PROVENANTIA

Legal

Privacy notice

What we collect when you visit this site or request early access, why, and what you can ask us to do about it.

Effective 4 October 2026Singapore PDPA · EU and UK GDPR

In short

If you request early access, we keep your name, work email and company so we can tell you when we open and, if you ask, arrange a short call. We may record how this site is used, in our own systems only; visitors in the EU, the UK and Switzerland are asked first, and everyone else can opt out. We never sell personal data or share it with advertisers.

Who we are

Provenantia Private Limited, a company incorporated in Singapore, registered office 87A Desker Road, Singapore 209609 ("we" or "us"). We are responsible for the personal data described here under Singapore's Personal Data Protection Act 2012 (PDPA) and, where it applies, the EU and UK GDPR. Our Data Protection Officer is at [email protected].

What we collect

When you request early access
Your work email, first name, company if you give it, whether you asked for a short call, the page or campaign that brought you here, the wording you agreed to, and a scrambled version of your IP address used only to stop abuse.
When you visit
Our website host records standard technical details of each request (IP address, browser, page, referring page and time) to run and protect the site. If you are tracked (see below), we also record the pages you view and the buttons you click, with a random visitor number and your country.
When you write to us
Your name, email address and whatever you choose to tell us.

Visit tracking

We may record how the site is used to improve it. The records go only to our own database; we use no advertising or third-party analytics tools. In the EU, the EEA, the UK and Switzerland, or if we cannot tell where you are, nothing is recorded unless you choose "Accept". Elsewhere, a short notice tells you the first time, with an "Opt out" button. A "do not track" signal from your browser (Global Privacy Control) always counts as opting out. You can change your choice at any time with "Privacy choices" at the bottom of every page.

Your browser keeps your display setting, your tracking choice and, only if you are tracked, the random visitor number. Our host may set a strictly necessary security cookie, and the sign-up form uses the host's bot check. None of these are used for advertising.

Why we use it, and our legal basis

  • To tell you when we open and send the occasional update you signed up for (your consent).
  • To arrange a short call if you asked for one (steps you asked for before a possible contract).
  • To understand how the site is used and keep it secure (your consent where we ask for it; otherwise our legitimate interest in running a secure, useful site).
  • To meet legal obligations.

Every email has an unsubscribe link. We will not use your data for a new purpose without telling you and, where needed, asking first.

Who helps us

Cloudflare hosts this site, stores the sign-up and visit records and runs the bot check. Google runs our email and calendar. Both handle data under contracts that require them to protect it. We may also share data with professional advisers under a duty of confidentiality, or where the law requires it. We never sell or rent personal data.

Transfers outside Singapore

Sign-up and visit records are stored with Cloudflare in the Asia-Pacific region; Cloudflare and Google may process data in other countries, including the United States. We use contractual protections so the data is protected to a standard comparable to the PDPA, and for data from the EU, the EEA or the UK, standard contractual clauses (with the UK addendum) or the recipient's EU-US Data Privacy Framework certification.

How long we keep it

  • Early-access sign-ups: until you unsubscribe and ask us to delete them, and in any case no more than 24 months after our last contact.
  • Visit records: 90 days, or 13 months if linked to a sign-up.
  • Records of your choices: as long as we hold the related data, plus one year, as proof.
  • Technical request logs: the short period set by our host.

Your rights

You may ask us what personal data we hold about you and how it has been used, correct it, or withdraw your consent. If you are in the EU, the EEA or the UK, you may also ask us to delete it, restrict its use, give you a copy in a common format, or stop using it where we rely on legitimate interest, and you may complain to your local data protection authority.

Write to [email protected]. We will confirm your identity and respond within 30 days. If you are not satisfied, you may contact Singapore's Personal Data Protection Commission at pdpc.gov.sg.

Security and breaches

The site is served over an encrypted connection, and access to our records is limited to people who need it. No system is completely secure. If a data breach must be notified under the PDPA, we will tell the Personal Data Protection Commission and, where required, the people affected.

Changes and contact

This site is for businesses and not directed at anyone under 18. When we launch, we will publish a fuller notice and update the date above. Questions: Data Protection Officer, Provenantia Private Limited, 87A Desker Road, Singapore 209609, [email protected]. See also our terms of use.