Privacy policy.

Data we handle for the clinics we work with

Some of our clients are medical and aesthetic clinics. For them we run enquiry lines, reply to patient messages on the clinic’s WhatsApp number, keep the clinic’s enquiry records up to date, and reconcile enquiries with the clinic’s own appointment and payment records. When we do this, the clinic is the organisation that collects your data and decides what it is used for. We process it on the clinic’s behalf, under a written agreement with the clinic, as a data intermediary under the Personal Data Protection Act.

If you have written to one of these clinics, your questions about your data go to the clinic first. We help the clinic answer within the time the Act allows. We do not use patient data for our own marketing, case studies or product development in a form that can identify you.

What we collect

• Enquiry form data: name, email, phone number, your specialisation, and anything you write in the message fields.
• How you found us. That means the option you pick in the enquiry form. If you arrived from an advertisement, it also means the click identifier the ad platform adds to the link.

How your data is used

• To address your enquiries and deliver contracted services.
• To know which channel an enquiry came from, so we can judge our own marketing by the same standard we hold client campaigns to.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Cookies and tracking technologies

This website uses Vercel Web Analytics. It sets no cookie. It counts page views in total, and one event: an enquiry sent. It stores no lasting identifier and no personal data. There is no Google Analytics here, no Meta Pixel, and no Google Tag Manager. We set no advertising cookie and no third-party cookie on this site.

• Say you arrive from an advertisement. The link carries a click identifier (for example a Google or Meta click ID) and any campaign tags. Your browser keeps them in its own local storage for up to 90 days. If you send an enquiry in that time, we can tell which campaign brought you. They are sent only with an enquiry you submit, never on their own. Clearing your browser’s site data removes them at any time.
• Say you arrive from an AI assistant instead, such as ChatGPT or Perplexity. Your browser keeps the name of that assistant for the same 90 days. That way an enquiry can be traced back to it. No personal data is involved.
• Enquiry form submissions are sent to our own first-party endpoint on a domain we operate. They are not passed through an advertising platform.

Nothing follows you across other websites. To submit no data at all, do not submit the form, and clear your browser’s site data to remove the stored identifiers.

Meta platform data

We use Meta tools to manage client advertising campaigns and may receive:

• Ad performance metrics (impressions, clicks, conversions).
• Aggregated audience demographics.
• Page and advertisement interaction information.

We use this data solely to measure and optimise advertising campaigns for our clients.

Akros AI Staff and WhatsApp data

When a customer business connects its WhatsApp Business Account to Akros AI Staff, we process the following on the customer's instructions:

• WhatsApp Business account and phone information, used to connect the correct account and route messages to the correct workspace.
• Approved message templates, used to send permitted reminders and business-approved messages.
• Messages and conversation context, used to organise enquiries and provide approved administrative responses.
• Delivery and connection information, used to show whether messages and connections are working.
• Customer ownership and controls: each customer keeps ownership of its WhatsApp assets and can pause automation, take over conversations, or disconnect the service.
• AI processing and staff handoff: replies are generated only from information the customer approved, and sensitive, clinical or uncertain messages are handed to the customer's staff.

Delivering the service requires Meta's WhatsApp platform, cloud hosting, database and AI service providers. These providers process data only to deliver the service, never for their own marketing.

To request access, export or deletion of WhatsApp service data, use the data deletion page or email info@akrosdigital.com.sg. Requests are handled by our team and confirmed when complete. Open the data deletion page.

Data deletion

Email info@akrosdigital.com.sg with the subject "Data Deletion Request", including your name and identifiers. Requests are processed within 30 days with email confirmation.

Data retention

We keep personal information only as long as we need it. Enquiry submissions are kept for up to 24 months. Ad click identifiers and campaign tags sit in your browser’s local storage for up to 90 days. If you send an enquiry, they are kept with that enquiry for as long as the enquiry itself.

Patient enquiry records we hold on a clinic’s behalf: names, phone numbers, email addresses and message text are removed from our copies 90 days after the last activity on that enquiry. The remaining record (date, channel, status, outcome) is kept for the clinic’s reporting and cannot identify you on its own.

Your PDPA rights (Singapore)

• Access the personal data we hold about you.
• Request corrections to inaccurate information.
• Withdraw consent for collection, use, or disclosure.

We respond within 30 business days.

Data security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

Where your data is stored and which services touch it

Our application and its database run in Singapore. Some of the services we use to do the work store or process data outside Singapore:

• WhatsApp Business messaging is delivered through 360dialog (Germany) and Meta.
• Enquiry messages are classified by an AI language model provided by Google (United States). The provider’s terms do not allow it to train models on this data.
• Error reports go to Sentry (United States). They carry no names, numbers or message text.

We only use a service outside Singapore where it is bound by written terms that give your data a standard of protection comparable to the Act.

Data Protection Officer

Our Data Protection Officer is Tyler Ang. Reach the DPO at tyler@akrosconsultancy.com. Questions, access and correction requests, and complaints about how we handle personal data go to this address.