Privacy policy.

This policy explains how Kher & Avovo (“we”, “us”, “our”) collects, uses, discloses, and protects personal data when you visit kheravo.com or get in touch with us. We are committed to handling personal data responsibly and in accordance with the PDPA.

TODO(owner): The website is operated by [Legal entity name] (UEN [UEN]), a company registered in Singapore at [Registered address]. Our Data Protection Officer can be reached at [DPO contact / dpo@kheravo.com]. Fill these in before publishing.

01Personal data we collect

We only collect personal data that you choose to give us, plus limited technical data created automatically when any website is visited.

Information you submit through our contact form

When you complete the enquiry form on our contact page, we collect:

• Name — so we know who we are speaking with.
• Email address — so we can reply to you.
• Company — optional; you may leave this blank.
• Area of interest — the option you select (for example, marketing, consultancy, or a packaged offering).
• Your message — whatever you tell us about what you are aiming for.

If you email us directly at contact@kheravo.com, we receive whatever you include in that message.

Technical and usage data

Like most websites, our hosting provider (Cloudflare Pages) automatically processes basic technical data — such as your IP address, browser type, and the pages requested — to serve the site securely and reliably. We do not use this data to build a profile of you.

We intend to use privacy-friendly, cookieless analytics (Plausible) to understand aggregate site usage. Plausible does not use cookies and does not collect personal data. Analytics is not active at this time; if and when we enable it, this policy will continue to apply.

This website does not set tracking or advertising cookies, and there is no consent banner because none is required for the processing described here.

02How we use your data

We use the personal data you provide to:

• respond to your enquiry and continue the conversation;
• understand what you are looking for so we can propose a sensible next step;
• keep a reasonable record of our correspondence; and
• operate, secure, and improve our website.

We do not use your data for automated decision-making, and we do not send marketing email unless you have separately asked us to.

03Consent and legal basis

By submitting the contact form or emailing us, you consent to us collecting and using your personal data for the purposes set out above. Under the PDPA, we will only collect, use, or disclose personal data for purposes that a reasonable person would consider appropriate in the circumstances, and we rely on your consent (and, where relevant, the legitimate interests and other lawful bases recognised under the PDPA) to do so.

04Who handles your data (our processors)

We use a small number of trusted service providers to operate the site. These act on our behalf and are not permitted to use your data for their own purposes:

• FormSubmit — when you submit the contact form, FormSubmit receives the form fields and relays them to us by email at contact@kheravo.com. It is a form-to-email relay; we do not maintain a customer database through it.
• Cloudflare Pages — hosts and serves this website.
• Our email provider — email sent to contact@kheravo.com is forwarded to and read in our mailbox.

Some providers may process or store data outside Singapore. Where data is transferred overseas, we take reasonable steps to ensure it receives a standard of protection comparable to that under the PDPA.

05Disclosure

We do not sell your personal data, and we do not trade or rent it to anyone. We disclose personal data only to the service providers described above, or where we are required to do so by law or to protect our legal rights.

06Retention

We keep your personal data only for as long as it is needed for the purposes above or as required by law. Enquiry correspondence is typically retained while there is an active or prospective relationship and for a reasonable period afterwards, after which it is deleted or anonymised.

TODO(owner): Confirm a specific retention period for enquiry data (for example, [24 months] after our last contact) and state it here.

07How we protect your data

We apply reasonable administrative and technical measures to protect personal data against unauthorised access, use, or disclosure — including serving the site over HTTPS and limiting access to the mailbox that receives enquiries. No method of transmission over the internet is completely secure, but we take security seriously.

08Your rights under the PDPA

Subject to the PDPA, you have the right to:

• Access — ask what personal data of yours we hold and how it has been used or disclosed;
• Correction — ask us to correct personal data that is inaccurate or incomplete;
• Withdraw consent — withdraw your consent to our use of your personal data at any time, on reasonable notice.

If you withdraw consent, we may no longer be able to respond to your enquiry. We will respond to verified requests within a reasonable time. We may charge a small fee for an access request as permitted under the PDPA.

09Contacting us about your data

To make an access, correction, or withdrawal request, or to ask any question about this policy or how we handle your data, email us at contact@kheravo.com.

TODO(owner): If you set up a dedicated Data Protection Officer mailbox (e.g. [dpo@kheravo.com]), name it here and route data requests to it.

If you are not satisfied with how we have handled your personal data, you may contact Singapore's Personal Data Protection Commission (PDPC).

10Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above. Material changes will be reflected on this page; please check back periodically.