DRILLX

Legal

Privacy Notice

Effective 8 September 2026 · Version 1.0 · Culturetek PTE LTD, Singapore
Not legal advice. This document was drafted to a common commercial standard and reflects how DrillX actually operates. It has not been reviewed by a qualified lawyer. Before you rely on it commercially, have Singapore counsel review it against the PDPA and against the contracts you intend to sign.

Who we are

DrillX is a product of Culturetek PTE LTD, a company incorporated in Singapore. Culturetek is the data controller for the information described here. You can reach us at info@drillx.app.

The short version

What we collect

CategoryWhat it is and why
Enquiry dataIf you email us, we hold your name, email address, company and the content of your message so we can reply and keep a record of the discussion.
Local application dataThe demonstration app stores your name, role, tour records, connection timings, notes and photographs in your browser's local storage on your own device. It is not transmitted to us.
Language preferenceYour chosen interface language is stored locally so the site opens in it next time. It is not linked to you.
Server logsOur hosting provider records IP address, user agent, requested URL and timestamp for security and abuse prevention. Retained for a short period by the provider.
Client tenant dataWhere a client contracts with us to host a deployment, we process operational and personnel data on that client's instruction as a data intermediary. The client remains the controller.

What we do not collect

We do not run advertising networks, social media pixels, session recording, fingerprinting or cross-site tracking. The site's content security policy blocks third-party scripts other than the font and library sources listed in it.

Legal bases

Under Singapore's Personal Data Protection Act we rely on your consent for enquiries and on legitimate interests for security logging. Where the GDPR applies, we rely on Article 6(1)(b) for pre-contractual steps, 6(1)(f) for security, and 6(1)(a) where consent is given.

Where data is held

The public website is served from a global content delivery network. Client deployments are hosted in the client's own jurisdiction where the contract requires it — this is a design commitment, not an option, because our buyers operate under data residency rules that demand it.

Retention

Enquiry correspondence is kept for as long as the commercial relationship is live and for two years afterwards. Local application data persists on your device until you clear it — the app has a "Clear this tour" control and your browser can clear site data at any time. Client tenant data is retained per the contract and returned or destroyed on termination.

Your rights

You may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or withdraw consent. Write to info@drillx.app and we will respond within 30 days. If you are unsatisfied you may complain to the Personal Data Protection Commission of Singapore, or to your local supervisory authority if the GDPR applies to you.

Sub-processors

ProviderPurpose
NetlifyWebsite hosting and content delivery
Google FontsTypefaces served to your browser
Cloudflare CDNJSPDF and rendering libraries served to your browser

A current sub-processor list for any client deployment is provided as a contractual schedule and we give notice before it changes.

Changes

If we change this notice we will update the version and effective date above. Material changes affecting existing clients are notified in writing.