Privacy notice
Who we are
Zerolift Studio is the organisation responsible for your personal data under Singapore's Personal Data Protection Act 2012 (PDPA). Questions about this notice go to our Data Protection Officer at dpo@zeroliftstudio.com.
What we collect and why
- Cost calculator: if you ask for a breakdown, we collect your work email and the three numbers you entered, to send you the breakdown and follow up about it. We record when you gave consent.
- Emails you send us: what you choose to include, to reply to you.
- Booking a call: if you book through our booking page (run by Cal.com), we receive the name, email and any notes you enter, to hold the call.
- Site analytics: anonymous usage events (pages viewed, buttons clicked, how far you scroll) tied to a random ID that lasts only for your browser tab. No cookies, no advertising trackers, and our analytics provider (PostHog, EU region) never receives your IP address. If your browser sends Do Not Track or Global Privacy Control, we send nothing.
- Security checks: when you send the calculator form, a bot check (Cloudflare Turnstile) looks at your browser and IP address, and we use your IP address for a few seconds to stop too many requests in a row. We don't store your IP address.
Numbers you type into the calculator stay in your browser unless you ask us to email the breakdown. We don't sell personal data, use it for advertising, or make automated decisions about you.
How long we keep it
Calculator requests, and our copies of the breakdown emails, are deleted 12 months after you send them. Other emails are kept only as long as we need them to deal with what you asked. You can ask us to delete your data sooner at any time.
Who we share it with
Only service providers that help us run this site, each bound by contract to protect your data and use it only for us:
- Cloudflare: hosting, our database, the bot check and email forwarding.
- Resend: sending the breakdown email.
- PostHog (EU): anonymous analytics.
- Cal.com: booking calls.
- Our email provider: where emails to us, and copies of breakdowns, are kept.
We may also disclose data where the law requires it.
Data stored outside Singapore
Some of these providers store or process data outside Singapore, including in the European Union and the United States. When that happens we make sure the data gets protection comparable to the PDPA, through the providers' contracts and data protection terms.
How we protect it
Data is encrypted in transit, the database can only be reached by our own website code, access is limited to the people who need it, and requests are checked and rate limited to keep out abuse.
Your rights
You can ask to see the personal data we hold about you and how we've used it, to correct it, to delete it, or to withdraw your consent. Email dpo@zeroliftstudio.com. We reply within 30 days, and tell you if we need longer. If you withdraw consent, we stop using your data and delete it, which means we can't follow up about your breakdown.
If something goes wrong
If a data breach is likely to cause significant harm, or affects 500 or more people, we notify the Personal Data Protection Commission (PDPC) within 3 days of confirming it, and tell the people affected as soon as we can.
Complaints
Please contact us first and we'll try to put it right. You can also complain to the PDPC at pdpc.gov.sg.
Changes to this notice
If we change how we handle personal data, we update this page and the date at the top. If a change affects data you've already given us, we tell you by email first.