Privacy Policy

Last updated: 2 August 2026

1. Introduction

HI LABS PTE. LTD. (UEN 202633920K) ("Hi Labs", "we", "us" or "our") is a private limited company incorporated in Singapore providing software development and information technology consultancy services. We are committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore (the "PDPA").

This Privacy Policy explains how we collect, use, disclose, protect and retain personal data in connection with our website at hilabsstudio.ai (the "Site") and the services we provide. "Personal data" has the meaning given to it in the PDPA — data, whether true or not, about an individual who can be identified from that data or from that data together with other information to which we have or are likely to have access.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Contact and identity details — name, business name, role or job title, email address, phone number and address;
• Account and billing data — account identifiers, billing contact details and transaction records relating to the services we provide;
• Project and support information — communications, requirements, files and technical information you share with us in the course of an engagement or a support request;
• Website and technical data — IP address, browser type, device information, pages visited and interactions with the Site, collected through cookies and similar technologies as described in our Cookie Policy.

We do not store complete credit or debit card numbers. Payments are processed by reputable third-party payment providers under their own security standards.

3. How we collect personal data

We collect personal data directly from you (for example, when you contact us, request a quote, or engage our services), automatically through your use of the Site, and, where appropriate, from third parties such as your organisation, business partners or publicly available sources.

4. Purposes for which we use personal data

We collect, use and disclose personal data with your consent, or where consent is deemed to have been given, or where otherwise permitted or required under the PDPA and other applicable laws, for the following purposes:

• providing, operating and improving our services and the Site;
• responding to enquiries and preparing quotes and proposals;
• managing engagements, projects and ongoing client relationships;
• processing payments and maintaining accounting and business records;
• maintaining the security and integrity of our systems and preventing fraud and misuse;
• complying with our legal and regulatory obligations; and
• with your consent, sending you updates, newsletters or marketing communications relevant to you (you may opt out at any time).

5. Disclosure of personal data

We do not sell personal data. We may disclose personal data to:

• our service providers and data intermediaries who process data on our behalf (for example hosting, analytics, communications and payment providers), under obligations of confidentiality and security consistent with the PDPA;
• third-party artificial intelligence service providers, where relevant to the services we deliver — we take reasonable steps to restrict the use of your data for training publicly available models;
• professional advisers such as lawyers, accountants and auditors, where reasonably necessary; and
• regulators, law enforcement or other authorities where disclosure is required or authorised by law.

6. Overseas transfers

Some of our service providers may store or process personal data outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure that the recipient is bound by legally enforceable obligations to provide the transferred data a standard of protection comparable to that under the PDPA, in accordance with the transfer limitation obligation under the PDPA.

7. Marketing, Do Not Call and spam

We will only send you marketing communications where you have consented, or where otherwise permitted by law, and every marketing message we send will include a means to unsubscribe. We comply with the Do Not Call provisions of the PDPA in relation to telemarketing messages and calls to Singapore telephone numbers, and with the Spam Control Act 2007 in relation to commercial electronic messages. To opt out at any time, use the unsubscribe link in our messages or contact us at hello@hilabsstudio.ai.

8. Cookies and website analytics

The Site uses cookies and similar technologies for functionality, preferences, analytics and, with your consent, marketing. For details, including how to manage your preferences, please see our Cookie Policy.

9. Protection of personal data

We implement reasonable security arrangements to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. These measures include encryption in transit and at rest where appropriate, multi-factor authentication, access controls on a need-to-know basis, and periodic review of our safeguards.

10. Retention of personal data

We retain personal data only for as long as it is necessary for the purposes for which it was collected, or as required for legal or business purposes. When personal data is no longer required, we take reasonable steps to securely destroy it or anonymise it.

11. Access and correction

Subject to the exceptions in the PDPA, you may request access to personal data we hold about you and information about how it has been used or disclosed within the preceding year, and you may request the correction of any error or omission in your personal data. We may charge a reasonable fee for access requests as permitted by the PDPA. We will respond to requests as soon as reasonably possible; if we are unable to respond within thirty (30) days, we will inform you in writing of the time by which we will respond.

12. Withdrawal of consent

You may withdraw your consent to our collection, use or disclosure of your personal data at any time by giving us reasonable notice at Legal@hilabsstudio.ai. Upon withdrawal, we will inform you of the likely consequences (for example, that we may no longer be able to provide certain services to you), and we will cease the relevant collection, use or disclosure unless it is otherwise permitted or required by law.

13. Data breach notification

We maintain processes to assess and respond to data breaches. Where a data breach is notifiable under the PDPA — that is, it results in, or is likely to result in, significant harm to affected individuals, or is of a significant scale — we will notify the Personal Data Protection Commission ("PDPC") and, where required, affected individuals, in accordance with the timelines prescribed under the PDPA.

14. Third-party websites

The Site may contain links to websites operated by third parties. This Privacy Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.

15. Contacting us and complaints

If you have any questions, requests or complaints regarding this Privacy Policy or our handling of your personal data, please contact our Data Protection Officer:

• Data Protection Officer: Legal@hilabsstudio.ai
• General enquiries: hello@hilabsstudio.ai
• Post: HI LABS PTE. LTD., 51 Lorong 21 Geylang, #04-03 Space 21, Singapore 388466

We will investigate and endeavour to resolve any complaint within a reasonable time. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission, Singapore (www.pdpc.gov.sg).

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The updated policy will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically.