Privacy Policy

1) Data We Collect

a) You provide: name and email, and the content of your messages when you join a waitlist, download materials, or contact us. Optional form fields may include interests or preferences.

b) Automatic: IP address, device/browser type, OS, pages viewed, timestamps, approximate location, referrers, UTM parameters; cookies, pixels, SDKs.

c) Sensitive data: We do not seek health or other sensitive data on the landing page. If you voluntarily submit sensitive information (e.g., health details in free-text), you consent to our processing for the purposes below.

2) Purposes of Processing

• Operate & secure the Site: hosting, load balancing, security logs.
• Respond to enquiries: handle your requests, send requested materials.
• Waitlist & newsletters: capture email, send updates (you may unsubscribe anytime).
• Analytics & performance: measure usage to improve experience.
• Marketing/attribution (if implemented): UTM and pixel measurement for campaigns.
• Legal & compliance: record-keeping and responses to lawful requests.

3) Consent and Other Bases

We rely on your consent for newsletters/marketing and on legitimate interests to operate a functional and secure Site, respond to enquiries, and improve the Site in a manner balanced against your privacy rights. Where applicable, we may rely on legal obligation for compliance purposes. You may withdraw consent at any time; this will not affect processing already carried out.

4) Cookies & Similar Technologies

We use essential cookies to run the Site and, if enabled, analytics/marketing cookies to understand usage and measure campaigns. You can manage cookies via your browser settings and our on-site controls (where provided).

5) Sharing Your Data

We share limited personal data with service providers (e.g., hosting/CDN, email, CRM, analytics, form processors) acting on our behalf under contracts and confidentiality obligations. We may disclose data to authorities where required by law. We do not sell personal data.

Typical vendors:

• Hosting/CDN: Vercel (global infrastructure) & GoDaddy
• Analytics: Google Analytics
• Forms: Tally

6) Cross-border Transfers

Your data may be transferred to and processed in countries outside Singapore or Malaysia where our vendors are located. We take reasonable steps to ensure comparable protection (e.g., contractual safeguards) consistent with PDPA requirements.

7) Retention

We keep personal data only as long as necessary for the purposes above, then delete or anonymise it.

• Waitlist & newsletter subscribers: 24 months from last interaction or until unsubscribe.
• Support enquiries: 24 months.
• Web analytics (pseudonymised): 14–26 months (per tool setting).
• Server/security logs: 12 months, unless required for investigations.

8) Your Rights

Singapore (PDPA): access and correct your personal data; withdraw consent.

Malaysia (MY PDPA): access and correct your personal data; withdraw consent; prevent processing for direct marketing.

To exercise rights, contact hello@fuelmind.life. We may verify identity before acting on requests.

9) Security

We implement reasonable technical and organisational measures, including TLS encryption in transit, encryption at rest (vendor-provided), role-based access, logging/audit, least-privilege access, vendor DPAs, and periodic reviews. No method of transmission or storage is 100% secure.

10) Children

The Site is not directed to children under 16. We do not knowingly collect data from children. If you believe a child provided data, contact us and we will delete it.

11) Breach Response

If we become aware of a data incident, we investigate promptly and notify authorities and affected individuals in accordance with Singapore PDPA and Malaysia PDPA requirements where applicable.

12) Changes

We may update this Policy from time to time. We will update the Effective date and, where material, provide notice via the Site or email to subscribers.

13) Contacts

Privacy/DPO: hello@fuelmind.life