Privacy Policy
This policy explains what personal data getnali.com collects, why, who we share it with, how long we keep it, and the rights you have under Singapore's Personal Data Protection Act (PDPA).
1. Who we are
Nali Consultants LLP (“Nali”, “we”, “us”) is a software engineering practice registered in Singapore. This policy explains how we collect, use, and protect personal data on getnali.com.
2. Scope of this policy
This policy covers personal data collected through getnali.com — our public website, booking system, and admin tools. It does not cover data processed as part of a signed client engagement (project data, source code, or systems delivered under a Master Service Agreement or Statement of Work) — that data is governed by the terms of the relevant signed agreement, not this page.
3. Data we collect
We collect data you provide directly:
- Contact forms: name, email address, company name, and your message.
- Booking requests: name, email, phone number, company, timezone, and project description.
- Job applications: name, email, LinkedIn profile (optional), cover note, and CV/resume file.
We also collect anonymised analytics data (page views, referrers, browser type) via Google Analytics 4 when you visit public pages. Analytics tracking can be blocked via your browser settings or a privacy extension.
4. Purposes & legal basis
We process personal data for the following purposes, each with a specific legal basis under Singapore’s Personal Data Protection Act 2012 (PDPA):
- Responding to booking requests and job applications — basis: your consent, given when you submit the form.
- Operating and securing the website, including spam prevention via reCAPTCHA — basis: our legitimate business interest in running a functioning, abuse-free site.
- Understanding site usage via aggregated analytics — basis: your consent to non-essential cookies, or legitimate interest where data is fully anonymised.
5. Who we share data with
We use the following third-party processors to operate getnali.com. None of them are permitted to use your data for their own purposes.
- Supabase — database hosting and admin authentication.
- Mailgun — sending transactional emails (e.g. booking confirmations).
- Google Analytics 4 — anonymised website analytics.
- Google reCAPTCHA — spam and bot protection on our forms.
6. International transfers
Supabase hosts our database on Amazon Web Services in the Singapore region (see Data security, below). Google Analytics 4 and Google reCAPTCHA are operated by Google and may process data on servers outside Singapore, including in the United States. Where this occurs, Google’s standard contractual safeguards apply.
7. Data retention
Enquiry and application data is retained for up to two years, or until you request deletion. Booking records are retained for twelve months after the call. Analytics data is retained for fourteen months per Google Analytics defaults.
8. Your rights under the PDPA
Under the PDPA, you have the right to access the personal data we hold about you, request correction of inaccurate data, and withdraw your consent to our processing at any time. To exercise these rights, email dpo@getnali.com. We will respond within thirty days. Withdrawing consent may affect our ability to respond to an enquiry, booking, or application already in progress.
10. Data security
Personal data is stored on Supabase (hosted on AWS in the Singapore region) with row-level security and encryption at rest. We do not store credit card or payment data.
11. Third-party links
getnali.com links to external resources and, in some cases, past client websites. We are not responsible for the privacy practices of external sites — review their own policies before submitting data to them.
12. Children's data
getnali.com is a business-to-business website and is not directed at, or intended for use by, individuals under 18. We do not knowingly collect personal data from children.
13. Changes
We may update this policy from time to time. Material changes will be noted with an updated date at the top of this page.
14. Contact
Privacy questions? Email us at dpo@getnali.com.