Privacy Policy

Last Updated: 12 February 2026  ·  Novarc Labs Pte. Ltd.

1. Introduction

Novarc Labs Pte. Ltd. ("Novarc Labs", "we", "us", or "our") is committed to protecting the personal data of individuals who engage with our services and website. This Privacy Policy explains how we collect, use, disclose, and protect personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

This policy applies to all personal data we process in connection with our AI research and development support services and our website at novarcaness.live. For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data that you provide directly to us or that arises in the course of an engagement:

• Contact information: name, email address, telephone number
• Organisation details: employer, role, department
• Enquiry and correspondence content submitted via our contact form or email
• Research context information shared during scoping discussions
• Technical data collected automatically: IP address, browser type, pages visited, visit duration (via analytics cookies where consented)

We do not knowingly collect sensitive personal data (as defined under the PDPA) unless you specifically provide it in the course of a research engagement, in which case it is handled under additional protections agreed in the engagement agreement.

3. How We Use Your Data

We use personal data for the following purposes, each with a corresponding legal basis under the PDPA:

• Responding to enquiries and managing service engagements — based on your consent or the performance of a contract
• Delivering research services and communicating progress — necessary for contract performance
• Sending service-related updates and information — based on legitimate interests or consent
• Improving our website through aggregate analytics — based on your cookie consent
• Complying with legal obligations under Singapore law — required by law

We do not use your personal data for automated decision-making or profiling, and we do not sell personal data to third parties.

4. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Enquiry data from non-clients: up to 12 months from last contact
• Client engagement records: up to 7 years from engagement completion, to satisfy statutory record-keeping obligations
• Analytics data: aggregated and anonymised after 26 months

5. Data Sharing and Disclosure

We do not share personal data with third parties except in the following circumstances:

• Service providers who assist in website hosting, analytics, or email communication — these parties are bound by data processing agreements and may not use your data for their own purposes
• Where disclosure is required by law, regulation, or court order under Singapore jurisdiction
• With your explicit written consent

We do not transfer personal data outside Singapore without ensuring that the receiving jurisdiction provides a standard of protection comparable to the PDPA, or without obtaining appropriate consent.

6. Data Protection Measures

We take the security of personal data seriously and apply the following measures:

• HTTPS encryption for all web-based data transmission
• Access controls limiting data access to staff with a legitimate need
• Regular review of data handling practices against the PDPA Advisory Guidelines
• Confidentiality obligations for all staff and engaged contractors

In the event of a data breach that is likely to result in significant harm, we will notify the Personal Data Protection Commission (PDPC) and affected individuals as required under the PDPA Mandatory Data Breach Notification requirements.

7. Cookies

Our website uses cookies to support basic functionality and, with your consent, to collect analytics data. Essential cookies cannot be disabled as they are required for the site to function. Optional analytics and preference cookies are only placed with your consent. For full details, see our Cookie Policy.

8. Your Rights Under the PDPA

Under Singapore's PDPA, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent to the collection, use, or disclosure of your personal data (subject to legal and contractual restrictions)
• Lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing personal data.

10. Children's Privacy

Our services are directed at organisations and professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will take prompt steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when the policy was last revised. Continued use of our website or services after an update constitutes acceptance of the revised policy. For significant changes, we will notify active clients directly by email.

12. Contact

For all data protection enquiries, contact our data protection officer at: