How Vault handles your information.
This notice explains what personal data Vault Corporation collects, how it is used, and the rights you hold under Singapore's Personal Data Protection Act (PDPA), the EU General Data Protection Regulation (GDPR), and other applicable frameworks. Operator-grade respect for your information is part of the brand register.
On this page
1 · What data we collect
Vault Corporation collects only what is necessary to operate the consultancy and serve clients. We collect:
Data you give us directly
- Wrangler Read responses — your answers to the diagnostic questionnaire, plus the name and email you choose to provide.
- Enquiry data — anything you write to us by email, WhatsApp, intake form, or phone.
- Engagement data — for clients in any paid programme: contact details, billing information, and the working materials we produce together.
- Newsletter subscriptions — your email address when you sign up for forthcoming-book or insights notifications.
Data we collect automatically
- Aggregate analytics — page views, referrer, country, device class, and similar aggregate data through Plausible Analytics. No cookies, no cross-site tracking, no personally identifiable data.
- Server logs — standard request logs (IP address, user agent, timestamp) kept by our hosting provider (Vercel) for security and uptime monitoring.
2 · Why we collect it
- To respond to your enquiry and serve you as a client.
- To deliver the programmes, diagnostics, and engagements you have purchased.
- To send you operational communications about your engagement.
- To send the one notification you signed up for (forthcoming book / insights brief) — never more than what you opted in to receive.
- To improve the website and the methodology.
- To meet our legal, regulatory, and tax obligations.
3 · Legal basis (GDPR)
Where the GDPR applies, our lawful bases for processing are:
- Consent — when you submit a form or subscribe.
- Contract — to perform the engagement you've contracted with us.
- Legitimate interests — for the operation of the website, security monitoring, and the legitimate growth of the business, balanced against your rights.
- Legal obligation — record-keeping and tax compliance.
4 · Who we share with
Vault Corporation does not sell, rent, or trade personal data. We share data only with:
- Service providers who help operate the business under written contract — including our hosting provider (Vercel), email provider, payment processor, and analytics provider (Plausible).
- Professional advisors — lawyers, accountants, auditors — under professional duties of confidentiality.
- Regulators or law enforcement — only where required by law.
UHNW client confidentiality is treated as a foundational duty. Anonymisation of case material is the default. We do not disclose client identities in marketing without explicit, documented permission.
5 · How long we keep it
- Enquiry data — up to 24 months after last contact, then deleted unless the relationship has continued.
- Engagement records — for the duration of the engagement plus seven (7) years, in line with Singapore record-keeping practice.
- Wrangler Read responses — retained for methodology refinement in anonymised, aggregate form. Identifying details on request can be removed at any time.
- Newsletter subscriptions — until you unsubscribe.
- Server logs — typically up to 30 days at the hosting layer.
6 · Cookies & analytics
Vault uses Plausible Analytics, a privacy-friendly, cookie-free analytics provider hosted in the EU. We do not use third-party advertising cookies, retargeting pixels, or behavioural tracking. The only browser storage Vault uses directly is a single key (vault_cookie_ack) to remember that you have seen this notice.
7 · Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct anything that is inaccurate.
- Request deletion (subject to legal retention obligations).
- Withdraw consent for processing based on consent.
- Object to processing based on legitimate interests.
- Receive a copy of the data you provided in a portable format.
- Lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore or, in the EEA, your local data protection authority.
To exercise any of these rights, email marcus.lim@vault-corporation.com. We respond within 30 days.
8 · International transfers
Vault Corporation is headquartered in Singapore and serves clients globally. Where personal data is transferred across borders (for example to EU-hosted service providers), we rely on adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms as applicable.
9 · Changes to this notice
We update this notice when our practices change or when the law requires. Material changes are flagged at the top of this page with a new effective date. Continued use of the site after the effective date constitutes acknowledgement of the change.
10 · Contact us
For any privacy question, request, or concern:
Marcus Lim Yi Ping · Founder & CEO
Vault Corporation Pte Ltd · Singapore
Email: marcus.lim@vault-corporation.com
Phone / WhatsApp: +65 9117 9999