering a contract (for example, preparing a quote).
• Consent — for analytics cookies and for marketing communications. You can withdraw consent at any time; withdrawing does not affect processing that already took place.
• Legitimate interest — for answering enquiries, running and securing our website, and improving our services. We have weighed our interest against your rights and freedoms.
• Legal obligation — to comply with tax, accounting, and regulatory requirements.

Where Singapore's Personal Data Protection Act (PDPA) applies, we collect, use and disclose personal data with your consent or as otherwise permitted by the Act, and only for purposes a reasonable person would consider appropriate in the circumstances.

5. Analytics

We use Google Analytics 4, provided by Google, to understand how visitors use this website — which pages are read, how visitors arrive, and where they leave.

• Only with consent. Google Analytics is not loaded, and no analytics cookie is set, unless you choose "Accept" in the cookie banner. If you reject, or make no choice, analytics stays off. A browser Global Privacy Control signal is treated as a rejection.
• What it collects. Pages viewed, approximate location derived from your IP address (country and city level), device and browser type, referring site, and interactions such as clicks and scrolls, tied to a random identifier stored in a first-party cookie. Google Analytics 4 does not log or store IP addresses.
• What we have switched off. Google signals and advertising personalisation are disabled. We do not use Google Analytics for advertising or remarketing, and we do not send it your name, email address or the content of any form.
• Google Ads conversion measurement. We advertise on Google Search. If you accept cookies, the Google Ads tag records that you arrived from one of our ads and, if you then send an enquiry, reports that an enquiry happened, with a random reference number — never your name, email address or message. We use this only to see which ads work. Remarketing and ad personalisation are switched off.
• Retention: 14 months. User-level and event-level analytics data is kept for 14 months and then deleted automatically. The analytics cookies on your device expire after 14 months as well. Aggregated reports that cannot identify anyone may be kept longer.
• Changing your mind. Use the "Cookie preferences" link in the footer at any time. Choosing "Reject" switches analytics off and deletes the analytics cookies from your browser. You can also install Google's opt-out browser add-on.

The cookies involved are listed in our Cookie Policy.

6. Job applicants and candidate assessments

When you apply for a role on our Careers pages we collect the details you enter (contact details, education, experience, skills, salary expectation and availability), your answers to the role's assessment questions, your CV and your photo. We use them only to assess you for that role and similar roles at Innovate Solution.

• Assessment analytics. To keep the assessment fair, the application form records how it is completed: time spent on each step and question (active time is counted only while the page is visible and in use), when the page goes into the background, the number of edits to an answer, how many characters were typed or pasted into an answer, earlier saved versions of your written answers, and whether you returned to a question. Paste events are counted by length only.
• What we never collect. We do not record keystrokes, the contents of your clipboard, passwords, your browsing on other pages or sites, or anything outside the application form, and we do not use device fingerprinting.
• Question rotation. Assessment questions are drawn from a larger bank, so different candidates may receive different but equivalent questions. The set you received is stored with your application.
• How it is used. The analytics, together with the answers, produce indicators that help our HR team decide which applications to read more closely (for example a very long answer written in a few seconds, or an answer closely matching another application). These indicators are decision support for people: they are not treated as proof of anything, and no application is rejected automatically. Hiring decisions are made by our HR team.
• Accommodations. You can tell us in the application that you may need an accommodation (for example extra time or assistive technology). Timing- and paste-based indicators are then not scored for your application.
• Who can see it. Only authorised HR staff and administrators, through our password-protected admin panel, and the HR team mailbox that receives each application. Applications are stored encrypted.
• Retention. Detailed assessment analytics are reduced to a summary after 365 days; unfinished applications are deleted after 30 days. You can ask us to delete your application at any time (see Contact).

7. Sharing your information

We do not sell personal information. We share it only with:

• Service providers acting on our instructions, each under contract and limited to what they need:
  • Cloudflare — content delivery and protection against attacks; it processes the technical data of every request.
  • Amazon Web Services — delivery of the emails our forms generate.
  • Google — Google Analytics and Google Ads conversion measurement (only if you consent) and Google Fonts, which delivers the typefaces this site uses and receives your IP address to do so.
  • Our hosting provider, and Inno Message — our own customer-communication platform, where enquiries are managed by our sales team.
• Group offices — our headquarters in Singapore and our offices in the UAE and Bangladesh work as one team. Data may flow between them as needed.
• Customers and partners — only where you have asked us to (e.g. a referral, a joint project).
• Authorities — where required by valid legal process.
• Acquirers — in the event of a merger, acquisition, or restructuring, with notice to you where required.

8. International transfers

Because we operate across Singapore, the UAE, and Bangladesh, and because some of our service providers operate globally, your data may be processed outside your own country. Where we transfer EU/UK personal data outside the EEA or UK, we rely on Standard Contractual Clauses or another approved transfer mechanism. Where the PDPA applies, we take steps to ensure the recipient provides a comparable standard of protection.

9. How long we keep your data

We keep personal information only as long as we need it for the purpose we collected it, or as long as the law requires. Typical retention windows:

• Enquiry, Product Advisor & sales correspondence: up to 3 years from last contact.
• Job applications (profile, answers, CV and photo): for as long as needed to recruit for the role and similar roles; you can ask us to delete yours at any time. Detailed assessment analytics: summarised after 365 days (see section 6).
• Customer account & billing records: 7 years after end of engagement (for tax and accounting).
• Marketing subscribers: until you unsubscribe.
• Analytics data (Google Analytics): 14 months.
• Your cookie choice: 12 months, after which we ask again.
• Anonymous Product Advisor usage counts: 120 days.
• Server logs: typically 90 days.
• IP address and User-Agent stored with an enquiry: 365 days, after which they are deleted automatically (the general device, operating-system and browser type stay with the enquiry).

10. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion (the "right to be forgotten") subject to legal exceptions.
• Object to or restrict processing.
• Request data portability in a structured machine-readable format.
• Withdraw consent at any time where we rely on it.
• Lodge a complaint with your local data protection authority — in Singapore, the Personal Data Protection Commission.

To exercise any of these rights, email us at privacy@innovatesolution.com. We respond within 30 days. We may need to verify your identity before acting on a request.

11. Security

We use technical and organisational measures to protect personal information, including encryption in transit (TLS), encryption at rest for enquiry records and credentials, access controls, and regular backups. No system is perfectly secure; where the law requires it, we will notify affected individuals and the relevant authority of a breach affecting personal data without undue delay.

12. Children

Our website and services are intended for businesses and are not directed at children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page and, where appropriate, by email. The "last updated" date at the top indicates the latest version.

14. Contact

Privacy questions, requests, or complaints go to our data protection contact:

Innovate Solution Global Pte. LTD.
101 Kitchener Road, #03-02, Jalan Besar Plaza
Singapore 208511, Singapore
Email: privacy@innovatesolution.com