Privacy Policy

1. Who We Are

This Privacy Policy is issued by N Plus Ventures Pte. Ltd., incorporated in Singapore, and its affiliated entity NDN Group Limited, incorporated in Hong Kong (collectively, "N+ Ventures", "we", "us", or "our"). We operate nplus.ai (the "Site") and act as the data controller for personal data collected through it.

We comply with: the Personal Data (Privacy) Ordinance (Cap. 586) of Hong Kong ("PDPO"); the Personal Data Protection Act 2012 of Singapore ("PDPA"); and, where applicable, the EU General Data Protection Regulation 2016/679 ("GDPR") for individuals in the European Economic Area or United Kingdom.

2. Personal Data We Collect

We collect only the minimum personal data necessary for the purposes described in this Policy.

2.1 Contact and Enquiry Data

• Full name, email address, company name and job title
• Nature of enquiry (investor, founder, strategic partner, media, or other)
• Message content submitted via forms on this Site

2.2 Technical and Usage Data

• IP address and approximate geographic location (country/city level only)
• Browser type, version, operating system and device type
• Pages visited, time on page and referral source
• Cookie identifiers (see Section 9)

We do not collect sensitive personal data such as health, biometric, political, religious or financial account data through this Site.

3. How We Collect Personal Data

• Forms: When you submit a contact, partner or newsletter form on this Site
• Email: When you contact us directly at our published email addresses
• Cookies and analytics: Automatically when you browse the Site (see Section 9)
• Referrals: When a third party refers you to us with your prior consent

4. How We Use Your Personal Data

• To respond to your enquiries, requests and partnership applications
• To assess potential investment, co-building or strategic partnership opportunities
• To send you content or updates you have specifically requested
• To analyse Site usage and improve user experience
• To comply with legal and regulatory obligations in Hong Kong and Singapore
• To protect our legitimate business interests and enforce our legal rights

We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.

5. Legal Basis for Processing

• Consent: Where you have freely given consent, for example by submitting a contact form or accepting cookies
• Legitimate Interests: Where processing is necessary for our legitimate business interests (e.g. improving the Site, assessing partnership enquiries), provided those interests are not overridden by your rights
• Legal Obligation: Where we are required to process data to comply with applicable Hong Kong or Singapore law
• Contract: Where processing is necessary to take pre-contractual steps at your request prior to entering an agreement

6. Data Sharing and Disclosure

We do not sell, rent or trade your personal data to third parties. We may share it only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers who process data on our behalf, including website hosting providers (Vercel Inc.), email and communication services, and analytics providers. All service providers are bound by data processing agreements and may not use your data for their own purposes.

6.2 Legal and Regulatory Requirements

We may disclose personal data where required by law, court order, regulatory directive or governmental authority in Hong Kong, Singapore or any other applicable jurisdiction. We will, where legally permissible, notify you before making such a disclosure.

6.3 Business Transfers

If N+ Ventures undergoes a merger, acquisition, restructuring or sale of assets, personal data may be transferred as part of that transaction. We will notify you and ensure any successor entity honours this Privacy Policy.

6.4 With Your Consent

We may share your data with third parties in any other circumstance where you have given us your prior, informed and explicit consent to do so.

7. International Data Transfers

Our operations span Hong Kong, Singapore and certain cloud infrastructure in the United States (via Vercel Inc.). When we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission for EEA data
• Transfers to jurisdictions deemed adequate by the relevant data protection authority
• Binding corporate rules or equivalent contractual protections for intra-group transfers

By submitting personal data through this Site, you acknowledge that your data may be transferred to, stored and processed in countries outside your country of residence, including Singapore, Hong Kong and the United States.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. Our standard retention periods are:

• Contact and enquiry data: 3 years from the date of last contact, unless an ongoing relationship exists
• Technical and usage data: Up to 26 months (standard analytics retention)
• Legal compliance records: As required by applicable Hong Kong and Singapore laws (typically 7 years)

Upon expiry of the applicable retention period, we will securely delete or anonymise your personal data.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on the Site. By clicking "Accept All" on our cookie notice, you consent to our use of cookies as described below.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Site to function. Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use the Site (e.g. pages visited, session duration). Data is aggregated and anonymous.
• Preference Cookies: Remember your settings and choices (e.g. cookie consent status, language preference).

9.2 Managing Cookies

You may decline non-essential cookies via our cookie consent banner. You can also manage cookies through your browser settings; note that disabling certain cookies may affect Site functionality. For more information, visit aboutcookies.org.

10. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data. To exercise any of these rights, please email privacy@nplus.ai.

• Right of Access (PDPO DPP6, PDPA s21, GDPR Art.15): Request a copy of the personal data we hold about you
• Right to Correction (PDPO DPP3, PDPA s22, GDPR Art.16): Request correction of inaccurate or incomplete data
• Right to Erasure (GDPR Art.17): Request deletion of your personal data where there is no compelling reason for us to continue processing it
• Right to Restriction (GDPR Art.18): Request that we restrict processing of your data in certain circumstances
• Right to Data Portability (GDPR Art.20): Receive your personal data in a structured, machine-readable format
• Right to Object (GDPR Art.21): Object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing

We will respond to all valid requests within 30 days. In complex cases, we may extend this period by a further 60 days but will notify you of the extension and reason.

If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority. Hong Kong residents may contact the Office of the Privacy Commissioner for Personal Data. Singapore residents may contact the Personal Data Protection Commission.