Privacy policy
This policy explains how Monsoon (operated by AMBER TIDE MEDIA PTE. LTD., UEN 202633499E, “we”) collects, uses, discloses and protects your personal data under Singapore’s Personal Data Protection Act (PDPA).
What we collect
Consultation bookings: name, company, location, industry, services needed, timeline, contact method and number, email and message.
AI assistant: what you type in the chat; if you agree to leave your contact, your name and contact details.
Client portal: account details (name, email, mobile, role, language and time zone), sign-in records, and issues, documents, contracts and invoices uploaded by you or your company.
Technical data: IP addresses processed for security and abuse prevention (for bookings we only keep an irreversible hash).
Why we use it
To respond to your enquiry and arrange a consultant; to deliver contracted services; to operate the client portal; to send sign-in codes, notifications and compliance reminders; to prevent spam and abuse; and to meet legal obligations.
Third-party processors
Amazon Web Services (Singapore region): servers, database, file storage and email delivery.
OpenAI: generates AI assistant replies. What you type in the AI assistant is sent to OpenAI and may be processed outside Singapore (e.g. the United States). Please do not share ID numbers, bank details or other sensitive information in the chat.
Licensed partners: when you engage regulated services such as corporate secretarial work, relevant information is shared with the licensed partner.
We do not sell personal data.
Transfers outside Singapore
Apart from the AI assistant above, personal data is stored in Singapore. Where a transfer is needed, we ensure the recipient provides protection comparable to the PDPA.
Retention
Enquiries and leads: kept for up to 24 months, or deleted on request.
Client data: kept for the duration of the services and as required by law.
Backups: daily backups are deleted automatically after 30 days.
Security
HTTPS everywhere; data and files encrypted at rest in Singapore; portal by invitation only; mandatory two-factor authentication for platform accounts; data separated by client company; time-limited download links; audit logs that never record ID numbers or file contents.
Access and correction
You can request access or correction from Account settings in the portal, or by contacting our Data Protection Officer. We respond within the statutory timeframe.
Data breaches
If a breach is likely to cause significant harm, we will notify the PDPC within 3 calendar days of assessing that it is notifiable, and notify affected individuals where appropriate.
Data Protection Officer
To be appointed. Until then, please use the booking form on this website.