1. Who we are
This website, connectedcommons.co, is operated by RFTechstuff Pte Ltd as Connected Commons / Connected Commons Pte. Ltd. ("Connected Commons", "we", "us"), based in Singapore. We provide business solutions and market-entry support for SMEs and funded startups operating in Southeast Asia.
We are responsible for the personal data described in this policy and handle it in accordance with Singapore's Personal Data Protection Act 2012 (the "PDPA"). Our Data Protection Officer contact is in section 13.
2. What we collect
Information you give us
- Contact details: name, email address, phone or WhatsApp number, company name and role, when you fill in a form, join our email list, book a call, message us on WhatsApp or email us.
- Enquiry details: what you tell us about your business, your expansion plans and your needs, including anything you type into our website chatbot.
- Engagement information: if you become a client, the information needed to deliver the work, such as company documents, director and shareholder details for incorporation, and invoicing details. This is covered by your engagement agreement as well as this policy.
Information collected automatically
- Technical data such as IP address, browser type, device type, pages visited and referring page, collected by our hosting provider and, if you accept analytics cookies, by our analytics tool.
- Your cookie preferences, stored on your device. See our Cookie Policy.
We do not knowingly collect sensitive categories of data through this website. Please do not send us government ID numbers, bank details or passwords through forms, the chatbot or WhatsApp. If we need identity documents for an engagement, we will tell you how to send them securely.
3. Why we use it
| Purpose | Examples |
|---|---|
| Respond to you | Answering enquiries, replying on WhatsApp or email, running the chatbot |
| Arrange meetings | Booking discovery calls and sending reminders |
| Provide our services | Scoping, delivering and invoicing work; coordinating with partners where you ask us to |
| Keep in touch | Sending updates or resources if you joined our email list. You can unsubscribe at any time. |
| Improve the website | Understanding which pages are useful (only with your consent where analytics cookies are used) |
| Meet legal duties | Accounting, tax, and anti-money-laundering or client due diligence checks where they apply to a service we arrange |
We will only use your personal data for purposes you have been told about, or as the PDPA otherwise allows. If we want to use it for a new purpose, we will ask you first.
4. Who we share it with
We do not sell your personal data. We share it only with service providers that help us run the business and only as needed for the purposes above:
- Google Workspace (email, calendar booking, spreadsheets that store form submissions).
- Website hosting and code hosting (Vercel and GitHub).
- Messaging: WhatsApp, if you contact us there.
- Chatbot provider: [NAME OF CHATBOT PROVIDER], which processes chat messages for us.
- Analytics provider: [NAME, if you use one], only if you accept analytics cookies.
- Partner firms (for example licensed corporate service providers, outsourcing or cybersecurity partners): only when you ask us to introduce you or an engagement needs it.
- Professional advisers, regulators and authorities where the law requires or permits it.
Where a provider handles data for us, we require it to protect that data and use it only for our instructions.
5. Transfers outside Singapore
Many of the providers above store data on servers outside Singapore, including in the United States and Europe. Where we transfer personal data overseas, we take reasonable steps to make sure the recipient provides a standard of protection comparable to the PDPA, for example through contractual commitments.
6. How long we keep it
- Enquiries that do not proceed: up to 24 months, then deleted or anonymised.
- Email list: until you unsubscribe.
- Client records and invoices: for as long as the engagement runs and then for the period needed for accounting, tax and legal purposes (generally [5] years in Singapore).
- Chatbot transcripts: up to 12 months.
We stop keeping personal data once it is no longer needed for the purpose it was collected for or for legal or business reasons.
7. How we protect it
We use reasonable safeguards such as access controls, two-step verification on our business accounts and encrypted connections (HTTPS). No online system is completely secure. If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires.
8. Your rights
Under the PDPA you may:
- ask for access to the personal data we hold about you and how it has been used or disclosed in the past year;
- ask us to correct data that is inaccurate or incomplete;
- withdraw your consent to our collection, use or disclosure of your data. Tell us by email and we will explain what this means for the services we can provide, then stop within a reasonable time (usually 10 business days).
To make a request, email hello@connectedcommons.co. We may need to verify your identity first. We aim to respond within 30 days. In some cases the law lets us charge a reasonable fee for access requests or decline a request, and we will explain why if so.
9. Cookies
We use a small number of cookies and similar technologies. Essential ones are always on. Analytics and other optional ones only run after you accept them. Read the Cookie Policy and change your choice at any time with .
10. Children
Our website and services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children.
11. Visitors outside Singapore
Our services are offered from Singapore. If you are in the European Economic Area, the United Kingdom or Indonesia, local data protection laws may give you additional rights, including the right to object to processing, to erasure and to data portability. Email us and we will handle your request in line with the law that applies to you. Where we rely on consent, you can withdraw it at any time.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date above shows when it last changed. For significant changes we will give a clearer notice, for example on the website.
13. Contact and Data Protection Officer
For questions, requests or complaints about how we handle personal data, contact our Data Protection Officer:
Data Protection Officer, Connected Commons
Email: hello@connectedcommons.co
Phone: +65 8034 9668
Address: [BUSINESS ADDRESS IN SINGAPORE]
If we have not resolved your concern, you can contact the Personal Data Protection Commission Singapore at pdpc.gov.sg.