Privacy Policy

Offload Foundry is a Singapore-based web and AI development practice operating the website at offloadfoundry.com. This policy applies to that website and to enquiries submitted through it. It is written to be read alongside Singapore's Personal Data Protection Act 2012 (PDPA).

We collect only what the site actually asks for, plus anonymous measurements of how the site itself performs. There is no advertising pixel on this site, nothing here follows you to other websites, and none of it sets a tracking cookie.

• Enquiry details. When you submit the contact form we collect your name, email address, the message you write, and — only if you choose to give it — your mobile number. The mobile number is the one optional field; the other three are required, and nothing else is captured from that form.
• Your IP address. The contact form is rate-limited to stop it being used to send bulk messages. To do that, the server reads the IP address your request arrives from and counts recent submissions against it. That count is held in the server's memory only — it is never written to a database, and it is lost whenever the server restarts.
• Anonymous usage and performance measurements. We use our hosting provider's built-in web analytics and page-speed measurement to see which pages are visited, roughly where visitors come from, and how quickly pages load. These are cookieless: they set nothing on your device and store no identifier that persists across days, so they cannot be used to recognise you on a return visit or to follow you to another site. We see counts and page-speed figures, not people.
• Hosting logs. Our hosting provider keeps standard request logs (IP address, timestamp, requested URL, user agent) as part of running the service. We do not use those logs for marketing or profiling.
• Your theme choice. If you switch between the light and dark theme, that choice is stored in your own browser under the key of-theme. It never leaves your device, it is not a cookie, and it identifies nobody.

Enquiry details are collected for one purpose: so that we can reply to you and discuss the work you are asking about. Your IP address is collected for one purpose: preventing abuse of the contact form. The usage and performance measurements are collected for one purpose: keeping this site fast and working out which pages are worth improving. We do not use any of it to build a profile of you, and we do not send marketing to people who have only ever sent us an enquiry.

By submitting the contact form you consent to us using your details for that purpose. You may withdraw that consent at any time — see Your rights below.

When you submit the contact form, the fields you filled in are sent to our server, and our server immediately forwards them to our internal inbox. That is how we are notified that you have written to us, and it is the only reason the form exists.

We use third-party messaging and hosting services to receive and store enquiries, and some of those services run on servers outside Singapore. Your name, email address, message and — where you gave one — your mobile number therefore leave Singapore, and are held by those providers under their own terms and privacy policies. The receiving inbox is private, and access is limited to the people who need to read enquiries in order to answer them.

Aside from those service providers, we do not disclose your personal data to anyone. We do not sell it, rent it, or share it with advertisers or data brokers.

• Enquiries. Your enquiry stays in our inbox for as long as we may reasonably need it to deal with your enquiry and any work that follows from it. We do not run a scheduled purge, so we are not going to promise you a deletion date we would not meet. What we will do is delete it whenever you ask us to — see Your rights below — and we do not keep enquiry data for any purpose beyond the one stated above.
• Rate-limit records. The in-memory count tied to your IP address expires 20 hours after it is created, and is discarded entirely whenever the server restarts. Nothing about it is retained.
• Usage and performance measurements. Retained by our hosting provider in aggregate form for their standard reporting window, which we do not extend. There is nothing in them tied to you to delete.
• Hosting logs. Retained by our hosting provider for their standard log-retention period, which we do not extend.

The site is served over HTTPS, so what you type into the form is encrypted in transit. The webhook that delivers your enquiry is held as a server-side secret and is never exposed to your browser. Access to the receiving channel is restricted. No system is perfect, and we do not claim any certification or attestation we do not hold.

Under the PDPA you may ask us to:

• tell you what personal data of yours we hold and how it has been used;
• correct anything that is wrong or incomplete;
• delete your enquiry and the personal data in it; or
• stop using your data — that is, withdraw the consent you gave when you submitted it.

Email sales@notify.offloadfoundry.com and we will respond within 30 days, as the PDPA requires. Withdrawing consent means we can no longer contact you about your enquiry, so it will normally end the conversation.

Questions, requests and complaints about how we handle personal data go to sales@notify.offloadfoundry.com. If you are not satisfied with our response, you may raise the matter with the Personal Data Protection Commission of Singapore.

If we change how we handle personal data — for example, if enquiries start reaching us through a different service — we will update this page and change the date at the top of it. The date at the top is always the date the current version took effect.

See also our Terms of Service.