Privacy policy

This website (yasmeenkhan.co) is operated by Yasmeen Khan ("I", "me", "my"). I am committed to protecting your personal data in accordance with Singapore's PDPA. This policy explains what personal data I collect, why, how I protect it, and the choices you have.

1. Personal data I collect

• Information you give me. When you use the contact form, I collect your name, email address, your organisation (optional), and the contents of your message.
• Technical and security data. When you visit the site, my hosting provider and the form's spam-prevention check automatically process limited technical data, such as your IP address and basic request information, to keep the site secure and available.
• The readiness assessment runs entirely in your browser. Your answers are not sent to me or stored anywhere.

2. How I use your personal data

I use your personal data only to:

• respond to your enquiry and follow up with you;
• operate, secure, and maintain this website, including preventing spam and abuse.

I rely on your consent, which you give by submitting the contact form, and on the legitimate purposes permitted under the PDPA. I do not use your data for automated marketing, and I do not sell it.

3. Disclosure and overseas transfer

I do not sell or rent your personal data. I share it only with the service providers who help me run this site, acting as my data intermediaries: my website hosting and spam-prevention provider, and my email delivery provider. These providers may process your data on servers located outside Singapore. Where personal data is transferred overseas, I take reasonable steps to ensure it receives a standard of protection comparable to that under the PDPA.

4. Protection

Data is transmitted over an encrypted (HTTPS) connection and the contact form is protected by a spam-prevention check. I limit access to enquiry data to myself and keep it only in the accounts needed to respond to you.

5. Retention

I keep contact-form data only for as long as needed to respond to your enquiry and for reasonable follow-up, and no longer than 24 months unless we are in an ongoing conversation or I am required to keep it longer by law. After that it is deleted.

6. Accuracy

Please make sure the information you give me is accurate and complete, so I can respond to you properly.

7. Your rights: access, correction, withdrawal

Under the PDPA you may:

• request access to the personal data I hold about you and how it has been used;
• ask me to correct it;
• withdraw your consent and ask me to delete it.

To make a request, email hello@yasmeenkhan.co. I will respond within a reasonable time, usually within 30 days. Withdrawing consent will not affect the lawfulness of processing before the withdrawal.

8. Cookies

This site does not use analytics or advertising cookies. The spam-prevention check may set a strictly necessary token to verify that form submissions are genuine; this is used only for security.

9. Data breaches

If a data breach occurs that is likely to result in significant harm to you, or that meets the notification threshold under the PDPA, I will notify the Personal Data Protection Commission (PDPC) and affected individuals as required by law.

10. Contact and Data Protection Officer

For any question about this policy, your personal data, or to make a request, contact Yasmeen Khan (Data Protection Officer) at hello@yasmeenkhan.co. If you are not satisfied with my response, you may contact the PDPC at www.pdpc.gov.sg.

11. Changes to this policy

I may update this policy from time to time. The "last updated" date above shows when it last changed.