Summary: The HR Lab collects only the personal data you voluntarily submit through our contact form, uses it solely to respond to your enquiry, does not sell or share it with third parties for marketing purposes, and retains it only for as long as necessary. You have the right to access, correct, and withdraw consent for your data at any time.
1 Who We Are
This Privacy Policy applies to The HR Lab, a freelance HR and AI consulting practice based in Singapore ("we", "us", or "The HR Lab").
This policy governs the collection, use, disclosure, and protection of personal data submitted through our website at hrlabtools.com (the "Website"), in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and its subsidiary legislation and guidelines, including the Advisory Guidelines issued by the Personal Data Protection Commission (PDPC).
By submitting your personal data through our contact form, you consent to the collection, use, and disclosure of your personal data as described in this policy.
2 Personal Data We Collect
We collect only the personal data that you voluntarily provide when you submit our contact form. This may include:
| Data Field | Type | Required? |
|---|---|---|
| Full name | Personal identifier | Yes |
| Email address | Contact information | Yes |
| Organisation name | Business information | No |
| Area of interest | Service preference | No |
| Message / enquiry details | Correspondence | Yes |
We do not collect sensitive personal data (such as NRIC numbers, financial information, health data, or biometric data) through this Website.
3 Why We Collect Your Data
Your personal data is collected for the following purposes:
- To respond to your enquiry — to contact you via email regarding the services or information you have requested
- To assess your requirements — to understand your consulting needs and determine how The HR Lab may assist you
- To communicate about potential engagements — to follow up on enquiries and discuss proposals or scoping arrangements
- To maintain business correspondence records — to keep a record of our communications for the purposes of any subsequent engagement
We will not use your personal data for any purpose other than those stated above without first obtaining your consent, unless such use or disclosure is required or authorised under the PDPA or any other applicable law.
4 How Data is Collected
Personal data is collected through the contact form on our Website (hrlabtools.com/#contact). By completing and submitting this form, you voluntarily provide your personal data and consent to its use as described in this policy.
We do not collect personal data through:
- Cookies or tracking technologies (see Section 9)
- Third-party social media platforms
- Automated data collection tools
- Data brokers or purchased data lists
5 Third-Party Data Processors
To deliver our contact form functionality, we use the following third-party service as a data processor:
| Service | Purpose | Data Transmitted | Privacy Policy |
|---|---|---|---|
| Web3Forms | Form submission processing and email delivery | Name, email, organisation, area of interest, message | web3forms.com/privacy |
Web3Forms acts as a data intermediary that transmits your submitted form data to us via email. We have satisfied ourselves that Web3Forms implements appropriate technical and organisational measures to protect personal data in transit.
We do not sell, rent, trade, or otherwise transfer your personal data to any other third parties for commercial, marketing, or any other purposes.
6 Data Retention
We retain personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law.
- Enquiries that do not lead to an engagement — personal data will be retained for up to 12 months from the date of last contact, after which it will be securely deleted
- Enquiries that lead to an engagement — personal data will be retained for the duration of the engagement and for up to 7 years thereafter, in accordance with applicable legal and contractual obligations
You may request earlier deletion of your personal data at any time by contacting us (see Section 12), subject to any legal retention obligations.
7 How We Protect Your Data
We take reasonable and appropriate technical and organisational measures to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include:
- All data transmitted through our Website is encrypted using HTTPS/TLS
- Form data is transmitted to us via Web3Forms' secure API and delivered to a password-protected email account
- Access to personal data received via email is restricted to authorised personnel of The HR Lab only
- We do not store personal data in any server-side database or repository through this Website
Session-based design: Our Website does not maintain a backend data repository. Personal data submitted through the contact form is transmitted directly to us via email and is not stored on our web servers. This design minimises data retention risk.
8 Disclosure of Personal Data
We do not disclose your personal data to third parties except:
- Web3Forms — as described in Section 5, solely for the purpose of transmitting your enquiry to us
- Legal requirements — where required by Singapore law, court order, or regulatory authority
- Protection of rights — where disclosure is necessary to protect the rights, property, or safety of The HR Lab or others
In the event that The HR Lab engages sub-contractors or associates to assist with a consulting engagement, we will obtain your consent before sharing your personal data with such parties, and we will ensure that appropriate data protection obligations are in place.
9 Cookies & Tracking
Our Website does not use cookies, tracking pixels, analytics tools, or any form of automated data collection technology. We do not use Google Analytics, Facebook Pixel, or any similar third-party tracking services.
If this changes in future, this Privacy Policy will be updated accordingly and you will be notified via an updated effective date.
10 Your Rights Under the PDPA
Under Singapore's Personal Data Protection Act 2012, you have the following rights with respect to your personal data held by The HR Lab:
Right of Access
You may request access to the personal data we hold about you and information about how it has been used or disclosed in the past 12 months.
Right of Correction
You may request that we correct any personal data we hold about you that is inaccurate, incomplete, or misleading.
Right to Withdraw Consent
You may withdraw your consent for us to collect, use, or disclose your personal data at any time, subject to legal or contractual restrictions.
Right to Data Portability
Where applicable under the PDPA, you may request that your personal data be provided to you in a commonly used electronic format.
To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within 30 days, or notify you if additional time is required.
Please note that in some circumstances, we may not be able to fulfil your request — for example, where doing so would contravene legal obligations. Where we are unable to fulfil a request, we will inform you of the reason.
11 Withdrawing Consent
You may withdraw your consent to our collection, use, or disclosure of your personal data at any time by contacting us at the details provided in Section 12.
Please note that withdrawal of consent may affect our ability to respond to your enquiry or provide consulting services to you. We will inform you of the likely consequences of withdrawal before processing your request.
Withdrawal of consent does not affect the lawfulness of any collection, use, or disclosure of personal data that occurred prior to the withdrawal.
12 Contact & Data Queries
For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold, please contact us:
The HR Lab
Attn: Data Protection Enquiries
Email: paksuan@hrlabtools.com
Website: hrlabtools.com
We aim to respond to all data-related requests within 30 days of receipt.
Complaints to the PDPC
If you are dissatisfied with our handling of your personal data and wish to make a complaint, you may contact the Personal Data Protection Commission (PDPC) of Singapore:
- Website: www.pdpc.gov.sg
- Email: pdpc_complaints@pdpc.gov.sg
- Helpline: +65 6377 3131
13 Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational circumstances. When we make material changes, we will update the Last Updated date at the top of this page.
We encourage you to review this policy periodically. Continued use of our Website or submission of your personal data following any updates constitutes your acceptance of the revised policy.
Previous versions of this Privacy Policy are available upon request.