Privacy policy

This policy covers personal data that SHARKBYTE (UEN 53527323A) and SHARK BYTE TECHNOLOGY (SSM 202603170433 / IP0628140-T) collect through this website and in the course of providing managed digital services.

Where we process data belonging to your customers on your behalf — for example messages handled by Orbis — you remain the controller of that data and we act on your instructions under your service agreement.

Through this website and our enquiry forms we collect:

We use enquiry data for a single purpose: to respond to you and to prepare a quote.

We collect, use, and disclose personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA) and, where relevant to our Malaysian entity, the Personal Data Protection Act 2010 (PDPA Malaysia).

Our enquiry form asks for two separate, unticked consents: one to let us contact you about your enquiry, and an optional one to receive marketing updates. Submitting an enquiry never enrols you in marketing.

You may withdraw either consent at any time by emailing our Data Protection Officer. We will action the withdrawal within a reasonable period, and will tell you if it affects services we can provide. Marketing messages also carry an opt-out.

We do not sell, rent, or trade your data. We do not add enquiry contacts to a marketing list without asking. We do not run automated drip campaigns off the back of a pricing request.

Enquiry submissions are stored in a private, access-controlled database. Only SHARKBYTE staff who need the record in order to respond to you can read it; the website itself can write new enquiries but cannot read existing ones back.

Some infrastructure and communication providers we rely on may process data outside your country. We use providers that apply recognised security and data-protection standards.

Enquiries that do not lead to an engagement are kept for up to 24 months so that we have context if you come back to us, then deleted.

Records relating to a signed engagement are kept for as long as the agreement runs, plus the period required by applicable accounting and tax law.

Orbis uses AI to draft and route customer messages on behalf of our clients. Conversation content is processed to generate replies and is handed over to a human where the configured rules require it.

We do not use client conversation content to train general-purpose public models.

Under the PDPA you may request access to the personal data we hold about you and information on how it has been used or disclosed in the past year, request correction of any error, and request deletion where we no longer need it.

Email our Data Protection Officer and we will respond within 30 days, or tell you when to expect a response. Where processing is based on your consent, you can withdraw that consent at any time; withdrawal does not affect processing already carried out.

Data Protection Officer, SHARKBYTE — business@sharkbytetech.io.

If you are not satisfied with our response, you may refer the matter to the Personal Data Protection Commission (PDPC) in Singapore.

If a data breach occurs that is likely to result in significant harm, or that affects a significant number of individuals, we will notify the PDPC and affected individuals in line with the PDPA’s mandatory notification requirements, without undue delay after assessment.

This site uses only what is needed to serve pages and keep the site secure. We do not run advertising trackers or sell audience data to third parties.

We update this page when our practices change. For any privacy question or request, email business@sharkbytetech.io.