Privacy Policy

Introduction

This Privacy Policy explains how AATECH Singapore Pte. Ltd. (UEN: 201839939C), operating as Lumvo.AI, collects, uses, discloses and protects personal data when you visit and use https://lumvo.ai ("Site").

References to "Lumvo.AI", "we", "us" or "our" in this Policy mean AATECH Singapore Pte. Ltd. We are committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2012 (Singapore) ("PDPA") and other applicable data protection laws.

Please read this Policy before submitting personal data to us. By using the Site, you acknowledge that you have read and understood this Policy.

1. What personal data we collect

We may collect the following categories of personal data:

1.1 Data you provide to us

• Contact and enquiry data: your name, business name, email address, phone number and the content of messages submitted through our contact form, email or WhatsApp.
• Business information: your industry, company size, role or other information you choose to share when making an enquiry.
• Communications: records of correspondence if you contact us by email, WhatsApp or other channels.

1.2 Data we collect automatically

• Usage data: pages viewed, links clicked, time spent on pages, navigation paths and session information.
• Technical data: IP address (used to derive approximate geographic location), browser type and version, operating system, device type, screen resolution and referring URL.
• Cookie data: information collected through cookies and similar technologies as described in our Cookie Policy.

2. How we collect your data

We collect personal data through:

• the contact form on the Site (powered by WPForms);
• direct email correspondence to hello@lumvo.ai;
• WhatsApp communications initiated by you via the click-to-chat link on the Site;
• cookies and analytics tools (Google Analytics 4) when you browse the Site; and
• our cookie consent management tool (CookieYes) when you interact with the cookie banner.

3. Why we process your data

We process personal data for the following purposes:

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Who we share your data with

We do not sell, rent or trade personal data. We may share data with the following categories of recipients, strictly as necessary for the purposes set out in this Policy:

• Service providers and processors: technology providers who host or operate the Site on our behalf, including Hostgator (web hosting), Google (Analytics 4), CookieYes (consent management), WPForms (contact form) and WP Mail SMTP (email delivery). These providers are authorised to use personal data only as directed by us and subject to appropriate data protection obligations.
• Professional advisers: legal, accounting, insurance or other professional advisers where necessary for the conduct of our business.
• Regulatory and law enforcement authorities: where required by law, court order or regulatory obligation, or where reasonably necessary to protect our rights, property or the safety of others.
• Business transfers: in connection with a merger, acquisition, restructure or sale of assets, subject to the acquirer being bound by equivalent data protection obligations.

5. International data transfers

Some of our service providers process data outside Singapore. In particular, Google LLC processes analytics data in the United States. Where personal data is transferred outside Singapore, we take reasonable steps to ensure that it receives a comparable level of protection, including by engaging service providers subject to internationally recognised data protection standards or contractual safeguards consistent with the PDPA's transfer limitation obligations.

6. Data retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected, to comply with legal, regulatory or contractual obligations, and to resolve disputes or enforce agreements.

• Enquiry data: retained for a reasonable period to respond to and follow up on your enquiry, and for up to six years thereafter to the extent required for legal or contractual purposes.
• Analytics data: retained in accordance with our Google Analytics configuration, subject to periodic review.
• Cookie consent records: retained for the period required to demonstrate compliance.

When personal data is no longer required, we will securely delete or anonymise it.

7. Cookies and tracking technologies

We use cookies and similar technologies on the Site. For full details, including the types of cookies we use, the purposes for which we use them and how to manage your preferences, please see our Cookie Policy.

8. Security

We implement reasonable technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include HTTPS encryption, access controls and secure hosting infrastructure.

While we take data security seriously, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at hello@lumvo.ai.

In the event of a data breach that is notifiable under the PDPA, we will take the steps required by applicable law, including notifying the Personal Data Protection Commission and, where required, the affected individuals.

9. Your rights

Under the PDPA and, where applicable, other data protection laws, you may have the following rights in relation to your personal data:

• Access: to request a copy of the personal data we hold about you.
• Correction: to request correction of inaccurate or incomplete personal data.
• Withdrawal of consent: to withdraw consent for processing activities based on consent, at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Data portability: where applicable under the PDPA's data portability obligation, to request that we transmit certain personal data to another organisation.
• Erasure and restriction: where applicable, to request deletion of or restrictions on the processing of your personal data.

To exercise any of these rights, or to ask questions about our personal data practices, please contact us at the details in Section 11. We will respond within the timeframes required by applicable law.

You may also raise a concern with the Personal Data Protection Commission of Singapore: www.pdpc.gov.sg

10. Third-party websites and services

The Site may contain links to third-party websites or services, including WhatsApp, that we do not operate. Once you leave the Site, this Policy no longer applies. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content, security or privacy practices of third-party services.

11. Children

The Site is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will take prompt steps to delete it.

12. Changes to this Policy

We may update this Policy from time to time to reflect changes to our practices, services, technology or applicable law. When we make a material change, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Site after the updated date constitutes acceptance of the revised Policy.

13. Contact us

For privacy enquiries, access or correction requests, consent withdrawal or data-related concerns: