Privacy policy
What we collect, why we collect it, how long we keep it, and how to ask us to change or delete it.
This policy explains how CtrlSpace handles personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). It covers this website and the enquiries that reach us through it.
CtrlSpace
UEN 202634304W
Singapore 149456
Email: enquiries@ctrlspace.sg
Phone and WhatsApp: +65 8886 3107
What we collect
We only collect what we need to answer an enquiry and to understand how this site is used.
- Enquiry details you give us. Your name, email address, phone number, property type and whatever you write in the message field, when you submit the contact form or the pricing enquiry form.
- WhatsApp messages. If you use a WhatsApp button, the conversation happens in WhatsApp and is governed by WhatsApp's own privacy policy. We see your WhatsApp display name, your number and what you send us.
- Usage data. Pages viewed, approximate location at city level, device and browser type, how you arrived, and which buttons you used. This is collected through cookies as described below.
- Pricing configurations. When you use the pricing page we record which property type, package and scope you selected, so we know which options people find useful. This is not linked to your name unless you then send us an enquiry.
We do not collect payment card details on this website, and we do not ask for NRIC numbers.
Why we use it
- To reply to your enquiry and arrange a design session.
- To prepare a quotation and, if you engage us, to deliver and support the system.
- To measure which pages and campaigns bring genuine enquiries, so we spend our advertising budget sensibly.
- To improve the site itself, including fixing things that people plainly struggle with.
We do not sell personal data. We do not send marketing emails unless you have asked us to.
Cookies and analytics
This site uses Google Analytics 4 and the Google Ads tag. These set cookies in your browser that help us count visits, see which pages are read, and tell whether an enquiry came from an advertisement. IP addresses are truncated by Google before they reach our reports.
If you arrive from a Google advertisement, the click identifier in the URL is held in your browser for the duration of your visit so that a resulting enquiry can be matched to the right campaign. It is cleared when you close the tab.
You can refuse or delete cookies in your browser settings, and you can install Google's opt-out browser add-on. The site works normally without them.
Who else sees it
Analytics and Ads receive the pseudonymous usage data described above, and the click identifier if you arrived from an advertisement. Where an enquiry is matched back to an advertisement, your email or phone number is sent only as a one-way hash. Google never receives them in readable form.
Hosts this website and processes enquiry emails. Everything you send us is stored and handled in the Asia Pacific (Singapore) region.
Receives your phone number and whatever you write, but only if you choose to contact us that way. Those messages are governed by Meta's privacy policy as well as this one.
Engaged only where a project needs site work, and given only what the work requires: typically your name, address and access arrangements.
We do not otherwise disclose your data, except where the law requires it.
How long we keep it
- Enquiries that do not become projects: up to 24 months, then deleted.
- Client project records: for as long as you own the system we built, since we provide free remote support for its lifetime, and thereafter as required for tax and accounting.
- Analytics data: retained by Google for 14 months.
How we protect it
The site is served over HTTPS only. Enquiry emails are transmitted over encrypted connections and stored in access-controlled mailboxes. Where we hold credentials for a client's own smart home system, those are handed over to the client at project completion and we retain no account that we control.
Your rights under the PDPA
You may ask us to:
- tell you what personal data we hold about you and how it has been used in the past year;
- correct anything that is wrong or out of date;
- delete data we no longer have a reason to keep;
- withdraw your consent to any use of your data, at any time.
Write to enquiries@ctrlspace.sg and we will respond within 30 days. If withdrawing consent means we can no longer provide something, we will tell you what the effect would be before acting on it. If you are not satisfied with our response you may refer the matter to the Personal Data Protection Commission of Singapore.
Children
This site is aimed at homeowners and is not directed at children. We do not knowingly collect data from anyone under 13.
Changes to this policy
If we change how we handle personal data we will update this page and the date at the top. Material changes affecting existing clients will also be sent by email.