Privacy notice

Who is responsible

AAI KERNEL PTE. LTD. (UEN 202644705E), incorporated in Singapore, is responsible for the personal information it handles for the purposes described here.

AAI KERNEL PTE. LTD. has designated an internal Data Protection Officer in accordance with Singapore’s Personal Data Protection Act. The Data Protection Officer can be contacted at privacy@aaikernel.com, which receives privacy and data-protection enquiries, including requests concerning personal information.

You can also use our Contact page, or write to: Privacy enquiries, AAI KERNEL PTE. LTD., 2 Venture Drive, #14-02 Vision Exchange, Singapore 608526.

Information covered by this notice

When you contact us, we receive the information you provide, such as your name, email address, organization, optional website address, enquiry category, message and optional project details. Correspondence and our responses form part of the enquiry record.

The enquiry system keeps an encrypted receipt record and sends an internal email notification for handling. Your message is not published on the website.

Website delivery and security involve technical information such as an IP address, request time, requested page, browser information and security or error events. Form protection uses temporary identifiers derived from the IP address and email address to limit abusive submissions; the application’s rate-limit records use those identifiers instead of the raw values.

This website does not use website analytics. Technical information needed to deliver and protect the service is described in this notice.

Please avoid sending sensitive personal information, passwords, access tokens or confidential third-party documents through the initial enquiry form. We can agree an appropriate exchange process when further information is needed.

Personal-information processing covers the actual collection, use, access, retention and handling of information for the website's purposes. This notice explains how the website handles that information.

Why information is used

• To receive, assess and respond to your enquiry.
• To discuss the feasibility, scope and conditions of a possible engagement.
• To operate, protect and troubleshoot the website and communications.
• To handle privacy requests, complaints, disputes and applicable legal obligations.

Submitting an enquiry is not registration for a newsletter or permission for unrelated marketing. Any future optional communications require their own clear information and applicable choice.

Basis for handling personal information

Singapore’s Personal Data Protection Act applies where the information and processing fall within its scope. Business contact information can be treated differently under that Act; a free-text enquiry may also contain personal information beyond business contact details.

Where the EU or UK GDPR applies, the basis depends on the purpose. We use legitimate interests to handle business correspondence and maintain a secure, functioning website, taking account of your rights. Steps taken at your request before entering a contract apply where you would personally be a party to that contract. Legal obligations apply to processing required by law. Where consent is the appropriate basis, it must be specific and can be withdrawn.

Access and recipients

Access is limited to people who need the information for the relevant purpose and authorized service providers supporting website delivery, hosting, storage, security and communications. Professional advisers or competent authorities may receive information where necessary for legal obligations, a dispute or the protection of lawful rights.

A link between AAI Kernel and The Observatory does not make an enquiry a submission to both companies. The Observatory is a separate organization. Sharing with it for a separate purpose requires an appropriate basis and information to you. Following a link from The Observatory to this website does not make you a shared or identified user of the two companies.

How long information is kept

An enquiry record is retained while the discussion is active and for as long as a documented business or legal need remains. Relevant criteria include whether an engagement follows, whether a complaint or dispute is outstanding, and whether a legal record-keeping obligation applies.

The form’s abuse-prevention counters expire after 15 minutes for the IP-derived identifier and one hour for the email-derived identifier. The encrypted record of an enquiry submitted through the website form is kept for a maximum of 180 days from submission and may be deleted earlier. Emails received in our company mailboxes, and the correspondence that follows, are a separate record: they are kept according to the business and legal criteria above and are not deleted automatically after 180 days.

Technical and security records are retained according to the operational purpose and the applicable provider settings. Records no longer needed for a business or legal purpose are deleted or anonymized. A legal preservation requirement may delay deletion. We can explain the retention criteria relevant to a specific request.

International handling

AAI Kernel is established in Singapore. The location of website visitors, authorized personnel and service providers may involve handling information across borders. Applicable safeguards must cover the actual processing and onward transfers.

Where Singapore transfer rules apply, the arrangements must provide a standard of protection comparable to the PDPA. Where EU or UK transfer rules apply, the relevant transfer must be covered by an applicable adequacy decision, appropriate safeguards or a permitted exception. You can ask us for information about the arrangements relevant to your personal information.

Website analytics

This website does not use website analytics. No analytics or audience-measurement script is loaded.

Cookies, browser storage and external links

The website does not set cookies, and it does not load advertising pixels, remote fonts or embedded third-party content. If you use the light/dark display control, your browser stores that choice on your device (local storage, key “rf-theme”, value “light” or “dark”) so that the next page opens in the same mode. It is not sent to us, contains no personal information, is not used for tracking and stays until you clear this site’s data in your browser. Where the browser blocks such storage, the choice is kept only in the open tab. The website does not load third-party services. The enquiry form keeps a temporary security token in the page’s memory while you use it.

Links to other websites open services governed by their own privacy notices. Following a link is a separate visit to that service.

Your rights and choices

Depending on the applicable law and circumstances, you may request access to personal information, correction, deletion, restriction, portability or objection to particular processing. Where processing relies on consent, you may withdraw it without affecting processing already lawfully carried out.

These rights are subject to applicable conditions and exceptions. We may need proportionate information to confirm your identity before disclosing or changing a record. We will explain if we cannot fulfil a request in full. If a requested response depends on contact information that you do not provide, we may be unable to continue the enquiry.

Questions and complaints

Please describe your concern and the information or interaction involved by writing to privacy@aaikernel.com or using the privacy contact route above. We will assess the request and respond within the period required by applicable law.

You may also raise a concern with Singapore’s Personal Data Protection Commission or another competent supervisory authority where applicable. You do not have to complete our internal process before exercising a statutory right to complain.

Changes to this notice

We update this notice when the website or the relevant processing changes. The notice in force when information is handled applies subject to applicable law; a notice update does not itself authorize a new use of previously collected information.