Privacy

groundset.tech is owned and operated by BP Optima Pte. Ltd. (UEN: 202544773H), a Singapore entity registered at 32 Pekin Street, #05-01, Singapore 048762. For personal data collected through this website, BP Optima Pte. Ltd. acts as the Data Controller (or "responsible organisation" under applicable data protection statutes).

This Privacy Policy applies strictly to data collected through this website (groundset.tech).

• Website scope: governs web visitors, sales leads, walkthrough requests and technical server logs.
• GroundSet™ enterprise product: GroundSet™ deployments run isolated inside each enterprise client's private cloud or on-premise environment. Product telemetry, operational data and enterprise workloads are governed separately under individual customer Master Services Agreements (MSA) and Data Processing Addenda (DPA), under which BPOptima acts as a Data Processor.

We follow strict data minimisation principles and collect only what is strictly necessary to communicate with you and secure our digital infrastructure:

• Information you provide voluntarily: when you submit a walkthrough request, we collect your work email address, your phone number, and the judgement or decision infrastructure you describe. With it we record whether you asked for the security annex and which page you sent it from.
• Repeat-request check: to stop repeated or automated submissions, we store a keyed hash of the network address a request came from. The address itself is not stored.
• Technical and system server logs: IP address, browser type and user agent, referring URL, time stamps and requested pages, automatically logged by our hosting providers for operational telemetry and web security.
• Cookies and tracking technology: this site sets zero cookies, runs no analytics scripts, and carries no third-party tracking pixels or fingerprinting technologies.

Under global data privacy laws (including EU/UK GDPR, Singapore PDPA and India DPDP Act), we process your data under the following legal frameworks:

• Pre-contractual necessity: processing walkthrough requests and enquiries at your specific request, prior to entering into a commercial agreement.
• Legitimate business interests: maintaining website security, preventing unauthorised system access, debugging, and ensuring operational reliability.
• Legal and regulatory obligations: retaining necessary records to meet statutory obligations, audit requirements or lawful law enforcement requests.

We do not sell, rent, monetise or share personal data with third parties for marketing, profiling or cross-context behavioural advertising. We disclose personal data only to vetted sub-processors bound by strict confidentiality and data protection obligations:

• Infrastructure and email providers: cloud hosting and secure business email service providers acting on our behalf to deliver system functionality.
• Legal and regulatory disclosures: public authorities, judicial bodies or law enforcement entities, only where strictly mandated by binding legal process or statutory compulsion.

As a Singapore-based entity engaging with global institutions, personal data collected through this site may be transferred to or accessed from servers outside your country of residence.

Where international transfers occur (for example across Singapore, the EEA, the UK, the US or India), we implement recognised legal transfer mechanisms - such as the European Commission's Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements, and the Singapore PDPA Transfer Limitation Obligation - to ensure your data receives an equivalent standard of protection.

We implement industry-standard administrative, physical and technical controls to safeguard personal data against unauthorised access, loss, alteration or disclosure. These measures include strict access controls, transport-layer encryption (TLS/HTTPS), routine security patches, and isolated data storage environment protocols.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy:

• Walkthrough and commercial leads: retained while active business communications continue with your institution, and permanently purged 12 months after communications cease, unless a commercial agreement is executed.
• Server logs: retained on a rolling schedule for up to 90 days for security audit and intrusion-detection purposes, after which they are automatically overwritten or deleted.

Depending on your jurisdiction (including under Singapore PDPA, EU/UK GDPR, US CCPA/CPRA and India DPDP Act), you have the following rights regarding your personal data:

• Access and portability: request a copy of the personal data we hold about you in a structured, machine-readable format.
• Correction and rectification: request correction of inaccurate, incomplete or outdated personal data.
• Erasure ("right to be forgotten"): request permanent deletion of your personal data where retention is no longer legally justified.
• Restriction and objection: object to processing based on legitimate interests, or request restrictions on processing.
• Withdrawal of consent: withdraw previously granted consent at any time, without affecting prior lawful processing.
• Regulatory complaints: file a complaint with your local supervisory authority (for example the Singapore PDPC, European data protection authorities or the UK ICO) if you believe our processing violates applicable law.

To exercise any of these rights, contact our legal team at legal@bpoptima.com.

This website and our services are strictly B2B enterprise offerings intended for working professionals and institutional representatives. We do not knowingly collect or solicit personal data from individuals under the age of 18. If we learn that we have inadvertently collected data from a minor, we will delete it immediately.

We may update this Privacy Policy periodically to reflect technological changes, regulatory updates or operational adjustments. Any updates will be posted directly to this page, with a new "Last updated" date at the top of the policy.

If you have questions, concerns or requests regarding this Privacy Policy or our privacy practices, please reach out to our legal team or Data Protection Officer:

• Email: legal@bpoptima.com
• Postal address: Data Protection Officer, BP Optima Pte. Ltd., 32 Pekin Street, #05-01, Singapore 048762