LeadsPilot 360 — lead generation and digital marketing for SMEs in Singapore and Malaysia
Last updated: 17 October 2026 Version: 1.0 (draft for owner review — not yet published)
1. Who we are
LeadsPilot 360 ("LeadsPilot 360", "we", "us", "our") is a lead generation and digital marketing service for small and medium businesses. We operate from Singapore.
You can reach us at hello@leadspilot360.com. Our data protection contact is hello@leadspilot360.com.
This policy explains how we collect, use, disclose and protect personal data, and the choices you have.
2. What this policy covers
We handle personal data in two different capacities, and the difference matters:
- As a business in our own right — when you visit our website, submit an enquiry, or become a client. Then we decide what data we hold and why. This policy describes that.
- As a service provider to our clients — when we generate and manage enquiries for a client's business. In that work the client is responsible for the personal data and we act on their instructions. Section 7 explains what that means if you are one of those enquirers.
This policy is written to meet the Singapore Personal Data Protection Act 2010 ("PDPA") and the Malaysia Personal Data Protection Act 2010 ("MY PDPA"), including the requirement under section 7 of the MY PDPA to give notice in both the national language and English. A Bahasa Malaysia version of this policy is published at /ms/privacy.
It does not cover data we process inside a client's own systems under their instructions — their privacy notice governs that.
3. Personal data we collect
When you submit an enquiry through our website, we collect:
| Field | Required? | Why we ask |
|---|---|---|
| Your name | Yes | To address you and identify the enquiry |
| Business name | Yes | To understand whether the service fits your business |
| Email address | Yes | To reply to you |
| Telephone or WhatsApp number | No | To reply by a faster channel if you prefer |
| Target market (Singapore / Malaysia / both) | Yes | Pricing and scope differ by market |
| Industry | No | To judge whether we have relevant experience |
| Current website | No | To look at your existing enquiries before we speak |
| Your message | Yes | To understand what you are asking for |
Automatically, when you visit the site: our web server records the standard technical information in its logs — IP address, date and time of the request, the page requested, browser type, and referring page. These logs exist to keep the site available and secure.
If you become a client: we hold the business contact details of the people we deal with (names, roles, business email and telephone numbers) and the commercial records of the engagement.
If you are on a client's behalf: we may receive the contact details of enquirers generated for that client. See section 7.
We do not ask for, and do not want, your identity card number, financial account details, or any sensitive personal data through this website. Please do not send them through the enquiry form.
4. Why we use your personal data
| What we do | What we rely on |
|---|---|
| Reply to your enquiry and discuss whether our service fits | Your consent, and the steps needed to enter a contract with you |
| Prepare a proposal or quotation | Steps taken at your request before entering a contract |
| Provide the service if you become a client | Performance of our contract with you |
| Keep records of enquiries, proposals and clients | Our legitimate business records, and legal record-keeping duties |
| Tell you about our services where you have asked us to, or where you have not opted out of marketing | Your consent (see our Marketing Consent and DNC Policy) |
| Keep the website secure and working, and understand which pages are used | Our legitimate interest in running a working, safe service |
| Meet tax, accounting and legal obligations | Compliance with law |
We will not use your personal data for a new purpose without telling you first and, where the law requires it, obtaining your consent.
5. Consent, and notice and choice
Singapore: we collect and use your personal data with your consent or as otherwise permitted by the PDPA. Where we ask for consent, we ask separately for the specific purpose and we do not bundle marketing consent into a service you have asked for.
Malaysia: under the MY PDPA you have a right to be informed, and a choice, about how your personal data is used. This policy and the notice at the point of collection together give you that notice; where the law requires your explicit consent, we ask for it separately.
You may withdraw consent at any time by writing to hello@leadspilot360.com or to hello@leadspilot360.com. Withdrawal does not affect anything we lawfully did before you withdrew. It does mean we may no longer be able to continue a service that depends on that data, and we will tell you if that is the case.
6. Who we share personal data with
We do not sell personal data. We share it only where there is a reason and an obligation on the recipient to protect it:
| Who | What they do | Where |
|---|---|---|
| Our hosting provider | Hosts this website and stores enquiry submissions | Singapore, or another country where that provider operates (see section 8) |
| Our email service provider | Sends and receives our business email | Singapore, or another country where that provider operates |
| Our professional advisers (accountant, legal) | Where needed for accounting or a legal question | Singapore / Malaysia |
| A regulator, court or authority | Where the law requires disclosure | — |
We do not share your data with other clients. We do not add enquirers to a client's marketing list on our own initiative.
7. If you are an enquirer for one of our clients
When we run campaigns for a client, personal data collected in that campaign belongs to the client's business. We handle it only on the client's instructions — to deliver the enquiry, qualify it, and pass it to the client.
That means:
- The client's privacy notice applies to how that enquiry is used after we pass it on. We ask every client to publish one.
- We use the data for no purpose of our own, and we do not keep it longer than the client's instructions and our contract allow.
- If you want to access, correct or delete the details you submitted in a client's campaign, contact that client first. We will assist them. If you contact us instead, we will pass the request to the client and tell you we have done so.
8. Transfers outside Singapore and Malaysia
Some of our service providers may store or process data outside Singapore or Malaysia (see section 6).
Singapore: before any transfer out of Singapore we take steps so that the transferred data is protected to a standard comparable to the PDPA's.
Malaysia: we do not transfer personal data outside Malaysia except as permitted by the MY PDPA, which requires that the destination has a level of protection at least equivalent to the MY PDPA, or that an exception applies.
Where a provider stores or processes data outside Singapore or Malaysia, we rely on the protections described in this section and remain responsible for that data.
9. How we protect personal data
We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. These include:
- encrypted connections (HTTPS) across this website;
- access to enquiry data limited to the people who need it;
- enquiry submissions stored outside the public web directory, not in a folder anyone can browse;
- a hidden field on the enquiry form that blocks automated spam submissions without using a tracking cookie;
- regular review of who has access, and removal of access when it is no longer needed.
No method of transmission or storage is completely secure. If a breach occurs that is likely to result in significant harm, we will notify the affected individuals and the relevant regulator as the law requires.
10. How long we keep personal data
| Record | Retention |
|---|---|
| Website enquiry that does not become a client | 24 months from your last contact with us |
| Enquiry data generated for a client | as set out in our agreement with that client, and not longer than 24 months unless that agreement says otherwise |
| Client contract and commercial records | 5 years after the end of the engagement, as required for accounting records |
| Website server logs | 90 days |
When a retention period ends we delete or anonymise the data, unless a law requires us to keep it longer.
11. Your rights
Subject to the law, you may ask us to:
- tell you what personal data we hold about you and how it has been used, and give you a copy;
- correct personal data that is inaccurate or incomplete;
- withdraw consent to a use you previously agreed to;
- stop sending you marketing — see our Marketing Consent and DNC Policy;
- delete personal data we no longer have a reason to keep.
Write to hello@leadspilot360.com or hello@leadspilot360.com. We may need to verify who you are before acting, so that we do not disclose data to the wrong person. We will respond within the time the law allows — 30 days under the Singapore PDPA, and within 21 days for a data access request under the MY PDPA, unless we tell you why we need longer.
We may charge a reasonable fee where the law permits it for an access request. We will tell you before we do.
12. Cookies and tracking
Our Cookie and Tracking Notice Cookie and Tracking Notice explains what is stored on your device when you use this site, including which third parties are involved, and how to refuse. In summary: we currently set no advertising or analytics cookies, and the only third-party request is to Google Fonts for typefaces.
13. Children
Our service is for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
14. Changes to this policy
We may update this policy. The "last updated" date at the top will change. If a change materially affects how we use data we already hold, we will tell affected individuals directly where we can, and in any event publish the updated policy here.
15. Contact us
LeadsPilot 360 Email: hello@leadspilot360.com Data protection contact: hello@leadspilot360.com
Regulators. If you are in Singapore and are not satisfied with our response, you may contact the Personal Data Protection Commission (www.pdpc.gov.sg). If you are in Malaysia, you may contact the Personal Data Protection Department, Ministry of Digital (www.pdp.gov.my).
Singapore PDPA reference: sections 11, 13, 14, 16, 18, 20, 21, 24, 25, 26 and the Do Not Call provisions in Part IX. Malaysia PDPA reference: the seven principles in sections 5 to 12, the notice requirement in section 7, and the cross-border provision in section 129.