Privacy Policy

1. Introduction

Singh Global (also known as SinghGlobal) ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website (https://singhglobal.org) or use our services.

We comply with the EU General Data Protection Regulation (GDPR), Swiss Federal Data Protection Act (FADP), and other applicable data protection laws.

2. Data Controller

3. Data We Collect

3.1 Information You Provide

When you use our contact form or interact with our services, we may collect:

• Contact Information: Name, email address, phone number
• Communication Data: Subject and message content from contact forms
• Business Information: Company name, industry, specific requirements

3.2 Information Collected Automatically

• Technical Data: IP address, browser type, operating system
• Usage Data: Pages visited, time spent on site, referring URLs
• Device Information: Screen resolution, device type, language preferences
• Preferences: Theme settings (light/dark mode) stored locally

3.3 Cookies and Local Storage

We use cookies and browser local storage for:

• Essential Functionality: Theme preferences, spam protection
• Analytics: Understanding how visitors use our website (if consent given)
• Form Management: Temporary storage for form submissions

For more details, please see our Cookie Policy.

4. How We Use Your Data

We process your personal data for the following purposes:

4.1 Legal Basis: Consent (GDPR Art. 6(1)(a))

• Responding to your inquiries and contact form submissions
• Sending newsletters or marketing communications (with explicit consent)
• Storing preferences like theme settings

4.2 Legal Basis: Legitimate Interest (GDPR Art. 6(1)(f))

• Improving our website and user experience
• Preventing spam and fraudulent activities
• Security and protection of our systems
• Analytics and business intelligence

4.3 Legal Basis: Contract Performance (GDPR Art. 6(1)(b))

• Providing services you've requested
• Processing orders and transactions
• Customer support and service delivery

4.4 Legal Basis: Legal Obligation (GDPR Art. 6(1)(c))

• Compliance with tax and accounting requirements
• Responding to lawful requests from authorities

5. Data Sharing and Third Parties

We may share your data with the following third parties:

5.1 Email Service Provider

Brevo (Sendinblue): We use Brevo's SMTP service to send and receive emails from our contact form. Brevo processes email data on our behalf and is GDPR-compliant.

Data transferred: Name, email address, message content

Privacy Policy: Brevo Privacy Policy

5.2 Web Hosting

Our website is hosted on servers that may be located in the EU or Switzerland. Server logs may contain IP addresses and technical data.

5.3 Analytics (If Enabled)

With your consent, we may use analytics services to understand website usage. You can opt-out at any time through our cookie banner.

6. Data Retention

We retain your personal data only for as long as necessary:

• Contact Form Submissions: Retained for up to 2 years or until resolved
• Email Communications: Retained for up to 3 years for business purposes
• Technical Logs: Retained for up to 90 days
• Local Storage Data: Stored indefinitely until you clear it or withdraw consent
• Accounting Records: Retained for 10 years as required by Swiss law

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

7.1 Right of Access (Art. 15 GDPR)

Request a copy of the personal data we hold about you.

7.2 Right to Rectification (Art. 16 GDPR)

Request correction of inaccurate or incomplete data.

7.3 Right to Erasure (Art. 17 GDPR)

Request deletion of your personal data ("right to be forgotten").

7.4 Right to Restrict Processing (Art. 18 GDPR)

Request limitation on how we use your data.

7.5 Right to Data Portability (Art. 20 GDPR)

Receive your data in a structured, commonly used format.

7.6 Right to Object (Art. 21 GDPR)

Object to processing based on legitimate interests or direct marketing.

7.7 Right to Withdraw Consent (Art. 7(3) GDPR)

Withdraw consent at any time where processing is based on consent.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption: HTTPS/SSL encryption for data transmission
• Access Controls: Limited access to personal data on need-to-know basis
• Secure Storage: Data stored on secure servers with regular backups
• Spam Protection: Multi-layer bot protection on forms
• Regular Updates: Security patches and updates applied promptly
• Staff Training: Team members trained on data protection practices

9. International Data Transfers

If we transfer your data outside the EU/EEA or Switzerland, we ensure appropriate safeguards are in place:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Swiss-U.S. Data Privacy Framework (if applicable)

10. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

For significant changes, we will provide notice through our website or via email (if we have your email address).

12. Right to Lodge a Complaint

If you believe we have not handled your data properly, you have the right to lodge a complaint with a supervisory authority:

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: