Section 01Introduction
TYAI Pte. Ltd. ("TYAI," "we," "us," or "our") is committed to protecting the personal data of individuals who interact with our website at tianyuxu.com and our related services. This Privacy Policy sets out how we collect, use, disclose, and protect personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA").
By accessing our website, submitting our contact form, subscribing to our newsletter, or otherwise providing personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.
Section 02Data Protection Officer
In accordance with Section 11(3) of the PDPA, we have appointed a Data Protection Officer ("DPO") to oversee our compliance with the PDPA. The DPO may be contacted at:
- Email · hello@tianyuxu.com
- Address · TYAI Pte. Ltd., Attn: Data Protection Officer, Singapore
All queries, requests, complaints, and notifications relating to personal data and this Privacy Policy should be directed to the DPO.
Section 03Personal data we collect
We collect personal data that you voluntarily provide and certain technical data collected automatically when you use our website.
3.1 Information you provide. When you submit our contact form, we collect your name, email address, company or brand name, and the content of your message. When you subscribe to our newsletter, we collect your email address.
3.2 Information collected automatically. Our website does not run analytics and does not set cookies. The only technical data collected automatically is the standard server logs kept by our hosting provider, Netlify, which include your IP address and browser user agent. These logs are used for security and operations, such as detecting abuse and keeping the site running, and not to profile or track you.
Section 04Purposes of collection, use, and disclosure
We collect, use, and disclose personal data for the following purposes:
- to respond to your inquiries and communications;
- to provide the services you have requested, including training, speaking engagements, advisory services, brand collaborations, masterclasses, and related professional services;
- to deliver the newsletter to subscribers who have opted in;
- to operate, maintain, secure, and improve our website and services;
- to comply with applicable laws, regulations, and lawful requests from public authorities; and
- to protect our legitimate business interests and legal rights.
We will not use your personal data for purposes materially different from those notified to you without first obtaining your fresh consent, unless permitted or required by law.
Section 05Disclosure to third parties
We do not sell, rent, or trade personal data. We may disclose personal data to the following categories of recipients:
- Service providers that perform functions on our behalf or that you interact with through our website: Netlify (website hosting and form submissions), Beehiiv (newsletter delivery, only when you subscribe), Cloudflare (a Turnstile security check that stops automated signups, only when you use the newsletter form), Vimeo (embedded videos, loaded with Do Not Track enabled), Luma (event registration, only when you register there), and YouTube (masterclass recordings open on youtube.com when you click them). We share only the personal data needed for each service, and each provider processes it in accordance with applicable data protection laws;
- Professional advisors, including legal, accounting, and other advisors, where reasonably required;
- Public authorities and regulators, where required by law, court order, or lawful request; and
- Successors in interest in the event of a merger, acquisition, restructuring, or sale of business assets.
Section 06International data transfers
Some of our service providers are located outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure that the recipient is bound by legally enforceable obligations to provide a standard of protection comparable to that under the PDPA, in accordance with Section 26 of the PDPA and the Personal Data Protection Regulations 2021.
Section 07Retention of personal data
We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required to satisfy legal, regulatory, accounting, or reporting obligations. Specifically:
- contact form submissions are retained for up to twenty-four (24) months from the date of receipt;
- newsletter subscriber data is retained until the subscriber unsubscribes or requests deletion; and
- server log data is retained by our hosting provider (Netlify) in accordance with its standard retention periods.
Where deletion is requested but we are required to retain certain data for legal, tax, or accounting purposes, we will inform you of this and retain only the minimum data necessary. When personal data is no longer required, it is securely deleted or anonymized.
Section 08Your rights under the PDPA
Subject to the provisions of the PDPA, you have the right to:
- Access the personal data we hold about you and request information about how it has been used or disclosed within the past 12 months;
- Correct any personal data that is inaccurate, incomplete, or misleading;
- Withdraw consent to the collection, use, or disclosure of your personal data at any time, by giving reasonable notice to the DPO. We will inform you of the likely consequences of withdrawal, which may include our inability to continue providing services to you; and
- Lodge a complaint with the Personal Data Protection Commission of Singapore ("PDPC") if you believe your rights under the PDPA have been infringed.
Requests should be submitted in writing to the DPO at the contact details in Section 2. We will respond to verified requests within thirty (30) days. A reasonable fee may be charged for access requests, in accordance with the PDPA.
Section 09Security
We have implemented reasonable administrative, technical, and physical security measures to protect personal data from unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks. While we strive to protect personal data, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Section 10Data breach notification
In the event of a data breach that is likely to result in significant harm to affected individuals, or that is of a significant scale, we will notify the PDPC and affected individuals in accordance with Part VIA of the PDPA and the prescribed timelines.
Section 11Cookies and tracking technologies
Our website does not set cookies and does not use tracking technologies. There are no analytics scripts, advertising pixels, or similar tools on this site.
Embedded third-party players may set their own cookies if you interact with them. Videos on this site are hosted on Vimeo and embedded in do-not-track mode, which instructs Vimeo not to track your viewing activity. If you follow a link to an external platform such as YouTube or Luma, that platform's own cookie and privacy practices apply.
When you use the newsletter form, Cloudflare Turnstile runs a short security check in your browser to tell people from bots. It is used only to prevent abuse of the form, not for advertising or analytics, and Cloudflare's own privacy practices apply to it.
Section 12Third-party links
Our website may contain links to third-party websites, platforms, or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
Section 13Children's privacy
Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe that a child has provided personal data to us, please contact the DPO and we will take appropriate steps to delete it.
Section 14Amendments to this Privacy Policy
We reserve the right to amend this Privacy Policy from time to time. Any amendments will be posted on this page with an updated "Last Updated" date. Material changes will be communicated through prominent notice on our website. Your continued use of our services after such amendments constitutes acceptance of the revised Privacy Policy.
Section 15Governing law
This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Singapore.
Section 16Contact
For any questions, concerns, requests, or complaints regarding this Privacy Policy or our handling of personal data, please contact:
Singapore