Privacy Policy

Last updated: 28 January 2026

At Kroma, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website or engage our services, in accordance with the Personal Data Protection Act 2012 of Singapore (PDPA) and, where applicable, the General Data Protection Regulation (GDPR).

By using our website or services, you agree to the collection and use of information in accordance with this Policy.

1. What Is Personal Data

“Personal Data” means data, whether true or not, about an individual who can be identified:

  • from that data alone, or

  • from that data and other information to which we have access.

2. Personal Data We Collect

We may collect the following types of personal data, depending on how you interact with us:

  • Name

  • Email address

  • Contact number

  • Company name and role (if applicable)

  • Billing or payment details (where relevant)

  • Website usage data (e.g. IP address, browser type, cookies)

  • Any other information you voluntarily provide to us

3. How We Collect Personal Data

We collect personal data when you:

  • Submit forms on our website

  • Contact us via email, messaging platforms, or enquiry forms

  • Subscribe to updates or communications

  • Engage our services

  • Interact with our website through cookies or similar technologies

4. Purpose of Collection, Use, and Disclosure

We collect, use, and disclose personal data for purposes including but not limited to:

  • Providing and managing our services

  • Communicating with you regarding enquiries, projects, or updates

  • Preparing proposals, invoices, and agreements

  • Improving our website, services, and user experience

  • Marketing and promotional communications (where consent has been given)

  • Legal, regulatory, and compliance purposes

We will notify you of the purposes for which your personal data is collected at or before the time of collection, as required under the PDPA.

5. Consent

By providing your personal data to us, you consent to the collection, use, and disclosure of your personal data for the purposes stated above.

You may withdraw your consent at any time by contacting us. Please note that withdrawing consent may affect our ability to provide certain services.

6. Accuracy of Personal Data

We take reasonable steps to ensure that the personal data we collect is accurate and complete. Please notify us if there are any changes to your personal data.

7. Protection and Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal data against unauthorised access, disclosure, alteration, or loss.

8. Retention of Personal Data

We retain personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable laws. When no longer required, personal data will be securely deleted or anonymised.

9. Access and Correction

You may request:

  • access to your personal data held by us, or

  • correction of any inaccurate or incomplete personal data

Requests can be made by contacting our Data Protection Officer. We will respond in accordance with PDPA requirements.

10. Transfer of Personal Data Outside Singapore

Where personal data is transferred outside Singapore (e.g. cloud hosting, third-party tools), we ensure that the recipient provides a standard of protection comparable to that under the PDPA.

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

  • improve website functionality

  • analyse site usage

  • enhance user experience

You may adjust your browser settings to disable cookies. Please note that some features of the website may not function properly if cookies are disabled.

Where required, we will seek your consent before placing non-essential cookies on your device.

12. GDPR (If Applicable)

If you are located in the European Economic Area (EEA), you may have additional rights under the GDPR, including the right to:

  • access your data

  • request correction or deletion

  • restrict or object to processing

  • data portability

We will respect these rights in accordance with applicable laws.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites. Please review their privacy policies separately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

15. Contact Us / Data Protection Officer

If you have any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:

Data Protection Officer (DPO)
Email: hello@kroma.sg
Company: Kroma