Privacy policy
Last updated 27 October 2026
This policy explains what personal data Khepri Digital Pte. Ltd. (UEN 201828820C, "Khepri", "we", "us") collects through khepridigital.com, why, who we share it with, and the choices you have. We handle personal data under Singapore's Personal Data Protection Act 2012 ("PDPA"). It sits alongside our cookie policy and terms.
Who to contact
Our Data Protection Officer can be reached at hello@khepridigital.com, or by post at Khepri Digital Pte. Ltd., 18 Sin Ming Lane, #04-12 Midview City, Singapore 573960. Write to us with any question about this policy or your data.
What we collect
When you fill in a form. Depending on the form, we ask for:
- the AI-answer check, strategy-call and quote forms: your website and email, and optionally your name, your monthly ad spend and what you need help with; quote requests also record which plan you asked about;
- the WhatsApp form: your name and company, before WhatsApp opens; what you then write in WhatsApp is between you and us in WhatsApp;
- our campaign landing pages: your name, phone number and website.
When you book a call. If you pick a time on our thank-you page, the booking calendar is run by Calendly. Calendly collects your name, email and answers on our behalf, and we receive them with the booking.
Which ad or link brought you. When you arrive from an ad or a tagged link, we keep the click ID (gclid, fbclid or msclkid), the campaign tags (utm_source and similar) and the page you landed on, for 90 days in your browser. If you then send us a form, they are sent with it, so we can tell which campaigns bring enquiries.
Analytics and advertising. Our site loads Google Tag Manager, which runs Google Analytics, Google Ads, Meta, Microsoft Advertising and Microsoft Clarity. They record which pages you visit and how you use them (Clarity can record clicks, scrolling and mouse movement), and which ads lead to enquiries. You can opt out at any time with the "Opt out of analytics" link at the bottom of every page. For visitors in the European Economic Area, the United Kingdom and Switzerland, Google's tags set no cookies. Details are in the cookie policy.
Technical data. Our host keeps standard server logs (IP address, browser, pages requested and the time) to run the site and keep it secure.
We don't ask for sensitive personal data, and the site is not meant for children.
How we use it
- To reply to your enquiry, arrange the call you asked for, and prepare a proposal or quote.
- To run the AI-answer check you request: we put questions about your type of business to ChatGPT, Google AI Overviews and Perplexity and look at whether your website appears. That uses your website and brand, not your personal details.
- To understand which campaigns and pages bring enquiries, and to improve the site.
- To send you news or marketing only if you have agreed to it; you can stop it at any time.
- To meet legal obligations and protect our rights.
Who we share it with
We don't sell or rent personal data. We share it only with the companies that run parts of our service for us, under their own data protection terms:
| Company | What for |
|---|---|
| Slack | Our team receives form enquiries and booking notices in a private Slack channel |
| Google Workspace | Our email |
| Vercel | Hosts the website |
| Calendly | The booking calendar, if you use it |
| Google, Meta and Microsoft | Analytics and advertising measurement, unless you opt out |
If we use another provider to email us copies of enquiries, it handles them for that purpose only. We may also disclose personal data where the law requires it, or to a buyer of our business if Khepri is sold, under the same protections.
Data outside Singapore
Some of these providers store data outside Singapore, mainly in the United States. Where we transfer personal data overseas, we take steps for it to receive protection comparable to the PDPA, including the providers' contractual data protection commitments.
How long we keep it
We keep enquiry details for as long as we need them to respond and, if we work together, for the length of the engagement and any period the law requires. If an enquiry doesn't lead to work, we delete it within 24 months of our last contact. Campaign tags in your browser expire after 90 days.
Your choices and rights
- Access and correction. You can ask what personal data we hold about you and how we have used it in the past year, and ask us to correct it. We reply within 30 days, or tell you if we need longer. We may charge a reasonable fee for access requests and will tell you the amount first.
- Withdrawing consent. You can withdraw consent to our using your data, or to marketing, at any time by emailing us. We will tell you what that means for any work in progress.
- Cookies. You can opt out of analytics and advertising cookies with the link at the bottom of every page, or block them in your browser settings.
If you are unhappy with how we handled your data, please tell us first. You can also contact the Personal Data Protection Commission at pdpc.gov.sg.
How we protect it
The site runs only over HTTPS, enquiries go to a private channel and inbox that only our team can see, and access to the accounts that hold your data is limited to the people who need it. No system is completely secure; if a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires.
Changes to this policy
We will update this page when our practices change, and show the date of the latest version at the top.