Privacy Policy

1. Who we are

NERVZ PTE. LTD. is a company registered in Singapore that operates an agent desk for computer integrated systems design and related technical services. The company address is 21 Woodlands Close #09-30 Primz Bizhub 737854, Singapore (SG). The desk can be reached by email at agent@nervz.hair and by telephone at +15304602653.

For the purposes of applicable data protection law, NERVZ PTE. LTD. is the organisation responsible for the personal information described in this policy. When we act on behalf of a client and process information inside that client system, the client is usually the controller and we act as a processor under a written agreement. This policy describes our own handling of information as an organisation, including information collected through this website and through direct contact with the desk.

The desk takes privacy seriously because much of our work involves systems that carry operational records. A careful approach to personal data is part of the same discipline that keeps an integrated system readable and trustworthy.

2. Scope of this policy

This policy applies to personal information that we collect through the website nervz.hair, through email and telephone contact, through mandate intake conversations, through contract negotiations and through the ordinary running of the agent desk. It also applies to information we collect at events, during field report evenings and in the course of scheduled relay rounds.

This policy does not apply to information that a client controls inside the client own systems. When we process that information as a processor, the client privacy notice governs the relationship between the client and the individuals whose data is involved, and our obligations are set out in the relevant written agreement. This policy also does not apply to third party websites that we may link to, because those websites maintain their own privacy practices.

3. Information we collect

We collect a limited set of information that is necessary to answer inquiries, evaluate mandates and deliver the services described on this website. The categories below describe the typical content of each category. We do not collect more than we need for the stated purpose, and we avoid collecting sensitive categories unless a specific mandate requires it and an appropriate basis exists.

Contact and identity information

This includes your name, job title, employer, business email address, business telephone number and the country or region in which you work. It also includes any preferences you tell us about, such as a preferred channel for receiving desk notes.

Mandate and correspondence information

This includes the content of messages you send through the contact form, by email or during a call, along with our reply and any notes the desk makes about the conversation. Where a mandate is opened, it also includes the mandate card, relay notes, retainer review records, drill findings and field report observations that relate to you or your organisation.

Technical and usage information

This includes the internet protocol address from which a request reaches our server, the browser type and version, the pages viewed, the time of the request and the referring page. It also includes basic information about the device you use, such as operating system family and screen size, where the server or a hosting provider records it in ordinary access logs.

Business and contract information

This includes company registration details, billing contacts, purchase order references, signed agreements and correspondence about scope. For individuals acting as sole traders or representatives of small organisations, it may also include payment details necessary to invoice for services.

Recruitment or supplier information

Where you approach the desk as a prospective supplier, contractor or collaborator, we may collect a professional profile, references and the commercial terms you propose. We use this information to evaluate fit and to keep an accurate record of the relationship.

4. How information reaches us

Most information reaches the desk in one of five ways. Understanding the route helps explain why we hold the records we do.

First, you provide information directly when you complete the contact form, send an email to agent@nervz.hair or call the desk telephone. Second, we receive information through a client or a colleague who introduces you in the course of a mandate, for example when a project owner shares the names of operators who should join a field report evening. Third, our hosting provider records technical information automatically when a browser requests a page from this website. Fourth, we may receive business information from public registers or from a supplier during ordinary commercial due diligence. Fifth, we sometimes obtain information from a referral partner or from a professional network where you have made your details available for that purpose.

Where we receive information about you from someone else, we take reasonable steps to confirm that the sender had a proper basis for sharing it and to inform you about the source if that is required by law.

5. Why we use personal information

We use personal information for purposes that are directly connected to running the agent desk. The main purposes are set out below.

• Answering inquiries that arrive through the contact form, the email address or the telephone line.
• Evaluating whether a proposed mandate fits the services of NERVZ PTE. LTD. and preparing an accurate mandate card.
• Delivering the six desk services: mandate intake, signal relay rounds, retainer reviews, client liaison hours, escalation drills and field report evenings.
• Maintaining the written records that make an integrated system readable to both sides of a mandate.
• Managing contracts, invoices, purchase orders and ordinary accounting obligations.
• Keeping the website secure, diagnosing faults and understanding which pages are useful to visitors.
• Sending service updates and desk notes to existing clients where the law permits and where you have not opted out.
• Complying with legal, tax, audit and regulatory requirements that apply to a company registered in Singapore.
• Establishing, exercising or defending legal claims where that becomes necessary.

We do not sell personal information, and we do not share it with advertisers for their own commercial purposes. The desk exists to hold an integrated system steady, not to trade in contact lists.

6. Legal bases for processing

Where the General Data Protection Regulation of the European Union applies, we rely on the following legal bases.

We process contact and correspondence information on the basis of legitimate interests in answering inquiries and running a professional services desk, and on the basis of taking steps at your request before entering a contract. We process contract and billing information in order to perform a contract with you or with your organisation. We process website security logs on the basis of legitimate interests in protecting the site and its visitors. We process information for legal compliance where a statute, tax rule or court order requires it. Where we send marketing messages to individuals who are not existing clients, we rely on consent and provide an easy way to withdraw it. Where we process special categories of personal information inside a client mandate, we rely on the written instructions of the client and on an appropriate basis identified in the relevant agreement.

7. Cookies and similar technologies

This website is deliberately light on tracking. We do not use advertising cookies and we do not run a behavioural profiling network across other sites. The site may use a small number of functional cookies where they are necessary for the page to work correctly, for example to remember a basic interface state during a single visit. Our hosting provider may keep ordinary server logs that record technical information for security and reliability purposes.

If we ever introduce a measurement tool that relies on cookies, we will describe it in this section, give you a clear choice where the law requires one and avoid loading the tool before that choice is made. Most browsers allow you to block or delete cookies through their settings. Blocking functional cookies may affect a small part of the interface, but it will not prevent you from reading the public pages of this site.

8. How we share information

We share personal information only where there is a clear reason and a proportionate safeguard. The main situations are the following.

• Within NERVZ PTE. LTD., where a colleague needs the information to answer a question or deliver a mandate.
• With a client, where you are an operator or supplier connected to that client mandate and the information is directly relevant to the work.
• With service providers who support the desk, as described in the next section.
• With professional advisers such as auditors, accountants or lawyers, where their advice is needed and confidentiality is preserved.
• With a public authority, regulator or court, where the law requires disclosure or where it is necessary to protect legal rights.
• With a buyer or successor in the event of a corporate transaction, subject to appropriate confidentiality arrangements.

We do not permit a recipient to use personal information for an unrelated purpose. Where a recipient acts on our instructions, we put a written agreement in place that sets out the scope of processing and the security expectations.

9. Service providers

The desk relies on a small number of service providers to operate efficiently. These may include a hosting provider that serves this website, an email provider that carries desk correspondence, an accounting platform that issues invoices, a cloud storage provider that keeps mandate records and a scheduling tool that coordinates liaison hours and reviews.

Each provider is chosen with care and is expected to meet security and confidentiality standards appropriate to the information it handles. Providers receive only the information needed to perform their function. Where a provider processes information on our behalf, we maintain a written arrangement that restricts use to our instructions and requires reasonable technical and organisational safeguards. We review the list of providers from time to time and remove any that are no longer needed.

10. International transfers

NERVZ PTE. LTD. is based in Singapore, and some of the service providers that support the desk operate in other countries. As a result, personal information may be transferred to or accessed from a jurisdiction other than the one in which it was collected. Where the law of your jurisdiction requires specific safeguards for an international transfer, we use an appropriate mechanism such as a standard contractual clause or an equivalent arrangement recognised by the relevant regulator.

We take reasonable steps to confirm that a recipient in another country is subject to confidentiality obligations and security practices that are consistent with the standards described in this policy. The desk keeps the number of international touchpoints small, because a shorter chain of custody is easier to protect and easier to explain.

11. How long we keep information

We keep personal information only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires us to keep it. The periods below describe the general practice of the desk.

• Inquiries that do not become a mandate are usually removed within twenty four months of the last contact.
• Mandate records, relay notes and retainer reviews are kept for the duration of the arrangement and for a further period that reflects ordinary limitation and audit expectations.
• Contract, invoice and tax records are kept for the period required by Singapore accounting and tax rules.
• Website security logs are kept for a short operational window unless a security investigation requires a longer period.
• Marketing preferences and opt out records are kept for as long as needed to honour your choice.

When a retention period ends, we delete or anonymise the information in a way that is appropriate to the medium in which it is held. Where information sits inside a client system under a processing agreement, the client retention schedule governs and we follow the instructions in that agreement.

12. How we protect information

We apply technical and organisational measures that are appropriate to the sensitivity of the information we hold. These measures include access controls that limit records to colleagues who need them, encryption in transit for this website, encrypted storage for mandate files, separation of accounts so that a single credential does not open the whole desk, and periodic review of who holds access.

We also rely on process: written mandate cards, dated relay notes and a habit of keeping the record small enough to be read. A clear record reduces the amount of personal data that has to travel through informal channels. Staff and contractors are expected to follow the confidentiality obligations in their agreements and to report a suspected incident promptly.

No method of transmission or storage is completely secure. If a security incident affects personal information, we will assess the risk and notify the relevant regulator and affected individuals where the law requires it, without undue delay.

13. Your rights

Subject to applicable law, you may have the right to ask for access to the personal information we hold about you, to request a correction where it is inaccurate, to request deletion where there is no longer a lawful basis to keep it, to restrict or object to certain processing, and to receive a portable copy of information you provided to us. You may also have the right to withdraw consent where processing is based on consent, without affecting processing that already took place.

To exercise a right, write to agent@nervz.hair with enough detail for us to identify the records involved. We may ask for reasonable proof of identity before acting on a request, because we should not hand a mandate file to someone who is not entitled to see it. We aim to respond within thirty days and will tell you if a request needs more time and why.

If we cannot fulfil a request because of a legal obligation or a competing right, we will explain the reason in writing. You also have the right to complain to a data protection regulator in your jurisdiction, as described near the end of this policy.

14. Marketing and desk updates

We send occasional desk updates to existing clients and to people who have asked to hear from us. These messages describe new services, seasonal drill windows and short notes on integrated systems practice. They are never sold to a third party and they are not used for advertising profiles.

Every marketing message includes a way to unsubscribe, and you can also write to agent@nervz.hair at any time to ask that we stop. Opting out of marketing does not affect messages that are necessary to deliver a mandate, such as a relay note or a retainer review invitation. Those operational messages stay until the arrangement ends, because they are part of the service itself.

15. Privacy for children

The desk provides professional services to organisations and does not offer products or services to children. This website is not directed at children, and we do not knowingly collect personal information from a child. If you believe that a child has sent personal information to the desk, please contact agent@nervz.hair so that we can remove it promptly.

16. Third party links and platforms

This website may link to resources operated by other organisations, for example a standards body, a regulator or a professional network. Those resources maintain their own privacy notices, and we are not responsible for their practices. We recommend reading the privacy notice of any site before sharing personal information there.

Where the desk uses a third party platform to schedule a meeting or share a file, the platform also processes information under its own terms. We choose platforms that offer reasonable security settings and we avoid sending mandate content through a channel that has not been reviewed.

17. Automated review and automated decisions

The desk does not use automated decision making that produces legal or similarly significant effects on individuals. We may use ordinary software to sort incoming messages, flag a security event or organise a calendar, but a person reviews any decision that affects a mandate, a supplier relationship or an individual request.

If a future arrangement introduces a tool that profiles personal information in a way that the law treats as automated decision making, we will describe it in this section, explain the logic in readable terms and provide a route to request human review.

18. Changes to this policy

We review this policy from time to time. When a change is material, we update the effective date at the top of the page and describe the change in a short note. Where the law requires it, we will notify clients directly or ask for renewed consent before applying the change.

Continuing to use this website or to work with the desk after an update means that you accept the revised policy. If you do not agree with a change, you can contact agent@nervz.hair to discuss the arrangement or ask that we close it in an orderly way.

19. Questions and complaints

If you have a question about this policy or about the way the desk handles personal information, write to agent@nervz.hair and describe the matter clearly. A colleague who knows the mandate will respond, and a senior member of the desk will review any complaint that cannot be resolved at first contact.

You also have the right to lodge a complaint with the Personal Data Protection Commission of Singapore or with the data protection authority in your own jurisdiction. We would appreciate the chance to address the matter first, but you are free to approach a regulator at any time. The desk keeps a record of complaints and their outcomes so that recurring issues can be corrected in the written record.

20. Contact the desk

NERVZ PTE. LTD.
21 Woodlands Close #09-30 Primz Bizhub 737854, Singapore (SG)
Email: agent@nervz.hair
Telephone: +15304602653