How we handle your personal data.

Last updated: 19 October 2026

Core Vault Pte Ltd (UEN 202631291R), formerly AIO Data Protection, ("we", "us") is committed to handling personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA). This notice explains what we collect through this website and our enquiry channels, why, and what you can ask of us.

What we collect

When you use our contact form, email us or call us, we collect what you give us:

• your name and email address
• your company name, if you provide it
• your phone number, if you call or include it
• the content of your message

Please don't send us sensitive personal data (such as NRIC numbers or health information) through the contact form. If we need it for an engagement, we'll arrange a secure channel.

We also collect basic, aggregated website statistics (such as page views and approximate country) through Cloudflare Web Analytics. It doesn't use cookies and doesn't identify you personally.

Why we use it

• to reply to your enquiry and discuss the services you asked about
• to prepare a proposal or quotation, if you ask for one
• to keep a record of our correspondence

We won't use your details for marketing unless you've agreed to it, and we don't sell personal data.

Consent

By submitting the contact form or contacting us, you consent to us collecting and using your personal data for the purposes above. You can withdraw your consent at any time by contacting our Data Protection Officer. If you do, we may no longer be able to respond to or continue with your enquiry.

Who we share it with

We share personal data only with service providers that help us run this website and our communications, and only as needed for that purpose:

• Web3Forms, which delivers contact form submissions to our inbox
• Zoho Mail and Google, which host our email
• Cloudflare, which hosts this website

Some of these providers may store or process data outside Singapore. Where that happens, we take reasonable steps to make sure your data receives a standard of protection comparable to the PDPA.

How long we keep it

We keep enquiry records only as long as needed to deal with your enquiry and for our legitimate business and legal purposes. If you don't become a client, we delete or anonymise enquiry records within 24 months of our last contact.

How we protect it

We use reasonable security arrangements to protect personal data, including access controls on our email and accounts, multi-factor authentication where available, and encrypted (HTTPS) transmission from this website.

Access and correction

You can ask us for a copy of the personal data we hold about you, how it has been used or disclosed in the past year, or to correct it. We'll respond as soon as reasonably possible, and generally within 30 days. We may charge a reasonable fee for access requests, and we'll tell you beforehand if so.

Contact our Data Protection Officer

For any question, request or complaint about how we handle personal data:

Changes to this notice

We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated.