Privacy and Data Protection Policy

This Privacy and Data Protection Policy sets out the practices that Anagram Consulting Pte Ltd (“Company”, “we”, “our”, “us”) follow with respect to the collection, use maintenance, transfer and disclosure of information collected when each person (“you”, “your”) who access the Anagram website and the service provided therein (hereinafter referred to as “Anagram Web Application”) by the Company.

We respect and value the privacy of each of you who enter Anagram Web Application, and we commit towards maintaining the highest standards required in order to protect any personal information you consent to share with us in accordance with the Singapore’s Personal Data Protection Act 2012 (the “PDPA”). This Privacy Policy applies only to information we collect from the Anagram Web Application and does not apply to any other application, website or business activity of the Company.

The purpose of this policy is to provide you with an understanding of how we collect, handle and use your personal data.

We reserve the right to revise this Privacy Policy at anytime, without prior notice, and the changes will be effective subsequent to posting the changes to the Anagram Web Application. Please check the Anagram Web Application frequently to be updated on the changes. By accessing the content and services made available on the Anagram Web Application and by providing your personal data to us, you acknowledge and agree that you have fully read and understood this policy, and consent to the collection, use, processing, and disclosure of your personal data as described in this policy. If you do not want the Company to collect, use, store, transmit or display collected data, please do not install, subscribe or use the Anagram Web Application.

The Company collects personal data about you when you (1) register for Anagram on the Anagram Web Application, (2) use our products, (3) subscribe (4) communicates with us through any mode of communication including, but not limited to, chat, phone and email.

1. Information collected when you use the Anagram Web Application

  1. Client Information

    When you register with us through the Anagram Web Application, it will prompt you to provide us with information such as your login credentials (e.g. your name, company name, designation, email address). As part of our commitment to the utmost security and privacy, we want to emphasize that any sensitive information, including cloud access credentials, will be handled with the highest level of confidentiality.

    Your cloud access credentials and other sensitive data are securely stored in our secret management system, which employs robust encryption and access controls. Our team follows strict security protocols to ensure that only authorized personnel have access to this information, and it is never shared or disclosed to any unauthorized parties.

    Additionally, during customer service telephone calls, emails, and other communications with us, we may collect information such as the identity of the caller or sender of the email, the date and time of the call or email, and the subject and resolution of the issue. All interactions and related data are treated with the utmost respect for privacy and are used solely for the purpose of providing excellent service and support.

  2. Usage Information

    We may collect “usage information” anytime you visit, view and/or interact with our Anagram Web Application.  We may collect your computer’s IP address, browser type, operating system version, geolocation information, cookies, IP address, information regarding your browsing activities (e.g., parts of the website visited, items clicked on) and any other server log information. We may associate this information with your personally identifiable information.

  3. Information collected when operating the Anagram tool

    We may collect information such as IP address, Cloud Access credentials, URI, query, host, user agent and any other information you may provide to us in relation to the service.

  4. Payment information

    Payments made through the Anagram Web Application are processed through a third-party payment processor. Information to administer, manage, and fulfill the purchases and subscriptions you make, may be collected by us or on our behalf. Such information may include payment information credit card number, account authentication information, and contact information including your full name, billing and shipping address and email address.

2. How We Use Your Information

The Company collects personal data for some or all of the following reasons.

  1. Provide and maintain the services- To process and fulfil your purchases and subscriptions, send you confirmation emails of your purchase and subscription status and allow you to pay for subscriptions.

  2. Improve, personalize, and develop the services- We use the information collected to; improve and personalize your experience, perform data analysis and testing, collect feedback to help improve our programs, features or/and services, produce certification, enhance the online experience of using our Anagram Web Application as further described in the section ‘Use of Cookies’.

  3. Communicate with you- To alert you about products upgrades, technical alerts and revisions, respond to you when you contact us, and promote new features or products that we feel may be of interest you to assist in addressing your inquiries and troubleshooting, about our products and services. To notify you about changes to our products and services and provide you with information that is relevant to your use of the service.

3. Disclosure to Third-Party

We do not sell, trade or otherwise transfer to third parties your personally identifiable information. Any information provided to the Anagram Web Application will be protected from loss, misuse, unauthorized access or disclosure, alteration or destruction.

However, we share your personal information with authorized third parties who assist us in operating the Anagram Web Application, conducting our business or servicing you including, but not limited to, credit card payments and online support, as long as these parties are compliant with applicable data protection laws.  

We may choose to retain your personal information to the full extent of any period provided by law and statute. We may also choose to delete your personal information from our databases after a required number of years and/or if the intended purposes for which we have collected your information is completed or is no longer relevant. We may release your information when we are required to comply with the law, enforce our policies, or protect the Company and other third-party rights, property or safety. However, non-personally identifiable information may be provided by the Company to third parties for marketing, advertising, or other uses.

4. Cookies and Tracking Codes

The Anagram Web Application may also use “cookies” and other technologies enabling us to recognize users and customize their experience and obtain information regarding the use of it. A cookie which is a small text file that a website’s server places on a user’s computer, enables to transmit information back to the website’s server regarding the browsing activities of the computer user on the Anagram Web Application. This may also include information such as pages and content viewed, the time and duration of visits and whether the user clicked on an advertisement.  Cookies are also used to recognize users and maintain data related to a particular individual.  If you prefer not to accept cookies from the Anagram Web Application, you can modify the settings on your web browser.

The types of Cookies we use

  1. Necessary cookies: Necessary cookies enable you to use our Anagram Web Application and all it’s features, such as enabling access to secure areas of it. Without these cookies you may not be able to use all the features of our Anagram Web Application.

  2. Performance cookies: Performance cookies collect information about how you use our Anagram Web Application so we can improve them for you in future. For example, they collect information on which pages you visit most often and any error messages you may get. The information collected by these cookies is anonymous. They do not collect any information that can identify you personally.

  3. Functionality cookies: We use functional cookies to provide enhanced functionality and personalization, to remember your preferences, to diagnose server and software errors, and in cases of abuse, track and mitigate the abuse. The information these cookies collect is anonymous. They cannot track your browsing activity on other websites.

  4. Targeting/advertising cookies: We and our service providers may use advertising cookies to deliver ads that we believe are relevant to you and your interests. For example, we may use targeting or advertising cookies to customize the advertising and content you receive on our Anagram Web Application, to limit the number of times you see the same ad on our Anagram Web Application and to help measure the effectiveness of our advertising campaigns.

  5. Social media cookies: Our Anagram Web Application uses third-party cookies from social media sites such as Facebook and LinkedIn to enable in-depth campaign reporting and to track social network users when they visit our Anagram Web Application, by using a tagging mechanism provided by those social networks. These cookies can also be used for event tracking and remarketing purposes. Any data collected with these tags will be used in accordance with our Privacy Policy and with the social network’s privacy policies.

Third-Party Cookies

Third-Party cookies we use include but are not limited to Google Analytics, Facebook Inc., HotJar, Mix Panel, and Pendo.

How do you change cookie preferences or block cookies?

For the performance cookies and targeting cookies when starting a new session on our Anagram Web Application, you can choose to opt-out of these. It is possible that any advertising you receive will be less targeted as a result, but the Anagram Web Application should function correctly.

If you wish to disable the strictly necessary cookies, then within your browser you can choose whether you want to accept cookies or not. Different browsers make different controls available to you. Generally, your browser will offer you the choice to accept, refuse or delete all cookies, third-party cookies, or specific website cookies. Each browser’s website should contain instructions on how you can do this.

If you block these cookies on our Anagram Web Application, certain features and services may not function properly.

5. Company policy towards minors

Our Anagram Web Application are for a general audience.  We do not intentionally collect personally identifiable information from users of this website who are under the age of 13.

6. Threat Assessment and Protection

We continuously invest in the latest technologies and best practices to maintain the confidentiality, integrity, and availability of your information. We have standardized enterprise-wide analysis of software-related threats within the organization and have prioritized the proactive improvement of threat coverage throughout the organization to ensure that there are no leaks of the data we collect.

We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure we have put in place the following suitable physical, electronic and managerial procedures to secure the information.

  • The Company uses strong passwords, multi-factor authentication, and role-based access permissions to make sure that only authorized people can access our systems and data.

  • The Company uses secure protocols to transmit data over the internet. This helps to protect our data from being intercepted by unauthorized people.

  • The Company has clear data retention policies that define how long we keep different types of data. This helps us to ensure that we only keep data for as long as necessary and that we dispose of it securely when it is no longer needed.

  • The Company keeps systems and software up to date with the latest security patches. This helps to protect our systems from known vulnerabilities.

  • The Company conducts regular security audits and assessments to identify and address any security vulnerabilities. This helps us to keep our systems secure.

  • The Company encrypts the offline data stored on our devices using strong encryption algorithms. This helps to protect our data from being accessed by unauthorized people if our devices are lost or stolen.

  • The Company uses secure key management techniques to store and handle encryption keys. This helps to protect our keys from being compromised.

  • The Company monitors systems for unauthorized or illegal access attempts. We also record specific activities, such as who accesses personal data and with whom the data is being shared.

  • The Company encrypt, pseudonymize, and anonymize data whenever possible to protect it from unauthorized access.

  • The Company design systems with privacy in mind. We also implement data protection measures by default, so that we don’t have to add them on later.

  • The Company has a process in place to notify the authorities and our data subjects in the event of a data breach.

  • The Company uses data-minimizing mechanisms to collect and process only the data that we need. This helps to protect user privacy.

  • The Company continuously monitor privacy protection measures to make sure that they are effective.

  • The Company has implemented procedures for dealing with requests and the satisfaction of data subjects’ rights, such as the right to be forgotten and the right to data portability.

  • The Company assesses the potential risks for the personal data that we collect and process. This helps us to identify and address any potential privacy risks.

7. Storage and Retention

We may keep information and content in our systems, backup files and archives as follows.

  1. The Company use encryption to protect your data both when it is stored on our servers and when it is transmitted between our servers and your devices. This means that your data is scrambled so that it cannot be read by unauthorized people.

  2. The Company is regularly taking backup data so that we can restore it in case of a disaster. We also test our backup procedures to make sure that they work properly.

  3. The Company monitors systems for security incidents. This includes monitoring access to our systems, network traffic, and system activities. We also have a Security Operation Centre (SOC) that monitors our systems 24/7.

  4. The Company has classified data based on its sensitivity. This means that we apply different security controls to different types of data. For example, we use stronger encryption for more sensitive data.

  5. The Company will dispose of your data when the business relationship ends. We will either anonymize the data or destroy it.

We will retain your personal data as long as necessary to provide you with the services requested. However, once your account has been deleted/de-activated, your personal data will be stored in our archives for six months from the de-activated date and we will remove it from our systems, and records and/or take steps to properly anonymize it so that you can no longer be identified from it, unless we need to keep your personal data, including if we need to keep your personal data to comply with legal or regulatory obligations to which we are subject.

8. Your Rights

  1. Right of access- You may have the right to obtain from us confirmation as to whether personal data concerning you is processed, and, where that is the case, to request access to the personal data.

  2. Right to rectification- You may have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

  3. Right to object- If the processing of your personal data is based on legitimate interests, you may have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we can be required to no longer process your personal data. Moreover, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case, your personal data will no longer be processed for such purposes by us.

  4. Right to fair treatment- We will not discriminate against you for exercising any of your privacy rights. Irrespective of your standing on your privacy preferences, we will provide the services.

  5. To restrict the use of your information- You can request to restrict the use of your information.

  6. To complain to a supervisory authority – If you have any complaints regarding the data collected and the usage of it, you have the right to lodge a complaint to a superior authority.

9. How to Contact Us

If you have any questions or concerns regarding the Privacy Policy, please feel free to contact us at the following email or telephone number;

Email: [email protected]

Phone: +65 3158 0280