Privacy Policy

1. Who We Are

LOMA Digital Solutions Pte Ltd ("LOMA", "we", "us", "our") is a company incorporated in Singapore. We operate the website at loma.sg and provide AI-powered digital marketing services including eCommerce development, AI assistants, SEO, and web development.

We are committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).

For all privacy-related enquiries, contact us at hello@loma.sg.

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Contact information — name, email address, company name, and message content submitted via our contact form
• Email address — if you subscribe to our newsletter or mailing list
• Technical data — IP address, browser type and version, operating system, referring URLs, pages visited, and time spent on pages (collected automatically via analytics tools)
• Device data — device type, screen resolution, and geographic location derived from IP address
• Cookies and tracking data — see our Cookie Policy for full details

We do not intentionally collect sensitive personal data (such as NRIC numbers, financial information, or health data) through this website.

3. Why We Collect Your Data

We collect and use personal data for the following purposes:

• Responding to enquiries — to reply to messages submitted via our contact form and provide information about our services
• Service delivery — to onboard and manage client relationships where you engage LOMA for services
• Marketing communications — to send newsletters or updates where you have consented to receive them
• Website analytics — to understand how visitors use our website, identify issues, and improve user experience
• Advertising — to measure the effectiveness of our advertising campaigns and to serve relevant ads on third-party platforms (Google, Meta)
• Legal compliance — to comply with applicable laws and regulations in Singapore

We will only use your personal data for the purposes for which it was collected, or for directly related purposes, unless we have obtained your consent.

4. How We Share Your Data

We do not sell your personal data. We may share data with the following third parties in connection with operating our website and delivering our services:

• Amazon Web Services (AWS SES) — we use AWS Simple Email Service to send and receive emails, including contact form submissions. AWS processes email data on our behalf.
• Google LLC — we use Google Analytics 4 (GA4) to collect website usage data. Google may process this data in the United States. See Google's Privacy Policy.
• Meta Platforms, Inc. — we use the Meta Pixel to measure ad performance and build audiences for advertising. Meta may process this data in the United States. See Meta's Privacy Policy.
• Professional advisers — lawyers, accountants, or auditors where necessary for legal or compliance purposes
• Regulatory authorities — where required by law, court order, or regulatory requirement

Where data is transferred outside Singapore, we take reasonable steps to ensure it is protected to a standard comparable to the PDPA.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions — retained for up to 3 years from the date of submission
• Newsletter subscribers — retained until you unsubscribe or request deletion
• Analytics data — retained for up to 26 months in Google Analytics (per GA4 default settings)
• Client data (service engagements) — retained for 7 years in accordance with Singapore business record-keeping requirements

When personal data is no longer needed, we will securely delete or anonymise it.

6. Your Rights Under the PDPA

Under Singapore's PDPA, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct any inaccurate or incomplete personal data
• Withdrawal of consent — withdraw consent for us to collect, use, or disclose your personal data (note this may affect our ability to provide services)
• Data portability — request your data in a machine-readable format where applicable

To exercise any of these rights, email us at hello@loma.sg. We will respond within 30 days of receiving your request.

If you believe we have not handled your personal data appropriately, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

7. Cookies

Our website uses cookies and similar tracking technologies. For detailed information on the specific cookies we use, including how to opt out, please see our Cookie Policy.

8. Security

We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS), access controls, and secure cloud hosting.

No method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.