Privacy Policy

1. Introduction

MindMotion Co Pte. Ltd. (UEN 202548726K), located at 29 Media Circle, #08-01 Alice@Mediapolis, Singapore 138565 ("MindMotion Co", "we", "us"), respects your privacy and is committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA") and subsidiary legislation thereunder.

This Privacy Policy explains what personal data we collect through mindmotionco.life, our consultation and delivery engagements, vision and robotics programmes, and related communications. It describes how we use, disclose, retain and safeguard that data, and sets out your rights as a data subject in Singapore.

By using our website, submitting our contact form, enrolling in programmes or engaging our services, you acknowledge that you have read this policy. Where consent is required under the PDPA, we will obtain it through clear, affirmative means — contact form consent checkboxes are never pre-selected.

2. Data controller

MindMotion Co Pte. Ltd. is the organisation responsible for personal data described in this policy. For privacy-specific enquiries, data access requests or correction requests, contact our privacy team at [email protected] or write to the registered address above, attention: Data Protection Officer.

3. Personal data we collect

3.1 Website and marketing interactions

When you visit mindmotionco.life, we may collect technical data including IP address, browser type, device identifiers, referring URLs, pages viewed and timestamps. If you accept analytics cookies via our cookie banner, aggregated usage statistics help us improve site performance. You may reject non-essential cookies without losing access to site content.

3.2 Contact and consultation enquiries

When you submit our contact form, we collect the information you provide: name, email address, company, phone number, inquiry type and message content. We also record submission timestamps and may log anti-abuse signals. Our form includes a honeypot field ignored by legitimate users; submissions that populate it are discarded without processing.

3.3 Programme enrolment and service delivery

Enrolment in MMC programmes or contracted services may require additional data: job title, engineering credentials, billing contacts, procurement identifiers and technical environment details. Delivery of vision and robotics systems may involve operational data, sensor feeds and annotated imagery — such processing is governed by project-specific agreements and lawful basis documentation.

3.4 Biometric and visual data in deployments

Where our computer vision or digital human pipelines process facial imagery, gait data or other identifiers that may constitute personal data or sensitive categories under applicable guidance, we require explicit purpose documentation, consent or other lawful basis, and technical controls including access restriction and retention limits. We do not use client deployment imagery for unrelated marketing without written permission.

4. Purposes of collection and use

We collect and use personal data for purposes including:

• Responding to enquiries and scheduling motion consultations at our Mediapolis studio or remotely;
• Delivering programmes (MMC-101 through MMC-601), workshops, sandboxes and engineering sprints;
• Provisioning robotics and vision systems, including integration support and cutover;
• Compliance with PDPA obligations, contractual duties and reasonable internal governance;
• Website security, fraud prevention and service improvement where permitted by consent or legitimate interests;
• Sending service-related notices — not unsolicited mass marketing without consent.

We do not sell personal data. We do not use your contact details to promote unrelated marketing agency, web design or IT outsourcing services because those are outside our business scope.

5. Legal basis and consent

Under the PDPA, we rely on consent, contractual necessity, legal obligation and legitimate interests as appropriate to each processing activity. Consent must be freely given and may be withdrawn by contacting [email protected], subject to legal or contractual limits on retrospective withdrawal.

Contact form submission requires explicit PDPA consent via checkbox. Programme participants and service clients receive purpose-specific notices where additional sensitive processing arises.

6. Disclosure to third parties

We may disclose personal data to:

• Cloud hosting and infrastructure providers operating in Singapore or the Asia-Pacific region, under data processing terms;
• Analytics vendors only where you have accepted analytics cookies or we have another valid basis;
• Professional advisers bound by confidentiality (legal, accounting, insurance);
• Regulatory or law enforcement authorities when required by Singapore law.

Cross-border transfers, where they occur, are conducted with PDPA-compliant safeguards such as contractual clauses and adequacy assessments.

7. Retention

We retain personal data only as long as necessary for the purposes collected, including legal, accounting and dispute resolution requirements. Contact enquiries are typically retained for twenty-four months unless an active engagement supersedes that period. Cookie preferences are stored locally for six months. Deployment logs and model training artefacts follow project-specific retention schedules documented in governance frameworks.

8. Security measures

We implement administrative, technical and physical safeguards appropriate to the sensitivity of data processed — including access controls, encryption in transit where supported, staff confidentiality training and incident response procedures. No method of transmission over the Internet is completely secure; we encourage strong credentials and prompt reporting of suspected compromise.

9. Your rights under the PDPA

Subject to exceptions in the PDPA, you may:

• Request access to personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Withdraw consent for processing that relies on consent;
• Enquire about how your data has been collected and used over the past year.

Submit requests to [email protected]. We respond within reasonable periods prescribed by law. We may charge a fee for manifestly unfounded or excessive requests where permitted.

10. Cookies and similar technologies

Essential cookies support site functionality. Optional analytics and marketing cookies load only per your cookie banner selection. See our Cookie Policy for category definitions, durations, vendors and opt-out instructions.

11. Children

Our services target business and professional audiences. We do not knowingly collect personal data from children under thirteen without parental or guardian involvement appropriate to the context.

12. Overseas recipients

Some infrastructure and analytics vendors may process data outside Singapore. Where we transfer personal data overseas, we implement PDPA-compliant safeguards — including contractual clauses requiring comparable protection, transfer impact assessments and limitations on onward disclosure. You may request details of overseas recipients relevant to your enquiry by contacting [email protected].

13. Do Not Call and communication preferences

Where Singapore Do Not Call registry rules apply to telemarketing voice calls or text messages promoting our programmes, we scrub numbers against applicable registries unless an established business relationship exception applies. Email marketing follows unsubscribe requirements described in section 19.

14. Updates to this policy

We may update this Privacy Policy to reflect legal, technical or business changes. Material updates will be posted on this page with a revised "Last updated" date. Continued use after updates constitutes acknowledgement where permitted by law.

15. Contact

Privacy enquiries: [email protected]
General contact: [email protected]
Phone: +65 6301 9284

16. Automated decision-making

Computer vision and robotics systems we deploy may inform automated decisions in client environments — for example sorting defective parts or triggering robot stops. MindMotion Co documents model limitations and recommends human oversight checkpoints where decisions significantly affect individuals. We do not deploy surreptitious biometric identification for marketing profiling on this website.

17. Data breach notification

We maintain incident response procedures aligned to PDPA breach notification guidance. Where a notifiable breach affecting personal data occurs, we will assess harm, contain exposure, notify affected individuals and the Personal Data Protection Commission where required, and document remedial actions. Clients with active service agreements receive coordination support when breaches involve shared deployment infrastructure.

18. Training and internal access

Employees and contractors with access to personal data receive confidentiality obligations and role-based access controls. Engineering staff access production telemetry only through authenticated channels with audit logging. Periodic access reviews occur at least annually or when team composition changes materially.

19. Marketing communications

We may send service announcements, programme updates or event invitations to contacts with prior business relationship or explicit opt-in. Every marketing email includes an unsubscribe mechanism. We do not purchase third-party mailing lists for unrelated product promotion because our business scope is motion AI engineering, not mass-market advertising services.

20. Records of processing

We maintain internal records describing major processing activities — including contact management, programme administration, service delivery telemetry and website analytics — to support accountability under the PDPA. Summaries are available to enterprise clients during due diligence where non-disclosure agreements are in place.

21. Complaints to the PDPC

If you believe we have not handled your personal data appropriately, contact us first at [email protected] so we can investigate. You may also lodge a complaint with the Personal Data Protection Commission of Singapore if the matter remains unresolved, subject to commission procedures in force during 2026.

Last updated: 9 July 2026