Data Protection Policy
wattless.business is operated by MerlAIon Advisory Pte Ltd ("MerlAIon", "we", "us"), a company registered in Singapore. This policy explains how we collect, use, disclose and protect personal data in connection with this website and the Wattless service, in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and, where applicable, other data protection laws such as the EU General Data Protection Regulation (GDPR).
1. Personal data we collect
We keep data collection to a minimum. We may collect:
- Contact data you provide voluntarily — for example your name, organisation, email address and message content when you contact us at info@wattless.business or privacy@wattless.business.
- Technical data processed by our hosting and content-delivery infrastructure (Cloudflare), such as IP address, browser type and access timestamps, used for security, abuse prevention and service delivery. This website sets no marketing or tracking cookies and loads no third-party fonts, analytics or advertising scripts.
- Business data shared with us in the course of evaluating or delivering the Wattless service, such as building information and energy consumption figures. Where such data identifies individuals, it is treated as personal data under this policy.
2. Purposes of collection, use and disclosure
We collect, use and disclose personal data only for purposes that a reasonable person would consider appropriate in the circumstances, including to:
- respond to your enquiries and correspond with you;
- evaluate, propose, deliver and support the Wattless service;
- manage our business relationship with you and your organisation;
- comply with applicable laws, regulations and lawful requests by authorities; and
- protect the security and integrity of our website and services.
3. Consent
By providing personal data to us — for example by emailing us — you consent to its collection, use and disclosure for the purposes above. You may withdraw consent at any time by contacting us; we will explain the likely consequences of withdrawal and cease processing within a reasonable period, subject to legal or contractual obligations.
4. Disclosure and transfer
We do not sell personal data. We may disclose personal data to service providers who process it on our behalf (for example email hosting by Microsoft 365 and web infrastructure by Cloudflare), under obligations of confidentiality and security, and where required by law. Where personal data is transferred outside Singapore, we ensure a standard of protection comparable to the PDPA, in line with its transfer limitation obligation.
5. Protection and retention
We implement reasonable security arrangements — including encryption in transit, access controls and reputable enterprise infrastructure — to protect personal data against unauthorised access, collection, use, disclosure, copying, modification or disposal. We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law, after which it is securely deleted or anonymised.
6. Accuracy, access and correction
We take reasonable steps to keep personal data accurate and complete. You may request access to, or correction of, personal data we hold about you by writing to privacy@wattless.business. We will respond as soon as reasonably possible and in accordance with the PDPA's access and correction obligations.
7. Data protection contact
Questions, requests or complaints regarding personal data should be directed to our data protection contact at privacy@wattless.business. If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore (PDPC).
8. Changes to this policy
We may update this policy from time to time to reflect changes in law or our practices. The current version is always available at this address. Material changes will be indicated by an updated effective date.
Effective date: July 2026 · MerlAIon Advisory Pte Ltd, Singapore