Privacy Policy
BUILDBLOCKOS PTE. LTD. · Last updated: 18 September 2026. This policy takes effect on the date it is published on buildblock.sg.
1. Who we are
1.1 This policy is issued by BUILDBLOCKOS PTE. LTD. (UEN 202637883K), 6 Derbyshire Road, #25-04, 6 Derbyshire, Singapore 309462, trading as BuildBlock ("we", "us").
1.2 It explains how we collect, use, disclose and look after personal data under the Personal Data Protection Act 2012 ("PDPA").
2. What this policy covers
2.1 This policy covers personal data we collect when you:
(a) visit buildblock.sg;
(b) book a call with us;
(c) email or message us; or
(d) meet or speak with us about a possible engagement.
2.2 This policy does not cover personal data we handle for a client while delivering a project. That data is governed by our written agreement with that client, and the client's own privacy policy applies to it.
2.3 Staff, contractors and placement participants receive a separate notice when they join us.
3. What we collect
3.1 Details you give us. Your name, email address, phone number, company, job title, and anything you tell us in a booking, email, message or call.
3.2 Booking details. The time you choose and any answers you give on the booking page.
3.3 Technical data. When you visit our website, our hosting and font providers receive your IP address, browser type and the pages you request. They use this to deliver and secure the website.
3.4 What we do not collect. Our website does not use analytics, advertising or tracking cookies. Our hosting provider may set a strictly necessary cookie to protect the website from abuse. We do not ask for NRIC numbers, payment card details or sensitive personal data through the website.
3.5 Our booking page. Our booking page is run by Notion on its own website. Notion's privacy policy and cookie settings apply while you are on that page.
3.6 Work contact details. The PDPA does not apply to business contact information you give us for business purposes. We still handle it with the same care as other personal data.
3.7 Call recordings and notes. We use AI notetakers to record and transcribe our calls and meetings, so that we have an accurate record of what was discussed. We sometimes also record our screen to send you a video walkthrough.
4. Why we use it
4.1 We use your personal data to:
(a) respond to your enquiry and schedule calls;
(b) understand your business needs and prepare a proposal;
(c) enter into, manage and perform an engagement with you or your organisation;
(d) send invoices and keep business and tax records;
(e) keep our website and systems secure; and
(f) meet our legal and regulatory obligations.
4.2 We will ask for your consent before using your personal data for any other purpose, unless the PDPA allows us to use it without consent.
5. Marketing
5.1 We send marketing emails, such as newsletters or event invitations, only if you have asked to receive them.
5.2 Every marketing email includes a way to unsubscribe. You can also email us at any time to stop them.
5.3 We do not send marketing messages to Singapore telephone numbers unless the PDPA's Do Not Call provisions allow it.
6. Who we share it with
6.1 We share personal data with the service providers we use to run our business, and only for the purposes in clause 4. They are:
| Provider | What it does for us |
|---|---|
| Notion Labs, Inc. | Call bookings through Notion Calendar, AI meeting notes, and our internal records |
| Google LLC (Google Workspace) | Email, calendar and documents |
| Google LLC (Google Fonts) | Serves the fonts on our website |
| Cloudflare, Inc. | Hosts, delivers and secures our website |
| Anthropic, PBC | AI assistant used to help draft and organise our work |
| Granola | AI notetaker that records and transcribes our calls |
| Loom | Screen recordings we send to you |
| eSignatures | Sends and stores documents for electronic signature |
6.2 We may also disclose personal data to:
(a) our professional advisers, such as accountants and lawyers, who owe us a duty of confidentiality;
(b) a buyer or successor, if our business is sold or restructured; and
(c) any authority, where the law requires it.
6.3 We do not sell personal data.
7. Transfers outside Singapore
7.1 Some of the providers in clause 6 store or process personal data outside Singapore, including in the United States and in Europe.
7.2 Before we transfer personal data outside Singapore, we take steps to make sure the recipient protects it to a standard comparable to the PDPA. These steps include using providers bound by contractual data protection terms.
8. How long we keep it
8.1 We keep personal data only for as long as we need it for the purposes in clause 4, or as long as the law requires.
8.2 If you enquire but do not become a client, we keep your details only while there is a realistic prospect of us working together. We review our enquiry records at least once a year and delete or anonymise the ones we no longer need.
8.3 If you become a client, we keep engagement and financial records for the period tax and company law require, which is generally at least 5 years.
9. How we protect it
9.1 We protect personal data with reasonable security arrangements. These include multi-factor authentication on our accounts, access limited to people who need it, and reputable providers.
9.2 No system is completely secure. If a data breach occurs, we will assess it and notify the PDPC and affected individuals where the PDPA requires.
10. Your choices
10.1 You may ask us to:
(a) tell you what personal data we hold about you, and how we have used or disclosed it in the past year;
(b) correct personal data that is wrong or incomplete; or
(c) stop using your personal data, by withdrawing your consent.
10.2 Send your request to our Data Protection Officer at the email in clause 12. We may need to verify your identity first.
10.3 We will respond as soon as reasonably possible. If we cannot respond within 30 days, we will tell you in writing when we will.
10.4 We may charge a reasonable fee for an access request. We will give you a written estimate of the fee before we act on the request.
10.5 If you withdraw consent, we may no longer be able to provide some services. We will explain the consequences before we act on your withdrawal.
11. Changes to this policy
11.1 We may update this policy from time to time. The "Last updated" date at the top shows when it last changed.
11.2 The version on buildblock.sg is the current one.
12. Contact us
12.1 Questions, requests and complaints about personal data go to our Data Protection Officer:
Email: legal@buildblock.sg
12.2 We will acknowledge a complaint within 5 business days and aim to resolve it within 30 days.
12.3 If you are not satisfied with our response, you may contact the Personal Data Protection Commission at pdpc.gov.sg.