Privacy Policy

Nali Consultants LLP, a limited liability partnership registered in Singapore, operates the Samipe website and is the data controller for the personal data described in this policy. Contact us about anything in it at privacy@samipe.com.

We are based in Singapore and comply with the Singapore Personal Data Protection Act 2012 (the "PDPA"). Because Samipe is offered to people in the EU and EEA, we have also built this policy around the General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") and we apply it as a single global standard: the same legal bases, the same retention limits, the same rights, for every visitor wherever they are. People in the EU and EEA hold these as legal rights under the GDPR, and people in Singapore under the PDPA. Everyone else has them because this is our policy, and we would rather run one high standard than sort people by passport.

Storing or reading anything on your device follows the same rule. This site uses only storage that is strictly necessary to run it and its waitlist form — there are no analytics, advertising or tracking cookies. Our Cookie Policy covers that in detail.

This policy covers this website only: the public marketing pages, the waitlist form, and the cookies and similar technologies used here.

It does not cover the Samipe product. Personal data processed inside the product is dealt with in the separate agreement, and the data processing agreement, with the customer concerned.

This website has no user accounts and no database of leads. It does not build profiles, and it does not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR. We do not sell personal data, and we do not use it for advertising or ad targeting.

There is one place on this site where you give us personal data: the waitlist form. It has two fields, and that is all we ask for.

• Work email — required, up to 320 characters, and validated as an email address. We use it to reply to you about early access, and it is set as the reply-to address on the notification we receive.
• Live staging URL — required. The web address of the site you'd like us to help you fix. Please submit only a URL you own or are authorised to submit.

We do not ask for special-category data (Art. 9 GDPR), and you should not send us any.

When reCAPTCHA is enabled, Google reCAPTCHA v3 collects device and usage signals — including your IP address — directly in your browser, in order to tell human visitors from bots. We do not receive that data; we receive only a pass/fail assessment from Google. See Google's Privacy Policy and Terms of Service for what Google does with it.

This site does not use Google Analytics or any other analytics service, and it sets no analytics cookies. See our Cookie Policy.

Like any website, this one is delivered to your browser by hosting and infrastructure providers, which may keep standard technical logs of requests — typically things like IP address, browser type and the time of the request. We don't use those logs to identify you or to build any picture of you.

If you email us at privacy@samipe.com or legal@samipe.com, we hold your email address and whatever you put in the message, so we can answer you.

Each purpose has one specific legal basis under Art. 6(1) GDPR. Nothing is done on a basis other than the one stated.

Where we rely on legitimate interests, we have weighed our interest against your rights and freedoms. You can object at any time — see your rights.

We do not sell personal data and we do not share it for anyone else's marketing. These are the recipients:

• Mailgun — email delivery. When you submit the waitlist form, your work email and staging URL are formatted into a notification email and delivered to our internal inbox through Mailgun, with your work email set as the reply-to address. Mailgun handles that delivery on our behalf.
• Google — provides reCAPTCHA v3 on the waitlist form when it is enabled. See Google's Privacy Policy.
• Hosting and infrastructure providers — the services that store the site's files and serve its pages to your browser.

Internally, your enquiry is read by the people at Nali Consultants LLP who handle waitlist requests, in Singapore.

We may also disclose personal data where we are legally required to — for example to a court, a regulator or a public authority acting within its powers.

Nali Consultants LLP is in Singapore. When you submit the waitlist form, your details go to us there, and the people who read your enquiry and reply to it are there too. If you are outside Singapore, that means your data is handled in a country other than your own. You should know that before you use the form.

The standard doesn't change with the location. The legal bases, the retention limit, the rights below and our security duty apply to your data wherever it is handled and whoever you are.

The providers listed above may also handle your data outside your country:

• Mailgun — your waitlist enquiry is sent through Mailgun's EU infrastructure (api.eu.mailgun.net). It is delivered to our inbox and read in Singapore.
• Google — for reCAPTCHA on the waitlist form when it is enabled, data may be processed in the United States and other countries where Google operates.
• Hosting and infrastructure providers — may serve and log requests from more than one country.

If you want to know what protections are in place for a particular provider, email privacy@samipe.com and we will tell you what applies.

We keep the personal data in your waitlist enquiry for the duration of the pre-launch programme — until we have offered you access, or until you ask us to remove you, whichever comes first — and then we delete it. We do not keep it indefinitely.

You can ask us to delete your details at any time by emailing privacy@samipe.com, and we will remove you from the waitlist. Doing so does not affect the lawfulness of anything we did before you asked.

Other data: emails you send to us are kept for as long as needed to deal with the matter and then deleted. Cookies and similar storage last for the periods set out in our Cookie Policy.

You have the following rights over your personal data. To use any of them, email privacy@samipe.com.

• Access (Art. 15 GDPR / PDPA access) — ask whether we hold data about you, and get a copy of it.
• Rectification / correction (Art. 16 GDPR / PDPA correction) — have inaccurate data corrected, or incomplete data completed.
• Erasure (Art. 17 GDPR) — have your data deleted where the grounds in Art. 17 apply. You can ask us to remove you from the waitlist at any time regardless.
• Restriction (Art. 18 GDPR) — have us limit what we do with your data while something is being resolved.
• Portability (Art. 20 GDPR) — receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another controller, where the processing is based on consent or contract and is carried out by automated means.
• Object (Art. 21 GDPR) — object to processing based on our legitimate interests, on grounds relating to your particular situation.
• Withdraw consent (Art. 7(3) GDPR) — where we rely on your consent, withdraw it at any time. It is as easy to withdraw as it was to give. Withdrawal doesn't affect the lawfulness of processing before it.

People in the EU and EEA hold these as legal rights under the GDPR, and people in Singapore under the PDPA. We extend the same rights to everyone else as a matter of policy — same process, same timescales, no difference in how we handle the request.

We answer without undue delay and within one month of receiving your request, as Art. 12(3) GDPR requires. That can be extended by up to two further months where a request is complex — if it is, we'll tell you within the first month and explain why. There is no charge, unless a request is manifestly unfounded or excessive.

We may need to ask you for information to confirm who you are before we act, so we don't disclose your data to someone else.

You also have the right to complain to a data protection authority. In Singapore, that is the Personal Data Protection Commission (PDPC). If you are in the EU or EEA, you have a legal right under Art. 77 GDPR to complain to the supervisory authority in the country where you live, where you work, or where you think the problem happened. You do not have to come to us first, though we'd rather you did, so we can try to put it right.

This site uses a small number of strictly necessary cookies, plus one sessionStorage marker — the things that make the site and its waitlist form work. It sets no analytics, advertising or tracking cookies, and there is no consent banner because there is nothing optional to opt into.

Our Cookie Policy lists every one of them by name, purpose and duration.

We take appropriate technical and organisational measures to protect personal data, as Art. 32 GDPR requires. The site is served over HTTPS, the waitlist form is protected against automated abuse by reCAPTCHA v3 when enabled, and — because the site has no database and no accounts — there is no stored pool of enquiry data on it to breach.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs and it is likely to result in a risk to your rights and freedoms, we will notify the competent authority — the PDPC in Singapore and, where the GDPR applies, the competent supervisory authority under Art. 33 GDPR — and, where the law requires it, you.

This site links to sites we do not run, such as Google's policy pages. We are not responsible for how those sites handle your data. When you follow a link away from here, read that site's own privacy policy.

This site is for professionals and is not directed at children. We do not knowingly collect personal data from anyone under 18 through it.

If you believe a child has given us personal data through the waitlist form, email privacy@samipe.com and we will delete it.

We may update this policy — for example if the site changes, if we change provider, or if the law changes. The version published here is the current one, and the date at the top tells you when it last changed.

If a change is significant, we will take reasonable steps to bring it to your attention.

For anything to do with your personal data — a question, a request, or a complaint — email privacy@samipe.com. It reaches the people who can act on it.

See also our Terms of Service and our Cookie Policy.