Privacy Policy

Last updated 28 September 2026

This policy describes how Xanadu Enterprises SG Pte. Ltd. ("Xanadu", "we", "us") handles personal data in connection with the website at xanaduenterprises.com (the "Site") and when you contact us. We are a private company limited by shares, incorporated in Singapore (UEN 202631367W), and we handle personal data in accordance with the Singapore Personal Data Protection Act 2012 ("PDPA").

What the Site collects

The Site is a static informational page. It does not use cookies, does not contain contact forms, and does not run analytics or advertising trackers. We do not collect personal data through the Site itself.

Like any website, our hosting provider may record standard server logs (such as IP address, browser type, and pages requested) for security and operational purposes. We do not use these logs to identify individuals.

Third-party resources

The Site loads typefaces from Google Fonts. When your browser requests those files, Google receives your IP address and standard request headers. This is governed by Google's privacy policy. We do not receive any information from Google as a result of this.

The Site links to third-party websites, including those of clients we have worked with. Those sites have their own privacy practices, which we do not control.

When you contact us

If you email us, we will receive your email address, the contents of your message, and any information you choose to include. We use this to respond to you, evaluate whether we can help with your problem, and, if we go on to work together, to carry out that engagement. We retain correspondence for as long as reasonably necessary for those purposes and for our legal and record-keeping obligations.

We do not sell personal data, and we do not share it with third parties except with service providers that help us operate (such as email hosting), or where required by law.

Client engagements

Where we build or operate systems for a client, we may process personal data on that client's behalf. In those cases the client is the data controller, our handling of the data is governed by the agreement we have with that client, and this policy does not apply to that data.

International transfers

We are based in Singapore. Email and hosting providers we use may store data in other jurisdictions. Where we transfer personal data out of Singapore, we take reasonable steps to ensure it receives a standard of protection comparable to that under the PDPA.

Your rights

Under the PDPA you may request access to the personal data we hold about you, request that it be corrected, or withdraw consent to our continued use of it. To make a request, email us at the address below. We will respond within a reasonable time and may need to verify your identity first.

Changes

We may update this policy from time to time. The "last updated" date at the top of the page reflects the most recent revision.

Contact