Privacy Policy

1. Who we are

"We", "us", and "our" refer to the Innovate Solution group: Innovate Solution Global Pte. LTD., headquartered at 101 Kitchener Road, #03-02, Jalan Besar Plaza, Singapore 208511, Singapore; Innovate Solution Global FZ-LLC in Ras Al Khaimah, United Arab Emirates; and Innovate Solution in Dhaka, Bangladesh. The three offices operate together under the Innovate Solution brand.

Innovate Solution Global Pte. LTD. is the data controller for personal information collected through innovatesolution.com.

What this policy covers. This policy covers this website and our own sales, marketing and support activity. When a customer uses one of our products, the personal data of their customers is processed by us on the customer's behalf; that processing is governed by the customer's agreement and our Data Processing Agreement, not by this policy. Products with their own website publish their own privacy notices.

2. Information we collect

2.1 Information you give us

• Contact & enquiry data — your name, email address, phone number, company, country, and the contents of any message you send us through the contact form, the meeting-booking page, email, or phone.
• Product Advisor answers — if you use the AI Product Advisor and ask for your recommendation, we store the answers you gave (business type, team size, budget range and similar), your contact details, and the language you used.
• Account data — if you become a customer, your login credentials, billing details, and account preferences.
• Project & communications data — files, documents, briefs, and correspondence shared during the course of an engagement.

2.2 Information we collect automatically

• Server and security logs — IP address, browser type, operating system, referrer URL, pages requested and timestamps. These are recorded by our web server and by our content-delivery and security provider for every request, and are used to keep the site running and secure.
• Form-abuse protection — to stop automated submissions we keep a short-lived counter keyed to a one-way hash of your IP address. The IP address itself is not stored in that counter.
• Analytics, with your consent only — see section 5.
• Product Advisor usage counts — anonymous daily totals (how many people started, reached each step, or left). These contain no personal information and cannot be linked to you.

2.3 Information from third parties

• Public business data — we may augment your enquiry with publicly available information about your company (size, sector, location) to prepare for our conversation.
• Referrals & partners — if you reach us through a partner or referrer, we receive your contact details from them with your knowledge.

3. Why we use your information

• Responding to enquiries — to reply to demo, quote and support requests and general questions, including sending you the recommendation you asked the Product Advisor for.
• Delivering services — to operate our products, deliver custom projects, and provide ongoing support to customers.
• Billing & accounting — to invoice, collect payment, and meet tax and accounting obligations.
• Service improvement — to understand how our website is used and to improve it.
• Marketing — to send relevant updates to existing customers and to prospects who have opted in. You can unsubscribe at any time.
• Security, legal & compliance — to protect our systems, prevent abuse and fraud, meet our obligations under applicable law, and defend against claims.

4. Legal basis

Where the EU or UK GDPR applies, we rely on the following legal bases:

• Contract — to deliver services you have requested or signed up for, and to take steps you ask for before entering a contract (for example, preparing a quote).
• Consent — for analytics cookies and for marketing communications. You can withdraw consent at any time; withdrawing does not affect processing that already took place.
• Legitimate interest — for answering enquiries, running and securing our website, and improving our services. We have weighed our interest against your rights and freedoms.
• Legal obligation — to comply with tax, accounting, and regulatory requirements.

Where Singapore's Personal Data Protection Act (PDPA) applies, we collect, use and disclose personal data with your consent or as otherwise permitted by the Act, and only for purposes a reasonable person would consider appropriate in the circumstances.

5. Analytics

We use Google Analytics 4, provided by Google, to understand how visitors use this website — which pages are read, how visitors arrive, and where they leave.

• Only with consent. Google Analytics is not loaded, and no analytics cookie is set, unless you choose "Accept analytics" in the cookie banner. If you reject, or make no choice, analytics stays off. A browser Global Privacy Control signal is treated as a rejection.
• What it collects. Pages viewed, approximate location derived from your IP address (country and city level), device and browser type, referring site, and interactions such as clicks and scrolls, tied to a random identifier stored in a first-party cookie. Google Analytics 4 does not log or store IP addresses.
• What we have switched off. Google signals and advertising personalisation are disabled. We do not use Google Analytics for advertising or remarketing, and we do not send it your name, email address or the content of any form.
• Retention: 14 months. User-level and event-level analytics data is kept for 14 months and then deleted automatically. The analytics cookies on your device expire after 14 months as well. Aggregated reports that cannot identify anyone may be kept longer.
• Changing your mind. Use the "Cookie preferences" link in the footer at any time. Choosing "Reject" switches analytics off and deletes the analytics cookies from your browser. You can also install Google's opt-out browser add-on.

The cookies involved are listed in our Cookie Policy.

6. Sharing your information

We do not sell personal information. We share it only with:

• Service providers acting on our instructions, each under contract and limited to what they need:
  • Cloudflare — content delivery and protection against attacks; it processes the technical data of every request.
  • Amazon Web Services — delivery of the emails our forms generate.
  • Google — Google Analytics (only if you consent) and Google Fonts, which delivers the typefaces this site uses and receives your IP address to do so.
  • Our hosting provider, and Inno Message — our own customer-communication platform, where enquiries are managed by our sales team.
• Group offices — our headquarters in Singapore and our offices in the UAE and Bangladesh work as one team. Data may flow between them as needed.
• Customers and partners — only where you have asked us to (e.g. a referral, a joint project).
• Authorities — where required by valid legal process.
• Acquirers — in the event of a merger, acquisition, or restructuring, with notice to you where required.

7. International transfers

Because we operate across Singapore, the UAE, and Bangladesh, and because some of our service providers operate globally, your data may be processed outside your own country. Where we transfer EU/UK personal data outside the EEA or UK, we rely on Standard Contractual Clauses or another approved transfer mechanism. Where the PDPA applies, we take steps to ensure the recipient provides a comparable standard of protection.

8. How long we keep your data

We keep personal information only as long as we need it for the purpose we collected it, or as long as the law requires. Typical retention windows:

• Enquiry, Product Advisor & sales correspondence: up to 3 years from last contact.
• Customer account & billing records: 7 years after end of engagement (for tax and accounting).
• Marketing subscribers: until you unsubscribe.
• Analytics data (Google Analytics): 14 months.
• Your cookie choice: 12 months, after which we ask again.
• Anonymous Product Advisor usage counts: 120 days.
• Server logs: typically 90 days.

9. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion (the "right to be forgotten") subject to legal exceptions.
• Object to or restrict processing.
• Request data portability in a structured machine-readable format.
• Withdraw consent at any time where we rely on it.
• Lodge a complaint with your local data protection authority — in Singapore, the Personal Data Protection Commission.

To exercise any of these rights, email us at [email protected]. We respond within 30 days. We may need to verify your identity before acting on a request.

10. Security

We use technical and organisational measures to protect personal information, including encryption in transit (TLS), encryption at rest for enquiry records and credentials, access controls, and regular backups. No system is perfectly secure; where the law requires it, we will notify affected individuals and the relevant authority of a breach affecting personal data without undue delay.

11. Children

Our website and services are intended for businesses and are not directed at children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page and, where appropriate, by email. The "last updated" date at the top indicates the latest version.

13. Contact

Privacy questions, requests, or complaints go to our data protection contact:

Innovate Solution Global Pte. LTD.
101 Kitchener Road, #03-02, Jalan Besar Plaza
Singapore 208511, Singapore
Email: [email protected]