Privacy notice
How Cyberwisdom Group handles personal data through this website and in the engagements we deliver, and what you can ask us to do about it.
Last updated: 2026 · Applies to www.cyberwisdom.net
1. Who we are
Cyberwisdom Group is the data controller for personal data submitted through this website. Our group headquarters is at 34 Floor, 77 Robinson Road, Singapore 068896. Our enterprise learning business is headquartered in Hong Kong. For enquiries about this notice, contact privacy@cyberwisdom.net.
2. What we collect through this site
When you submit an enquiry or subscribe to our briefing, we collect what you provide — typically your name, work email address, organisation, your role, and the content of your message. We also collect limited technical information such as browser type and pages visited, in order to operate and improve the site.
3. Singapore PDPA and Hong Kong PDPO
We process personal data in accordance with the Personal Data Protection Act 2012 (Singapore) and the Personal Data (Privacy) Ordinance Cap. 486 (Hong Kong), including the applicable transfer and breach-notification requirements. Our group privacy contact is the same address for both regimes. Data subjects in either jurisdiction may exercise their access, correction, deletion, objection and withdrawal rights by writing to us, and may complain to the Personal Data Protection Commission (Singapore) or the Office of the Privacy Commissioner for Personal Data (Hong Kong).
4. Why we collect it
- To respond to your enquiry and to prepare for any subsequent conversation with you.
- To send the monthly briefing, if you have subscribed to it.
- To operate, secure and improve the website.
We rely on our legitimate interests as a business consultancy in responding to enquiries, and on consent for the briefing. We do not sell personal data and we do not share it with third parties for their own marketing purposes.
5. Personal data in client engagements
Our delivery work involves personal data that we do not collect ourselves but that clients provide to us as processors. This typically falls into three categories, and each is governed by the client contract, the client's instructions and applicable data protection law rather than by this website notice.
- Enterprise business data — records, documents, transaction data and correspondence supplied by a client for processing in a system we build or operate on their behalf.
- Evaluation and assessment data — test sets, scoring, assessment results and competency evidence produced when we build, tune or validate digital employees, or when we run capability programmes.
- Agent runtime logs — prompts, tool calls, retrieved context, confidence and escalation records, and decision trails produced by agents operating in a governed environment. These exist so that what an agent did can be reproduced and audited.
We process that data only on documented client instructions, apply access controls on a role basis, retain it for the period agreed in the engagement, and return or delete it at termination on the client's instruction. We do not use client enterprise data to train general models, and we do not use it for our own commercial purposes.
6. AI systems and automated processing
Where we deploy AI systems on a client's behalf, personal data may be processed without direct human intervention at the retrieval or inference step. We configure such systems so that consequential decisions remain attributable to a named person, so that the inputs and outputs are recorded, and so that our clients can meet their own transparency and fairness obligations. Where you have a question about automated processing in a specific engagement, raise it with us and we will route it to the responsible delivery team.
7. Retention
Enquiry data is retained for 24 months from our last interaction with you, unless the enquiry leads to a client relationship, in which case it follows our client records policy. Briefing subscription data is retained until you unsubscribe. Data processed in client engagements follows the retention schedule agreed with that client.
8. International transfers and security
Cyberwisdom Group operates across Asia and Australia, so personal data may be processed in a jurisdiction other than the one it was collected in. We apply appropriate transfer safeguards, including contractual clauses where required, and we operate access controls, encryption in transit and at rest, and logging across the platforms we deploy on behalf of clients.
9. Cookies
This website uses only essential cookies required to operate it. We do not use advertising cookies and we do not run third-party behavioural tracking. If we introduce optional analytics, we will update this notice and seek consent where required.
10. Confidentiality
Please do not send confidential, sensitive, patient or regulated personal information through this website or the enquiry form. We have no obligation to accept such material, and it may be deleted without review.
11. Changes
We update this notice when our practices or our regulatory obligations change. The date at the top of this page indicates the most recent revision.
What we hold, and why
We process enquiry data to respond to you, and client data only under the terms of the relevant engagement. We do not run advertising or data-broker models.
| Data category | What we do | Retention |
|---|---|---|
| Enquiry details you send us | Stored by our group team, used only to respond, never sold or shared for marketing | 24 months from last contact |
| WhatsApp conversations | Held in our business messaging account, used to answer you | 24 months from last contact |
| Training and LMS records | Held in the LMS as compliance and capability evidence for the employing organisation | Per the employing organisation's policy, minimum 5 years where regulatory evidence requires it |
| Agent decision logs | Held as supervision evidence, accessible to the client organisation and its auditors | Per the engagement's evidence model |
| Evaluation and test data | Derived from the client's own cases, held under the engagement's data terms | Term of the engagement plus statutory period |
How to exercise your rights
We would rather you asked than assumed. Data subject requests are part of the same evidence discipline as everything else we do.
- Write to info@cyberwisdom.net with "data request" in the subject line.
- For training or LMS records held for your employer, your employer is the controller — they will action the request, and we will support it.
- We respond to enquiries within 30 days.
- Deletion requests for enquiry data are actioned within 30 days unless a statutory retention period applies.
- You may ask what agent decision logs exist that relate to you, and request a copy.
- You may ask us to correct anything inaccurate, and we will correct it or explain why we cannot.
Four ways to reach us
The fastest route to a person. Use it for scoping questions, and for anything time-sensitive in your market.
Learn more →For briefs, RFPs, tender documents and anything that needs a paper trail you can forward internally.
Learn more →Group HQ
34 Floor, 77 Robinson Road, Singapore 068896 — enterprise AI consulting and group strategy.
Learn more →Learning HQ
The enterprise learning business — LMS, TMS, custom courseware, partner and workforce enablement.
Learn more →