Skip to main content

LEGAL

Privacy Policy

How Artio Holdings Pte. Ltd. collects, uses, and protects your personal data in accordance with Singapore's Personal Data Protection Act (PDPA).

Last updated: 28 Oct 2026

1. Who we are

Artio Holdings Pte. Ltd. ("Artio", "we", "us", "our") is a private limited company incorporated in Singapore (UEN 202614551C) with its registered office at 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051. We respect your privacy and are committed to protecting personal data in accordance with the Personal Data Protection Act 2012 ("PDPA").

2. What personal data we collect

We collect only what we need to operate our services:

  • Contact data you submit through our contact form, waitlist, or newsletter (name, email, company, project type, message).
  • Communication data when you message us via WhatsApp, email, or social channels.
  • Technical data collected automatically when you visit the site: IP address, browser type, device, pages viewed, referrer (via Google Analytics 4, anonymised IP enabled).
  • Cookie data: strictly necessary cookies for the site to function, plus optional analytics cookies (you can disable in your browser settings).
  • Recruitment data you submit through our careers page: first and last name, email, optional phone and location, area of interest, your resume as a PDF, optional links (LinkedIn, portfolio), and whether you are authorised to work in Singapore. We do not ask for your age, race, religion, NRIC, marital status, or a photo.
  • Testimonial data, if you write or give us a testimonial: your words, your name in the form you chose, your role and your company name from our records, any result line you add, which consent wording you agreed to and when, and, when you send or withdraw one from your client portal login, that login's email address in our internal audit log.
  • Mimoo studio data, if you book with our Mimoo studio or write to it: your name, email, mobile number and language; your login and its sign-in records; your reminder choices; your sessions, credits, pack purchases and invoices; the name of anyone you book into a duo session; your welcome form (date of birth, goals, activity level, health conditions and notes, and an emergency contact's name and number); notes on your record, bookings, sessions and credits, including the reason recorded when a session is cancelled, written by the studio team or taken from what you tell our WhatsApp assistant when you book; the reason for any price the studio set for a pack you bought; anything you send through Mimoo's enquiry form (name, email and message); and, when you act in your account, that login's email address in our internal audit log. If you open a duo session for another member to join, your first name (or your whole name, if it is written without spaces) is shown to members looking for a session. Your welcome form and these notes can include health information. Only you and the studio team can see your welcome form, and only the studio team can see the notes.

3. How we use your data

We process personal data only for the following purposes:

  • To respond to enquiries and provide quotes.
  • To deliver services you have engaged us for.
  • To send the newsletter you have explicitly subscribed to.
  • To invite a client to write a testimonial when their project goes live.
  • To publish a testimonial you have agreed to, in the form you chose, and to keep the record of that agreement.
  • To consider you for current and future roles when you apply through our careers page.
  • To run your Mimoo sessions safely, manage your bookings, credits and payments, send you booking messages and the reminders you choose, and keep a record of what is done in your account.
  • To check, from the date of birth on your welcome form, that you are 18 or over before we take a testimonial about your Mimoo sessions.
  • To answer an injury, complaint or claim about a Mimoo session.
  • To improve the website and our service offerings.
  • To comply with legal and regulatory obligations.

4. Legal basis

Under the PDPA, we process personal data on the following grounds: (a) your consent (e.g. when you submit a form or subscribe to the newsletter); (b) the necessity of performing a contract with you; (c) our legitimate interests in operating and improving the business, balanced against your privacy interests; and (d) legal obligations such as tax record-keeping.

5. Third parties and data processors

The third-party processors we use to operate the site and our services include:

  • Vercel: site hosting and content delivery.
  • Resend: transactional email for contact form and waitlist submissions, the client portal's emails, and the Mimoo studio's emails, such as booking confirmations, reminders and credit notices.
  • Google Analytics 4: anonymised analytics (IP anonymisation enabled).
  • Meta (WhatsApp Business): when you message us via WhatsApp, or the Mimoo studio sends you a WhatsApp message about your sessions or credits, your message and number are processed by Meta in accordance with their privacy policy.
  • Our WhatsApp assistant's providers: when you message us on WhatsApp, our assistant also passes your messages, and may pass details from your Mimoo records that it uses to answer you, such as your bookings and credits, to the services it uses to read and answer them and to alert our team. We are confirming the full list of these services and what reaches each one, and will name them here.
  • Supabase: our database and sign-in provider, hosted in Singapore. Account and booking records for the Mimoo studio, including the welcome form, and for the client portal are stored here.
  • Google (Calendar): confirmed Mimoo sessions are placed on the studio calendar and the invitation is delivered to you by Google. If you book an open duo session, you and the member you are matched with share one invitation, which carries your email address.

We do not sell or rent your personal data to third parties for marketing purposes. Ever.

6. Data retention

We retain personal data only for as long as necessary for the purpose it was collected: contact enquiries are kept for 24 months; client engagement records are kept for the duration of the engagement plus 7 years to comply with tax law; newsletter subscriptions are kept until you unsubscribe; and job applications are kept for up to 12 months, then removed, unless we agree otherwise with you. A testimonial and its publication history are kept while it is shown and for 7 years after it is withdrawn, taken down or not accepted, and our audit log's record of who sent or withdrew one, with that login's email address, is kept for 7 years; both are kept even if the account is later deleted. Our record of changes to a client team (invitations, people joining, role changes, suspensions and restorations, and who made each change), including the email address an invitation was sent to, is kept for 7 years from each change, even if the account is later deleted. Our audit log's record of what a Mimoo member does in their account, such as booking, changing or cancelling a session or buying a pack, with that login's email address, is kept for 7 years from each action, even if the account is later deleted. You can ask us to remove your details at any time; records we keep, such as these testimonial, team and Mimoo account activity records and tax records, are kept for the periods stated here.

For the Mimoo studio, your welcome form, the notes described in section 2 and the name of anyone you booked into a duo session are kept while you train with us and deleted 12 months after the latest of your last session, your last change to the welcome form and the day you joined the studio (a session we record after the fact counts from the day we record it). If an injury, complaint or claim about a session has been raised, what relates to it is kept until it is settled, or for 3 years after it was raised if no claim is made. The rest of your Mimoo records (your name, email, mobile number, language, reminder choices, login, sessions, credits, pack purchases with the reason for any price the studio set, invoices, and the copies of your sessions in our studio calendar) are kept for 7 years after the latest of your last session, your last purchase, your last sign-in (if you use your login only for Mimoo) and the day you joined the studio. Our accounts and tax records rely on the payment and session records, and the rest of your account details belong to the same record. At the end of those 7 years, your name and contact details are removed from them, and your login is closed if you use it only for Mimoo. Both periods apply even if your login is deleted. If your details are in our Mimoo studio records and you ask us to remove them, we cannot yet do so early: we record your request, tell you what we hold, and remove them on the schedule above, or sooner once our removal process covers them. You can still ask to see or correct them. If you withdraw your consent to our use of your welcome form, the studio can no longer run sessions for you.

7. Your rights under the PDPA

You have the right to: (a) request access to personal data we hold about you; (b) request correction of inaccurate data; (c) withdraw your consent to processing at any time (which may affect our ability to provide certain services); (d) lodge a complaint with the Personal Data Protection Commission of Singapore (pdpc.gov.sg).

To exercise any of these rights, email us at hello@artioholdings.com with the subject line "PDPA Request". We will respond within 30 calendar days.

8. International data transfers

Our database (Supabase) is hosted in Singapore. Some of our processors, including Vercel, Resend, Google and Meta, may store data outside Singapore. Where this occurs, we ensure that the receiving jurisdiction provides protection comparable to the PDPA, or that contractual safeguards are in place. Our WhatsApp assistant's providers (section 5) may also store data outside Singapore; we will set out the safeguards for them when we name them.

9. Cookies

We use strictly necessary cookies for site function and optional analytics cookies. You can disable cookies in your browser settings; this may affect site functionality.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be posted on this page.

11. Contact our Data Protection Officer

For any privacy-related queries or PDPA requests, contact our DPO at hello@artioholdings.com or by post at our registered office address above.

Start a project