What we do with what you send us.

Xen IV Technologies is a remote IT consultancy and development company operating across Asia, primarily from Singapore and Thailand. This policy covers xeniv.com and the enquiry form on it.

We are the data controller for the information described below. Where we handle data inside a client’s own systems during an engagement, the client is the controller and we act as a processor under the terms of that engagement.

From the enquiry form: your name, the company you give, your email address, the service and budget range you select, and the project description you write.

Automatically with that submission: the date and time, your IP address, and your browser’s user-agent string. These are collected to rate-limit the form and to distinguish real enquiries from automated spam.

From ordinary web traffic: our server keeps standard request logs. We do not run advertising or analytics scripts, we set no tracking cookies, and we do not build profiles of visitors.

Solely to read, assess and reply to your enquiry, and to keep a record of enquiries we have answered. We do not use enquiry details for marketing and we will not add you to a mailing list.

Where the PDPA applies, we rely on the consent you give by submitting the form. Where the GDPR applies, we rely on our legitimate interest in responding to a business enquiry, and on taking steps at your request before entering a contract.

Enquiries that do not lead to an engagement are deleted within 24 months.

Where an enquiry becomes an engagement, the correspondence forms part of the project record and is retained for five years after the engagement ends, in line with the record-keeping obligations that apply to us in Singapore.

Server request logs are rotated and discarded within 90 days.

Enquiry email is delivered and stored through Google Workspace, which processes it on our behalf under Google’s data processing terms.

The site runs on infrastructure we manage ourselves at a hosting provider; that provider has custody of the servers but no access to enquiry content beyond what is inherent in hosting.

We do not sell, rent, or share your details with anyone else. We will disclose information only where we are legally required to, and we will tell you if that happens unless we are prohibited from doing so.

Because we work across Asia and use Google Workspace, your information may be processed outside the country you sent it from. Where we transfer personal data internationally we rely on the contractual protections in our processors’ terms, and we take reasonable steps to ensure a comparable standard of protection.

We set no cookies. If you use the theme switch, your preference is stored in your browser’s local storage on your own device; it is never transmitted to us and is cleared when you clear site data.

You may ask us what personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, and withdraw consent to further contact. Where the GDPR applies you may also object to processing, request a portable copy, and ask us to restrict processing.

Send any of these requests through the contact form and we will respond within 30 days. There is no charge. If you are not satisfied with our response you may complain to the Personal Data Protection Commission in Singapore, the Personal Data Protection Committee in Thailand, or your local supervisory authority.

The site is served over TLS and form submissions are encrypted in transit. Access to enquiry mail is limited to the people who answer it, and those accounts require two-factor authentication.

No system is perfectly secure. If we become aware of a breach affecting your information we will notify you and the relevant regulator as required.

If we change this policy we will update the date at the top of this page. Material changes affecting how we use information already collected will be notified to anyone with an open enquiry.

Questions about this policy, or any request about your data, should be sent through the contact form. We do not publish an email address, but every enquiry reaches the same people.