Privacy Policy

1 Scope of this policy

This policy applies to personal data we process about prospects, leads, clients, website visitors and other individuals who interact with TechSalesU. “Personal data” (or “personal information”) means data, whether true or not, about an individual who can be identified from that data, or from that data and other information we have or are likely to have access to.

TechSalesU is the controller of (and, under the PDPA, the organisation responsible for) the personal data described here. Where we process data on behalf of another organisation, we act as a processor (or data intermediary) under that organisation’s instructions.

2 Personal data we collect

Depending on how you interact with us, we may collect:

• Identity & contact data — name, email address, phone number, country/time zone, and your social or professional profile links (for example LinkedIn).
• Professional data — current role, employer, industry, experience level, and information about your work that you choose to share with us (which may include performance, targets or goals) so we can assess fit and tailor our programs.
• Account & program data — enrolment details, the program you join, attendance, progress, submissions and other materials you provide during delivery.
• Transaction & billing data — amounts, currency, invoices, payment status and partial card details (for example card type and last four digits) provided by our payment providers. We do not store full card numbers; card data is handled by our payment providers.
• Communications & session data — messages, emails, support requests, and recordings, transcripts and AI-generated summaries of calls and sessions (see Section 5).
• Assessment data — your responses to our diagnostic assessments and quizzes.
• Technical & usage data — IP address, device and browser type, pages viewed, referring URLs and similar analytics data collected via cookies and similar technologies (see Section 6).
• Marketing data — your preferences for receiving communications and your interactions with our emails and content.

3 How we collect personal data

• Directly from you — when you complete an opt-in or lead-magnet form, take an assessment, book or attend a call, enrol in a program, message us, or otherwise communicate with us.
• Automatically — through cookies and similar technologies when you use our websites and funnels.
• From third parties — from our service providers (for example booking, scheduling, payment and communications platforms) and from publicly available professional sources such as your public social or professional profile.

4 How & why we use personal data

We use personal data to:

• respond to enquiries, assess fit, and schedule and conduct qualification and training sessions;
• provide, deliver, administer and improve our programs and materials;
• process payments, issue invoices and maintain financial and tax records;
• communicate with you about your account, your program and service updates;
• send marketing communications where permitted (see Section 7);
• operate, secure, analyse and improve our websites, funnels and assessments;
• comply with legal, regulatory, accounting and tax obligations; and
• establish, exercise or defend legal claims, and prevent fraud and misuse.

Legal bases

Under the PDPA, we rely on your consent, deemed consent, or other lawful bases such as legitimate interests, in each case as permitted by the PDPA.

Where the GDPR or UK GDPR applies, we rely on one or more of: your consent; performance of a contract with you (or steps at your request before entering one); our legitimate interests (such as operating, securing and growing our business, and direct marketing to existing clients), balanced against your rights; and compliance with a legal obligation. Where we process data under PIPEDA, Quebec Law 25 or other applicable laws, we rely on your consent or another lawful basis recognised by that law.

5 Session recording & AI summaries

We may record qualification calls, training sessions and meetings (audio and/or video) and may generate transcripts and AI-assisted notes and summaries, using providers such as Fireflies and Read AI, together with our meeting platforms. We use recordings and summaries to deliver and improve our programs, for quality and training, for our records, and to follow up with you.

Where required by law, we will tell you at the start of a call that it is being recorded and proceed only on the lawful basis that applies (for example your consent). You may ask us not to record; in some cases this may limit how we can deliver a session.

6 Cookies & similar technologies

Our websites and funnels are hosted on a third-party platform and use cookies and similar technologies. We use:

• Strictly necessary cookies — required for the site, forms, booking and security to function.
• Functional and analytics cookies — to remember preferences and understand how our pages are used so we can improve them.

We do not run third-party advertising, retargeting or cross-site tracking pixels (such as advertising network pixels), and we do not sell personal data. Where the law requires consent for non-essential cookies (for example in the EEA and UK), we use them only on that basis, and you can control non-essential cookies through your browser settings. Disabling some cookies may affect how the site works.

7 Marketing communications

With your consent, or where otherwise permitted (for example to our existing clients about similar services), we may send you marketing emails and messages. You can opt out at any time using the unsubscribe link in our emails or by contacting us at the address in Section 17. Opting out of marketing does not stop service or transactional messages relating to your account or program.

8 Disclosure & service providers

We do not sell your personal data. We share it only as needed with the categories of recipients below, who are required to protect it and use it only for the purposes we specify:

Our service providers may change from time to time; this table describes the categories and main providers we currently use.

9 International transfers

We are based in Singapore and our service providers operate in various countries, so your personal data may be transferred to, stored in, and processed in jurisdictions other than your own, including outside the EEA, the UK, Australia, Canada and Quebec. Those jurisdictions may not provide the same level of protection as your home jurisdiction.

When we transfer personal data internationally, we take steps required by applicable law to protect it — which may include transferring to countries recognised as providing adequate protection, using the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Agreement (or Addendum), ensuring a comparable standard of protection under the PDPA, and, for personal information of Quebec residents, conducting the assessments required by Law 25 before transfer. You may contact us for more information about these safeguards.

10 Data retention

We keep personal data only for as long as necessary for the purposes set out in this policy, including to deliver our programs, maintain our relationship with you, and meet legal, accounting and tax obligations. Financial and transaction records are generally retained for the period required by applicable law (commonly around five years). When data is no longer needed, we delete, anonymise or securely dispose of it. We may retain limited records where necessary to establish, exercise or defend legal claims.

11 Your privacy rights

Subject to the law that applies to you, you may have rights to access, correct, update, port or delete your personal data, to withdraw consent, and to object to or restrict certain processing. To exercise any right, contact us at the address in Section 17. We may need to verify your identity, and we will respond within the time required by applicable law.

Singapore (PDPA)

You may request access to, and correction of, personal data we hold, and you may withdraw consent to our use of your personal data (which may affect our ability to provide services). You may complain to the Personal Data Protection Commission (PDPC).

EEA & United Kingdom (GDPR / UK GDPR)

You have the rights of access, rectification, erasure, restriction, portability and objection (including to direct marketing and to processing based on legitimate interests), and the right not to be subject to solely automated decisions with legal or similarly significant effects. Where we rely on consent, you may withdraw it at any time. You may lodge a complaint with your local supervisory authority or, in the UK, the Information Commissioner’s Office (ICO).

Australia (Privacy Act 1988 / APPs)

You may request access to and correction of your personal information, and complain about how we handle it. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC).

Canada (PIPEDA) & Quebec (Law 25)

You may request access to and correction of your personal information and withdraw consent, subject to legal and contractual limits. You may complain to the Office of the Privacy Commissioner of Canada. If you are a Quebec resident, you also have rights under Law 25 — including data portability, information about any automated decision-making, and information about disclosures and transfers outside Quebec — and may complain to the Commission d’accès à l’information du Québec (CAI).

United States (California & other states)

If you are a California resident, the CCPA/CPRA gives you rights to know, access, delete and correct personal information, to opt out of the “sale” or “sharing” of personal information, and to limit the use of sensitive personal information, with no discrimination for exercising these rights. We do not sell or share personal information as those terms are defined under California law. Residents of other US states with privacy laws (for example Virginia, Colorado, Connecticut and others) may have similar rights, which we honour where they apply.

Other jurisdictions

If you are located elsewhere, you may have additional rights under your local law. Contact us and we will respond in accordance with applicable law.

12 Data security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, use, disclosure, loss or alteration, including access controls and use of reputable service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach occurs that is likely to result in significant harm or meets a notification threshold under applicable law, we will notify affected individuals and the relevant authorities as required.

13 Children

Our services are intended for individuals aged 18 or over and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will delete it.

14 Third-party links & platforms

Our sites, funnels and communications may link to or rely on third-party platforms (for example social, scheduling, payment and meeting services) that have their own privacy practices. We are not responsible for those third parties, and we encourage you to review their privacy notices.

15 Changes to this policy

We may update this policy from time to time. The “Last updated” date shows when it last changed. Material changes will be notified by appropriate means. Your continued interaction with us after an update constitutes acceptance of the revised policy, to the extent permitted by law.

16 Governing law

This policy is governed by the laws of the Republic of Singapore, without prejudice to any mandatory data-protection rights you have under the laws of your country of residence.

17 Contact & complaints

To exercise your rights, ask a question, or make a privacy complaint, contact our Data Protection Officer: