Privacy Policy

In this Policy, “personal data” means data, whether true or not, about an individual who can be identified from that data alone, or from that data together with other information we have or are likely to have access to.

“We”, “us” and “our” refer to Xtremax Pte. Ltd. and its affiliate PT Xtremax Teknologi Indonesia, which own and operate CloudPrimus. “You” refers to any individual whose personal data we handle in connection with this website or the CloudPrimus services.

The personal data we handle depends on how you interact with us, and may include:

1. (a)
   your name, job title, company name and contact details such as email address and phone number;
2. (b)
   account details you use to sign in to CloudPrimus;
3. (c)
   the content of messages and enquiries you send us, including through our contact form; and
4. (d)
   technical information collected when you browse our website, such as IP address, browser type, device identifiers and the pages you view.

We collect, use and disclose your personal data only with your consent, or where the Personal Data Protection Act 2012 of Singapore (the “PDPA”) or other applicable law permits or requires us to do so without consent.

We may use your personal data to:

1. (a)
   respond to your enquiries, demo requests and feedback;
2. (b)
   set up, operate and support your CloudPrimus account and the services you use;
3. (c)
   send you service notices and, where you have agreed, information about CloudPrimus products, events and updates;
4. (d)
   understand how our website is used so that we can maintain and improve it;
5. (e)
   protect the security of our systems and detect or prevent fraud and misuse; and
6. (f)
   comply with our legal and regulatory obligations.

We may share your personal data, for the purposes above, with:

1. (a)
   companies within the Xtremax group;
2. (b)
   service providers who host, support or deliver services on our behalf, under obligations to protect the data;
3. (c)
   our professional advisers, such as auditors and lawyers; and
4. (d)
   government or regulatory authorities, where the law requires us to.

We do not sell your personal data.

If you give us personal data about someone else, such as a colleague you nominate as a contact for your organisation, you confirm that you have told that person about this Policy and obtained their consent for us to collect, use and disclose their data as described here.

You may withdraw your consent to our collection, use or disclosure of your personal data at any time by writing to our Data Protection Officer at the contact details in section 12.

We will act on your request within a reasonable time, normally within ten (10) business days of receiving it, and will let you know if the withdrawal affects our ability to keep providing a service to you.

Withdrawing consent does not affect our right to keep handling your personal data where the law permits or requires us to do so without consent.

You may ask us:

1. (a)
   for a copy of the personal data we hold about you;
2. (b)
   how that personal data has been used or disclosed in the past year; or
3. (c)
   to correct personal data that is inaccurate or incomplete.

Please send these requests to our Data Protection Officer. We will reply within thirty (30) days where we can, and will tell you if we need longer. We may charge a reasonable fee for an access request, and will tell you the amount before we process it.

We use reasonable administrative, physical and technical safeguards to protect personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. These include encrypting data in transit, restricting access to staff who need it, and keeping our systems up to date.

No method of transmission over the internet or of electronic storage is completely secure. While we work hard to protect your personal data, we cannot guarantee its absolute security.

We rely on the personal data you give us. Please make sure it is accurate and complete, and let us know when it changes so that we can update our records.

We keep personal data only for as long as we need it for the purposes it was collected for, or as long as the law requires.

When we no longer need it, we delete it or anonymise it so that it can no longer be linked to you.

We may transfer your personal data to our affiliate in Indonesia, or to service providers in other countries, for the purposes in this Policy.

When we do, we take steps to ensure that the recipient protects the data to a standard comparable to the protection it receives under the PDPA, for example through contractual safeguards.

Our website uses cookies, which are small files stored by your browser. They help us remember your preferences, count visitors and understand which pages are used most. Cookies cannot read other data from your device.

We may also use third-party analytics services, such as Google Analytics, which set their own cookies to measure how our website is used.

Most browsers accept cookies by default. You can change your browser settings to block or delete cookies, but some parts of the website may then not work as intended.

Our website may link to websites run by other organisations. Their privacy practices may differ from ours, and we are not responsible for their content or how they handle personal data. Please read the privacy policies of any site you visit.

If you have a question about this Policy, or would like to make a request about your personal data, please contact our Data Protection Officer by email at contact@xtremax.com, through our contact form, or by post to Xtremax Pte. Ltd., 114 Lavender Street, #08-93, CT Hub 2, Singapore 338729.

This Policy is governed by the laws of Singapore.

This Policy applies together with any other notices, contract terms and consent clauses that apply to how we handle your personal data, including our Terms of Service, and does not replace them unless we say so.

We may update this Policy from time to time. The updated version takes effect when it is posted on this page, and the date above shows when it last changed. Your continued use of our website or services after an update means you accept the updated Policy.