Some specialist cybersecurity services may be delivered with external partner companies. Where a partner is involved, we will share the partner’s identity, role, relevant licences or credentials (where applicable), and contracting arrangements before you decide whether to proceed.
Before work begins, the proposal or agreement will confirm the service provider, scope, each party’s responsibilities, and any required written authorisations. Any work subject to regulatory licensing will proceed only where applicable licensing requirements are met.
Data collection and use
Personal data collected through this website or in connection with a service engagement will be collected, used, or disclosed for purposes notified to you or otherwise permitted or required by applicable law. These purposes may include responding to enquiries, assessing or delivering requested services, managing the customer relationship, protecting systems, and meeting legal obligations. Personal data will be handled in accordance with applicable data-protection laws, including Singapore’s Personal Data Protection Act (PDPA) where it applies, and retained only for as long as needed for the relevant purposes or applicable business or legal requirements. For privacy questions or requests relating to personal data, contact contacts@kis.sg.
Data location and international transfers
Depending on the website infrastructure and the service providers or partners used for a particular service, data may be stored or accessed in Singapore or another jurisdiction. We do not promise that all data will remain in Singapore. Where relevant to a service engagement, the proposal or agreement will set out the anticipated processing locations, provider or partner roles, permitted purposes and access, retention or deletion arrangements, and applicable security and incident-handling responsibilities.
Any transfer of personal data outside Singapore will be handled in accordance with applicable legal requirements, including the PDPA’s transfer-limitation requirements where the PDPA applies. Clients should not send passwords, unnecessary personal data, or live system information through general website forms. Any client data or system access needed for an assessment should be authorised in writing and shared through agreed channels.
Website descriptions are general information only. The service provider and terms for a particular engagement will be set out in the relevant written agreement.