1. Introduction
Anuthand Pte. Ltd. ("Anuthand", "we", "us") is a cybersecurity and data compliance company based in Singapore. We are committed to protecting personal data in line with Singapore's Personal Data Protection Act 2012 ("PDPA") and, where applicable, other data protection laws such as the EU GDPR.
This policy explains how we collect, use, disclose and protect personal data when you visit our website, contact us, or use our services, including AI Auto Pentest, our compliance platform, managed security and AI SOC, vCISO, vDPO and advisory services.
Where we process personal data on behalf of our clients while delivering services (for example, data contained in systems we test or monitor), we act as a data intermediary or processor under our agreement with that client, and the client's own privacy notice applies.
2. Personal data we collect
- Contact and enquiry details: name, work email, phone number, company, job title, and the content of your messages.
- Account and platform data: login details, user profile, role, and activity logs when you use our compliance platform or client portals.
- Engagement data: information you share during scoping, contracting and delivery of our services.
- Technical data: IP address, browser type, device information, pages visited and referral source, collected through strictly necessary cookies and, with your consent, analytics cookies.
- Marketing preferences: your choices about receiving updates from us.
We do not intentionally collect sensitive personal data such as NRIC numbers through this website. Please do not send us such data unless we ask for it for a specific, lawful purpose.
3. How we use personal data
- To respond to your enquiries and provide quotes, demos and proposals.
- To deliver, manage and improve our services and platform.
- To verify identity, authorise testing scope and manage access to our systems.
- To send service notices, security advisories and, with your consent, marketing communications.
- To analyse website usage and improve our content, with your consent.
- To meet legal, regulatory and audit obligations, and to protect our rights and the security of our systems.
4. Consent and withdrawal
We collect, use and disclose personal data with your consent, or where otherwise permitted or required by law (for example, under the legitimate interests or business improvement exceptions in the PDPA).
You may withdraw your consent at any time by contacting our Data Protection Officer (see section 13). We will process your request within a reasonable time and tell you about any likely consequences, for example that we may no longer be able to provide certain services. You can unsubscribe from marketing emails using the link in each email.
We respect Singapore's Do Not Call (DNC) Registry and will not send marketing messages to Singapore telephone numbers registered with the DNC Registry without your clear and unambiguous consent.
5. Disclosure to third parties
We do not sell personal data. We may disclose personal data to:
- Service providers who support our business, such as cloud hosting, email, CRM, website hosting and form handling, under contracts that require them to protect the data.
- Technology partners such as Wiz, where needed to deliver managed security services you have engaged us for.
- Professional advisers, auditors and insurers.
- Regulators, law enforcement or courts, where required by law.
- A successor entity in the event of a merger, acquisition or restructuring, subject to confidentiality obligations.
6. Overseas transfers
Some of our service providers store or process data outside Singapore. When we transfer personal data overseas, we take steps to ensure the recipient provides a standard of protection comparable to the PDPA, for example through contractual clauses or by confirming the recipient is bound by comparable legal obligations.
7. Protection
As a security company, we apply the controls we recommend to our clients. These include encryption in transit and at rest, role-based access control, multi-factor authentication, logging and monitoring, regular security testing, and staff training. No method of transmission or storage is completely secure, but we work to protect personal data against unauthorised access, collection, use, disclosure, copying, modification and disposal.
8. Retention
We keep personal data only as long as it is needed for the purposes it was collected for, or as required for legal, regulatory, contractual or audit reasons. When it is no longer needed, we securely delete or anonymise it.
9. Access and correction
You may ask to access the personal data we hold about you, find out how it has been used or disclosed in the past year, or correct any errors. Send your request to our Data Protection Officer. We may need to verify your identity and may charge a reasonable fee for access requests, which we will tell you about in advance. We aim to respond within 30 days.
If you are in the European Economic Area or the UK, you may also have rights to erasure, restriction, objection and data portability, and the right to complain to your local supervisory authority.
10. Cookies
Cookies are small files stored on your device. We use the following categories:
| Category | Purpose | Consent |
|---|---|---|
| Strictly necessary | Keep the site secure and working, and remember your cookie choice. | Always on |
| Analytics | Measure visits and understand how pages are used, so we can improve the site. | Only with your consent |
| Marketing | Measure campaign performance and show relevant content. | Only with your consent |
We remember your choice for 12 months. You can change it at any time: . You can also block or delete cookies in your browser settings, although some parts of the site may not work properly.
11. Data breaches
If a data breach occurs, we will assess it promptly. Where a breach is notifiable under the PDPA, we will notify the Personal Data Protection Commission within 3 calendar days of assessing that it is notifiable, and notify affected individuals where required.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.
13. Contact our Data Protection Officer
For questions, requests or complaints about this policy or our handling of personal data, please contact:
If you are not satisfied with our response, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.