Privacy notice
in plain English, not legalese.

Who we are

twentyeighteleven (28/11) is an AI-implementation consultancy registered in Singapore. For any privacy query, including a request to access, correct or delete your data, email jordan@twentyeighteleven.sg. We do not currently have a named Data Protection Officer; privacy requests are handled directly by the founder.

What we collect

We collect two kinds of data, and only these.

1. What you send us through the contact form. When you submit the contact form, we collect:

• Your name
• Your email address
• Your company (optional)
• The offer or service you are interested in
• Your message

Alongside that, the form records some technical context to help us understand where enquiries come from: the page you submitted from, the referring site, any campaign tracking parameters (UTM source, medium, campaign, content and term) in the link you arrived through, your browser's user-agent string, and the time of submission. We do not ask for, and the form does not collect, any special categories of data (such as identity-card numbers or financial details).

2. Anonymous usage data via analytics. On the live production site we use Google Analytics 4 (GA4) to understand how the site is used: which pages are viewed, the type of device, and an approximate location derived from your IP address. This is set via cookies and is not tied to your identity.

Why we collect it, and our lawful basis

We use your data only to:

• respond to your enquiry and, where it leads to that, provide our services;
• keep reasonable business records of who we have spoken with; and
• understand how the site performs so we can improve it.

Under the PDPA, we rely on your consent (given when you choose to submit the form) and on our legitimate interests in running and improving the practice. We do not use your data for automated decision-making, and we do not send marketing emails you did not ask for.

Who we share it with

We do not sell your personal data, ever. To run the website and respond to you, your data passes through a small number of service providers acting as our data processors:

• Resend: delivers the email notification of your enquiry to us.
• Google Analytics: processes the anonymous usage data described above.
• Internal notification channels: depending on configuration, a copy of your enquiry may be routed to our internal Slack workspace and to our own lead-intake system so we can follow up. These are private to us.

We share data with these processors only to the extent needed to run those functions, and not for their own purposes.

Cookies

The only cookies we set are GA4 analytics cookies, and only on the production site. You can refuse or delete them through your browser settings, or opt out of Google Analytics across all sites with the Google Analytics opt-out browser add-on. The site works fine with analytics blocked.

How long we keep it

We keep enquiry data only as long as we need it to respond to you and to maintain reasonable records of our business dealings. Analytics data is retained according to Google's standard retention settings. When data is no longer needed, we delete it. You can ask us to delete your enquiry data sooner (see below).

Your rights under the PDPA

You have the right to:

• Access the personal data we hold about you;
• Correct any data that is inaccurate or out of date; and
• Withdraw consent at any time, after which we will stop using your data and delete it unless we are legally required to keep it.

To exercise any of these, email jordan@twentyeighteleven.sg and we will respond within a reasonable time. If you are not satisfied with how we have handled your data, you can contact Singapore's Personal Data Protection Commission (PDPC).

Changes to this notice

If our data practices change, we will update this page. Material changes will be reflected in the date below.

Last updated: 30 June 2026