1. Data Controller

The data controller responsible for your personal data is:

Black Amber Consulting Pte. Ltd.
Trading as: Automata
Singapore
Email: hello@automata.ch

As we are based outside the UK, we rely on the UK's adequacy framework and standard contractual clauses where applicable for cross-border data transfers.

2. What Data We Collect

We only collect data you actively provide to us:

• Contact details: Name, company name, email address
• Optional: WhatsApp or LINE number
• Business context: Free-text description of your workflows (only if you choose to fill it in)

We do not collect any special category data (health, financial, biometric, or political data).

3. Purpose and Legal Basis

We process your data solely for the following purposes:

• Responding to your enquiry
• Scheduling and conducting an initial consultation
• Managing a potential or existing business relationship

Legal basis (UK GDPR): Your explicit consent, provided by ticking the consent checkbox in our contact form (Article 6(1)(a) UK GDPR). You may withdraw your consent at any time.

Legal basis (Singapore PDPA): Your consent as provided through the contact form.

4. Third Parties and Data Transfers

We use FormSubmit (formsubmit.co) to receive your contact form submissions. Your form data is forwarded to us via email. FormSubmit processes your data solely for the purpose of delivering your message.

We do not sell, rent, or share your data with any other third parties, except where required by law.

Your data may be transferred to and processed in Singapore. We ensure appropriate safeguards are in place in accordance with UK GDPR requirements for international transfers.

5. How Long We Keep Your Data

We retain your data only for as long as necessary to fulfil the purpose for which it was collected. Enquiries that do not result in a business relationship are deleted within 12 months. Where a business relationship exists, we retain relevant records for as long as legally required or as long as the relationship is active.

6. Cookies and Tracking

This website uses no tracking cookies, no analytics tools (such as Google Analytics), and no advertising or retargeting. We use only a single functional browser storage item to remember your language preference. No data is shared with any third party as a result.

7. Your Rights

Under UK GDPR and the Singapore PDPA, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data where no legal retention obligation applies.
• Withdrawal of consent: Withdraw your consent at any time, without affecting the lawfulness of prior processing.
• Data portability: Request your data in a commonly used, machine-readable format.
• Objection: Object to processing in certain circumstances.
• Complaint (UK): Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
• Complaint (Singapore): Lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

To exercise any of your rights, contact us at: hello@automata.ch. We will respond within 30 days.

8. Security

We take appropriate technical and organisational measures to protect your data. This website is served over HTTPS and form submissions are encrypted in transit.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page. The date of the last update is shown at the top.