Privacy policy

Last updated 4 October 2026

The short version

We collect what you type into our forms and tools, plus anonymous usage data if you allow analytics.
We use it to reply to you and to send what you asked for. Marketing emails go only to people who tick the box.
We never sell your data, and we never ask for your NRIC.
A few trusted providers handle it for us (hosting, email, our lead list). Some store it outside Singapore.
You can ask what we hold, ask us to correct it, or withdraw consent at any time.

Who we are

This website is run by Grunt Digital Pte. Ltd. (UEN 202637374R), a company registered in Singapore. In this policy, "we", "us" and "our" mean Grunt Digital Pte. Ltd..

We follow Singapore's Personal Data Protection Act 2012 (PDPA). This policy explains what personal data we collect through gruntdigital.com, what we do with it, and the choices you have.

What we collect

What you give us

Enquiry forms (the "Post an enquiry" panel, /start and the form at the end of pages): your name, email, company, and anything you choose to add, such as your phone number, website, team size, the service you're interested in, and a description of the task.
Indicative pricing requests: the same details, plus the tools you use now and your timing.
Free tools (such as the hidden-cost calculator): the numbers you enter, and your email if you ask us to send you the report.
Emails and calls: whatever you tell us when you write to us or speak to us.

What we collect automatically

Where an enquiry came from: the page you sent it from, and any campaign tags in the link you followed (for example, if you clicked a link in one of our emails).
Usage data, only if you accept analytics cookies: pages viewed, buttons clicked, the device and browser type, and your approximate location (country or city level).
Technical data: our hosting provider processes your IP address to deliver the site, keep it secure and block spam.

We never ask for your NRIC or other national ID numbers. Please don't include sensitive personal data (health, financial account or ID details) in a form.

Why we use it

To reply to your enquiry and follow up with you about it.
To send you what you asked for, such as a tool's report or an indicative price range.
To prepare a quote and, if you become a client, to deliver the work.
To understand which pages help people and fix the ones that don't (analytics, only with your consent).
To keep the site secure and stop spam.
To meet our legal and accounting obligations.

Every form on this site states its purpose beside it. We don't use your details for anything that isn't covered by that purpose or this policy unless we ask you first.

Marketing emails

Each form has a separate, unticked box for occasional emails with new tools and guides. We send those only if you tick it. If you don't, you get what you asked for and personal replies from us, nothing more. Every marketing email has an unsubscribe link, and you can also email us to stop them.

Data stored outside Singapore

Some of our service providers store or process data outside Singapore, including in the United States. When we transfer personal data overseas, we take steps under the PDPA to make sure it gets a standard of protection comparable to Singapore's, such as choosing providers bound by contractual data protection terms.

Cookies and analytics

Needed to run the site: our spam check may set a cookie when you send a form, and your browser remembers small choices, such as closing the announcement bar. These don't track you.

Analytics: PostHog cookies load only after you choose "Accept" in the cookie bar. "Reject" is just as easy, and nothing loads until you choose.

Error reports: if something on the site breaks, we get an error report (the page, the browser type and what went wrong) so we can fix it. It sets no cookies and doesn't record what you do on the page.

We don't use advertising pixels. If we add any later, they will also wait for your consent, and we'll update this policy first.

You can change your choice any time with the "Cookie settings" link at the bottom of every page.

How long we keep it

Enquiries and tool reports: 24 months after we last hear from you, unless you become a client.
Client records: for as long as Singapore law requires us to keep business records (currently five years).
Analytics data: 12 months.

We don't store the PDF reports our tools send. We keep only the answers needed to recreate one. When we no longer need data, we delete it or make it anonymous.

How we protect it

The site runs on HTTPS. Our admin accounts use two-factor login, and only the people who need your details can see them. If a data breach is likely to cause you significant harm, we'll tell you, and we'll notify the Personal Data Protection Commission within three calendar days of assessing that it must be reported.

Your rights

Access: ask what personal data we hold about you and how we've used it in the past year.
Correction: ask us to fix anything that's wrong or incomplete.
Withdraw consent: tell us to stop using your data. We'll explain what that means (for example, we can't reply to an enquiry without your email) and then stop.

Email our Data Protection Officer (below). We'll reply within 30 days, and tell you if we need longer. We may need to confirm who you are first. If you're unhappy with our answer, you can contact the Personal Data Protection Commission at pdpc.gov.sg (opens in a new tab).

Data inside what we build

This policy covers our website. When we build something for a client, the client's own customer data lives in accounts in the client's name, and how we handle it is set out in the project's written scope and shared responsibility document.

Changes to this policy

If we change how we use personal data, we'll update this page and the date at the top. Big changes that affect you will also be emailed to the people concerned.

Contact our Data Protection Officer

Questions, requests or complaints about your personal data go to our Data Protection Officer at admin@gruntdigital.com.