Cxrus Solutions Pte Ltd (Singapore), together with its regional affiliates Cxrus Solutions Sdn Bhd (Malaysia) and PT. Cxrus Solutions Indonesia (collectively, "Cxrus," "we," "us," or "our"), operates www.cxrus.com (the "Site"), our corporate site for the end-to-end enterprise IT solutions we've delivered for over 20 years — spanning artificial intelligence, cloud and cloud-native applications, e-commerce, enterprise applications, automation, and digital transformation.

This Policy explains how we collect, use, share, and protect personal data belonging to visitors to the Site, people who submit an enquiry, subscribers to our blog or updates, support requesters, and job applicants. It does not cover personal data that we process on a client's behalf while delivering a project — that is governed by the data protection terms in our agreement with that client (see Section 14).

A companion policy covering our AI-focused site, www.cxrus.ai, is published separately; both reflect the same group-wide data practices.

This Policy is written to meet our obligations under Singapore's Personal Data Protection Act 2012 ("PDPA"), Malaysia's Personal Data Protection Act 2010, and Indonesia's Law No. 27 of 2022 on Personal Data Protection. For visitors based in the European Economic Area, the UK, or other regions with their own data protection laws, we also aim to honour equivalent standards, such as those under the GDPR, as a matter of good practice.

(a) Information you give us directly
Your name, business email address, phone number, company name, and job title or role, together with any message content, when you submit an enquiry through our Contact or “Talk to Us” form, ask for more detail on a service, subscribe to our blog or company updates, raise a support request, or contact us by phone, WhatsApp, email, or social media. If you apply for a role with us through our Careers page, we collect the details you provide as part of that application, including your CV and related materials.

(b) Information collected automatically
When you browse the Site, we and our analytics tools automatically collect your IP address, device and browser type, operating system, referring and exit pages, pages viewed, approximate location at a city or country level, language preference, and how you interact with our service, capability, and insights pages. We currently do this through Google Tag Manager and associated analytics tooling.

(c) Cookies and similar technologies
Described in Section 7.

(d) Information from other sources
If you reach us through an event, a technology partner, a referral, or a platform such as LinkedIn or Facebook, we may receive your business contact details from that source so we can follow up on your enquiry.

We do not knowingly collect financial account numbers or special categories of sensitive personal data through the Site itself.

• Respond to enquiries, scope and propose engagements, and where relevant arrange a call or demo
• Operate, maintain, and secure the Site
• Send service updates, insights, or marketing about Cxrus offerings, where you can opt out at any time
• Understand how visitors use the Site so we can improve its content and navigation
• Respond to support requests and maintain continuity of service for existing clients
• Evaluate applications from candidates who apply for a role with us
• Meet our legal, accounting, audit, and regulatory obligations
• Detect, investigate, and prevent fraud, abuse, or security incidents

In Singapore, we rely on your consent, on “deemed consent” where you voluntarily provide data for an obvious purpose (such as filling in an enquiry form), or on the legitimate business purposes exceptions the PDPA permits where the impact on you is limited. In Malaysia and Indonesia, we rely on your consent, on what is necessary to respond to your enquiry, and on our legal obligations. For visitors based in the EEA or UK, we rely on consent, on steps necessary to enter into or perform a contract at your request, on our legitimate interests, and on legal obligation, as applicable.

• Within the Cxrus group — our Singapore, Malaysia, and Indonesia entities may share your details internally so the right regional team can respond to your enquiry.
• Service providers acting on our behalf — including website hosting and CMS providers, analytics providers such as Google, email/CRM and marketing tools, and messaging tools including WhatsApp Business when you choose to contact us there, which is also subject to that provider’s own privacy terms.
• Technology and delivery partners — such as the infrastructure, cloud, and software vendors named on our Partners page — only where relevant to a specific enquiry or engagement you’ve asked for, or with your consent.
• Professional advisers, regulators, courts, or law enforcement — where required or permitted by law.
• A buyer or successor — in connection with a merger, acquisition, financing, or restructuring.

Because we operate from Singapore, Malaysia, and Indonesia and rely on cloud infrastructure and service providers, your personal data may be stored or processed outside the country where you’re located, including in jurisdictions with different data protection standards. Where this happens, we take steps intended to ensure your data continues to receive a standard of protection comparable to what the PDPA requires — for example, through contractual safeguards with the recipient — and, where relevant, mechanisms recognised under the GDPR.

We use a small number of cookie categories on the Site:

• Strictly necessary — required for the Site to function correctly.
• Analytics and performance — currently via Google Tag Manager, to help us understand aggregate visitor behaviour and improve the Site.

We do not currently use the Site to serve targeted third-party advertising.

We keep enquiry, support, and contact data for as long as needed to respond to you and maintain our business relationship, and for a reasonable period afterwards in case you re-engage with us or as needed for legal or accounting purposes. We keep blog and marketing subscriber details until you unsubscribe. Analytics data is generally retained in aggregated or de-identified form after a limited identifiable window. Job application materials are kept for a limited period tied to the relevant recruitment cycle, unless you agree to us keeping your profile on file for longer.

We apply reasonable technical and organisational measures to protect personal data, including access controls, encryption in transit, and restricting internal access on a need-to-know basis. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your information has been compromised, please contact us right away using the details in Section 16.

(a) Singapore — PDPA
You may withdraw consent at any time, request access to the personal data we hold about you, request correction of inaccurate data, and ask how your data has been used or disclosed in the past year.

(b) Malaysia — PDPA 2010
You may request access to and correction of your personal data, withdraw consent, and ask us to stop processing your data for direct marketing purposes.

(c) Indonesia — PDP Law
You may request access to, correction or completion of, and deletion of your personal data, object to certain automated decision-making, request that processing be restricted, and request portability of data you’ve provided to us.

(d) Other regions
If you’re based in the EEA, UK, or elsewhere, we extend equivalent rights of access, rectification, erasure, restriction, objection, and portability as a matter of good practice, and you may also lodge a complaint with your local data protection authority.

To exercise any of the rights above, email general@cxrus.com. We may need to verify your identity before acting on your request. We aim to respond as soon as reasonably possible and within the time required by applicable law.

The Site is directed at business and professional audiences and is not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

The Site links to partner websites and to our profiles on LinkedIn, Facebook, and WhatsApp. Those platforms operate under their own privacy policies, not this one, and we encourage you to review them before sharing personal data there.

Where Cxrus processes personal data on behalf of a client while delivering a project — for example, a cloud migration, e-commerce platform implementation, custom application development, or AI engagement — that processing is governed by the data protection terms in our agreement with that client, not by this website Privacy Policy. If you are an individual whose data is processed as part of one of our client engagements, please direct any privacy request to that client in the first instance.

We may update this Policy from time to time. Material changes will be reflected in a new “Last Updated” date at the top of this page, and where required by law, we will seek your fresh consent or give you notice before the change takes effect.

If you have questions about this Policy or how we handle personal data, please email us at general@cxrus.com.