Last updated: 15 October 2026
This Privacy Policy explains how KIS (“KIS”, “we”, “us” or “our”) handles personal data when you visit kis.sg, contact us, buy or download a product, or discuss or receive our services. KIS is headquartered in Singapore and provides IT and cybersecurity services and digital products. This notice should be read with any more specific privacy notice or written engagement terms we provide for a particular service.
1. Personal data we may handle
The information depends on how you interact with us. It may include:
- Contact and business information: your name, work email, telephone number, organisation, job title and the contents of messages or meeting requests you send us.
- Orders and purchases: account and order details, products purchased, billing or transaction information, payment status, and correspondence about a purchase. The payment method displayed at checkout determines which payment provider handles payment credentials.
- Service and engagement information: information needed to scope, deliver and support an engagement. If you provide authorised security assessment materials, these may include system or asset details, technical findings, logs, screenshots or other evidence. The roles and handling instructions for client or third-party data should be set out in the relevant written engagement terms.
- Technical and usage information: information generated when a device accesses the site, such as browser and device details, IP address, pages or links used, timestamps, diagnostic records and cookie or similar technology identifiers. Whether this information is personal data depends on whether it identifies or can reasonably be associated with an individual.
Please do not send passwords, live credentials, payment card security codes, or sensitive client evidence through a public website form or ordinary email. Share engagement material only when authorised and through the channel agreed for that engagement.
2. How we collect information
We may collect information directly from you when you contact us, request a quotation, arrange a meeting, place an order, create or use an account, download a product, or participate in an engagement. We may also receive information from your organisation, an authorised representative, a service or delivery partner, a payment provider, or our website and communications systems. Technical information may be generated automatically when you use the site.
3. Why we use personal data
We use personal data for purposes that we notify when it is collected and as permitted by applicable law, including to:
- respond to enquiries, assess requests, arrange meetings and prepare proposals;
- process and support orders, accounts, payments, downloads and customer service;
- scope, deliver and support cybersecurity, consultancy, implementation, monitoring, training or other agreed services;
- coordinate an engagement with a delivery partner where needed and where the relevant arrangements permit it;
- operate, maintain, troubleshoot and protect our website, systems, products and services, including detecting fraud, abuse or security incidents;
- understand site performance and improve our content and services, where the applicable cookie or analytics settings and law allow;
- send service or transaction updates and, where permitted, relevant marketing communications; and
- meet legal or regulatory requirements, maintain necessary business records, establish or defend legal claims, and protect our rights and the rights of others.
We collect, use or disclose personal data only for purposes that have been notified to you and on the basis of consent or another basis permitted by applicable law. If you withdraw consent for a use that depends on consent, we will explain any practical effect this may have on a requested product or service.
4. Cookies and similar technologies
Our website may use cookies, pixels and similar technologies to support requested site functions, remember preferences, measure site use, and—if enabled—support advertising or promotional features. Some technologies may collect only technical information; others may involve information that identifies or can be associated with a person. Their treatment depends on what they collect and how it is used.
Where the cookie banner is presented, use its Customize controls to review available choices. You can also manage or delete cookies in your browser. Blocking some cookies may affect site functions. The technologies and providers in use can change as the site changes; the banner and this notice should be kept aligned with a current cookie and tracking review.
Google AdSense and advertising cookies
If Google AdSense is enabled on a page, Google and its advertising partners may place or read cookies, use web beacons or pixels, and receive technical information such as an IP address, browser or device identifiers, ad requests and interactions. These technologies may be used to deliver and measure ads, limit repeated ads, detect invalid activity, and—depending on the ad and privacy settings that apply—personalise ads based on visits to this or other websites. Google explains that AdSense cookies may be sent when a page includes Google ad tags, even if an ad is not visibly displayed.
You can manage Google’s personalised advertising through Google Ads Settings. Read Google’s explanation of how AdSense uses cookies and its notice on how Google uses information from sites or apps that use its services. Changing ad-personalisation settings does not necessarily stop ads, non-personalised ad delivery, or every cookie or similar technology. If other ad networks are enabled, their names and privacy or opt-out information should also be provided here.
5. When we may share personal data
We may disclose personal data, to the extent needed for the purposes above, to:
- our personnel and authorised contractors who need it for their work;
- website hosting, e-commerce, payment, email, communications, analytics, advertising, security and IT service providers, including Google if AdSense or another Google feature is enabled;
- delivery partners supporting a requested service, subject to the relevant engagement and data-handling arrangements;
- professional advisers, insurers, auditors or financial institutions where necessary for their work;
- courts, regulators, law-enforcement agencies or other parties when required or permitted by law; and
- a successor or transaction counterparty in connection with a business reorganisation, subject to appropriate safeguards and applicable law.
We expect service providers and partners who handle personal data for us to use it only for authorised purposes and to protect it under appropriate contractual and security arrangements. The specific providers involved may depend on the website feature, payment method or service you use.
For information about how specialist services may be delivered with partner companies, including how provider and engagement details are addressed before a service is agreed, see our Service Partner Delivery Disclaimer.
6. Overseas access and data sovereignty
KIS is headquartered in Singapore, but this does not mean that all website or service data is stored only in Singapore. Our service providers and delivery partners may operate in other countries, and personal data may be stored, processed or accessed in Singapore or elsewhere. We do not promise that all data will remain in Singapore unless a separate written agreement expressly provides for that arrangement.
Where personal data subject to Singapore’s Personal Data Protection Act 2012 (PDPA) is transferred outside Singapore, we will take steps required by the PDPA and its regulations to ensure a standard of protection comparable to that under the PDPA. If a particular engagement requires a specific hosting region or transfer restriction, confirm it with us and record it in the written engagement terms before data is shared.
7. Retention
We retain personal data for as long as reasonably needed for the purpose for which it was collected, to provide a requested product or service, to maintain necessary business and transaction records, to meet legal requirements, to address disputes, or to protect our systems and rights. When it is no longer reasonably needed, we take steps to delete it, anonymise it, or remove the means of associating it with an individual, subject to legal and operational requirements.
8. Protection and incidents
We use reasonable security arrangements designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, loss or similar risks. No website, transmission or storage method can be guaranteed to be completely secure. If we determine that a personal data breach is notifiable under applicable law, we will notify the relevant authority and affected individuals as required.
9. Your requests and choices
Subject to the PDPA and its exceptions, you may ask us to provide access to personal data about you that we hold and information about how it has been used or disclosed, or ask us to correct an error or omission. You may withdraw consent for a consent-based use with reasonable notice. You can also opt out of marketing emails using the unsubscribe instructions in the message or by contacting us. If another law applicable to you provides additional rights, you may raise those rights with us.
Some records may need to be retained or processed where required or permitted by law, to complete a transaction or service, or to establish or defend a legal claim. We will assess each request under the applicable law and explain any relevant limit or consequence.
For marketing sent to Singapore telephone numbers, we will follow the applicable Do Not Call requirements and exceptions. To stop optional marketing from KIS, email us using the contact details below.
10. Third-party websites and services
Our website may link to third-party websites or services. Their privacy practices are governed by their own notices. Review those notices before providing information directly to them. Payment providers may also present their own privacy terms during checkout.
11. Contact us
For a privacy question, access or correction request, consent withdrawal, or complaint about our handling of personal data, email contacts@kis.sg with the subject line Privacy Request. Please identify the website interaction or service involved and provide enough information for us to verify and respond to your request. Do not include passwords or unnecessary sensitive information.
12. Changes to this Policy
We may update this Policy when our website, services, data practices or legal obligations change. The revised version will be posted on this page with an updated date. Where required, we will provide additional notice or seek consent for a new purpose.
This notice explains our general website and service practices. More specific notices or written terms may apply to a particular order or engagement, subject to applicable law.