Privacy Policy

Last updated: 10 October 2026

1. About this policy

Obizmax LLP (“Obizmax”, “we”, “us” or “our”) respects your privacy. This policy explains how we collect, use, disclose and protect personal data when you visit obizmax.com, contact us, register for activities, purchase services or engage with our consulting, training, digital marketing and AI-related services.

We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA) and other applicable requirements. Additional notices or project agreements may explain processing specific to a service. Visiting our website does not, by itself, constitute consent to every use described in this policy.

2. Personal data we may collect

Depending on your interaction with us, relevant data may include:

  • Your name, contact details, organisation, job title and correspondence.
  • Registration, booking, attendance, feedback and learning or assessment information relevant to training services.
  • Account details, order and invoice information, billing details and payment transaction references where applicable.
  • Information you provide for consulting projects, support requests or AI-enabled services, including documents and messages that contain personal data.
  • Technical information such as IP address, browser and device information, website activity, cookies and security logs.

We may receive data directly from you, from your employer or another authorised representative, and from service providers involved in the relevant transaction. If you provide another person’s data, ensure you have authority to do so and make the relevant privacy information available to them. Please do not submit unnecessary sensitive information.

3. Purposes and consent

We may process relevant personal data to respond to enquiries; provide and administer agreed services; manage registrations, bookings and customer accounts; deliver training and consulting work; process transactions and maintain records; provide support; secure our systems; investigate issues; and meet legal or contractual obligations.

We may also use appropriate website usage information to understand performance and improve our services. Marketing communications will be subject to applicable consent and other legal requirements. We will not require consent to unrelated uses as a condition of providing a service.

We will notify you of relevant purposes before collecting, using or disclosing personal data and obtain consent where required. Where the PDPA permits processing through deemed consent or an applicable exception, we will comply with the relevant conditions. New purposes will be separately notified and consent obtained where necessary.

4. Cookies, analytics and external features

Our website may use cookies and similar technologies for essential functions, preferences, security, analytics and, where enabled, marketing measurement. These may involve website service providers. We will provide additional notices or consent controls where required for the particular processing.

You can manage cookies through your browser and any controls provided with the relevant feature. Blocking cookies may affect website functions and does not necessarily stop all technical logging. External links and embedded services may collect data under their own privacy notices. This policy does not govern independent third-party websites.

5. AI-assisted services and personal data

Where AI is used to process personal data for an agreed service, we will explain the relevant purpose and apply an appropriate legal basis and safeguards. Depending on that service, processing may include analysing supplied documents, assisting with responses or preparing project outputs using third-party AI providers.

This policy is not blanket permission to train or fine-tune AI models using your personal data. Before using personal data for AI model development, we will provide a specific notice explaining the intended model functions, relevant data, proposed training or fine-tuning use and available choices, and obtain consent unless an applicable legal exception permits the processing.

We will assess relevant provider terms, data handling, retention and overseas processing before sending personal data to an AI service. Do not enter confidential or sensitive information into an AI feature unless it is authorised for that purpose. AI-related access, correction and consent withdrawal requests can be submitted through the contact details below. See also our AI Policy.

6. Disclosure and service providers

We do not sell, trade or rent your personal data. Where necessary for the notified purpose, we may disclose relevant data to personnel, trainers, professional advisers and service providers supporting hosting, communication, customer management, bookings, payments, analytics, security or AI-assisted delivery.

We will apply appropriate contractual or other safeguards to providers processing data on our behalf. Independent providers, such as payment services, may also process information under their own legal obligations and privacy terms. We may disclose data where required or authorised by law. Where training is arranged by an employer or sponsor, any relevant reporting of attendance, progress or results will be covered by the applicable service arrangements and notices.

7. Overseas transfers

Some service providers may process or store personal data outside Singapore. Before transferring data overseas, we will take appropriate steps to ensure protection comparable to that required under the PDPA, unless a permitted exception applies. Safeguards may include enforceable contractual commitments and assessment of the receiving provider’s practices.

8. Protection and retention

We will make reasonable security arrangements appropriate to the nature of the data and processing, including appropriate access controls and safeguards against unauthorised access, use, disclosure, alteration, loss or disposal. No internet transmission or system can be guaranteed completely secure.

We retain personal data only while it serves the collection purpose or remains necessary for a legal or business purpose, such as transaction records, service administration or resolving disputes. When these needs end, we will securely dispose of the data or remove the means of identifying individuals. Relevant backup and provider retention arrangements will be considered in this process.

9. Your requests and marketing choices

You may request access to personal data we hold about you and information about its use or disclosure during the preceding year, and request correction of errors or omissions, subject to applicable exceptions. We may verify your identity and authority before acting. Any permitted access fee will be explained in advance. We will respond within applicable timeframes and explain if additional time is needed.

You may withdraw consent for a particular collection, use or disclosure by giving reasonable notice through the contact details below. We will explain likely consequences, such as being unable to continue a service that requires the data, and cease the consent-based processing unless continued processing is required or authorised by law.

You may request deletion of information. We will assess the request against our retention obligations; deletion is not an unconditional right under the PDPA. You can unsubscribe from promotional emails using the unsubscribe instructions or contact us. Necessary service messages may continue. Telephone and messaging marketing will be subject to applicable Do Not Call requirements and relevant exceptions.

10. Incidents and complaints

We will assess suspected personal data breaches and notify the PDPC and affected individuals where the applicable notification criteria are met, within the required timeframes. Please report suspected misuse or a privacy concern using the contact details below. We will investigate and respond, and take corrective action where appropriate.

11. Young persons

Our general website and business services are intended for adults. If a programme involves children or young persons, we will provide appropriate notices and apply age-appropriate safeguards, including parent or guardian involvement where required. Please contact us if you believe personal data has been collected inappropriately.

12. Contact and policy changes

For privacy enquiries, complaints, access or correction requests, or withdrawal of consent, contact Obizmax LLP and mark your message “For the attention of the Data Protection Officer”:

We may update this policy to reflect changes in our practices or applicable requirements. The current version and update date will appear on this page. Where a change requires further notification or consent, we will take those steps before the relevant processing.