What Personal Data We Collect

We collect personal data that is necessary to deliver our services, process payments, communicate with you and improve the website experience. We limit collection to what is relevant for those purposes.

Data You Provide Directly

When you register, book a consultation, make a payment, subscribe or contact us, you may provide the following types of personal data:

• Contact details: name, email address, phone number, mailing address for billing or receipts.
• Profile and business information: company name, role, website, industry and coaching goals to tailor sessions.
• Payment information: billing details captured by our third-party payment processors (we do not store full card details on our servers).
• Communications: messages you send via contact forms, email, chat or during consultation scheduling.
• Donation details: donor name and payment reference required to process and issue receipts for donations.
• Preferences and consents: newsletter subscription choices and marketing preferences you select.

Automatically Collected Data

When you visit qharvayla.biz, we and our service providers collect certain technical and usage information automatically to operate and secure the site and to improve performance.

• Device and browser information: device type, operating system, browser version and screen settings.
• Log data: IP address, access times, pages viewed and referral source for security and analytics.
• Cookies and similar technologies: identifiers used to remember preferences, enable sessions and measure engagement.
• Analytics data: aggregated usage patterns to understand content performance and user journeys.
• Performance metrics: crash reports and error logs to maintain site reliability.
• Geolocation at a coarse level based on IP for localization and service optimization.

Data From Third Parties

We may receive personal data about you from trusted third parties when you use third-party services to access our content or make payments.

• Payment processors and donation platforms that provide transaction confirmations and minimal payer details needed for receipts.
• Analytics and advertising providers that supply aggregated insights about site traffic and campaign performance.
• Professional advisors and legal parties when required to respond to legal requests or protect rights.

Legal Basis for Processing

We rely on appropriate legal bases to process personal data, depending on the context and applicable law in Singapore.

• Performance of a contract: processing necessary to provide coaching services, consultations and donation receipts.
• Consent: where you have given clear consent for marketing or non-essential cookies and tracking.
• Legitimate interests: for security, fraud detection, site improvement and business management, balanced against your privacy interests.
• Legal compliance: processing necessary to meet legal or regulatory obligations.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate the site, remember preferences, and measure and optimize performance. You can control cookie settings through your browser and our cookie banner.

Types include essential cookies for site functionality, preference cookies to remember choices, analytics cookies to measure use, and marketing cookies to support content distribution.

Essential: required for core features. Functional/Preference: remember settings. Analytics: measure and improve the website. Marketing: support advertising and content personalization where applicable.

You may manage cookie preferences via the cookie banner on the site or adjust browser settings to block or delete cookies. Blocking cookies may affect site functionality and some features.

For more details about cookies and how we use them, review our full cookie guidance at qharvayla.biz/cookies.

When We Share Data

We share personal data only with necessary service providers and as required by law. All partners are selected to meet security and privacy standards.

• Payment processors and donation platforms to process transactions and issue receipts.
• Hosting and infrastructure providers to store data securely and deliver the website.
• Analytics and email marketing providers to measure engagement and manage communications.
• Professional advisers, auditors and legal entities when required for compliance and business operations.
• Law enforcement or regulators in response to lawful requests or to protect rights and safety.
• Mergers or business transfers: in the event of a sale or reorganization, relevant data may be transferred under confidentiality terms.

International Data Transfers

Some service providers we use may process personal data outside Singapore. When data is transferred internationally we take steps to ensure appropriate safeguards are in place consistent with applicable laws.

Safeguards may include contractual protections, reliance on approved data transfer mechanisms and working with providers that maintain robust security practices.

Data Retention

We retain personal data only as long as necessary for the purposes described, subject to legal and business requirements.

Account and client records are retained for the period needed to provide services and for tax or accounting obligations, typically for a minimum of 6 years where required for business records.

Communications and support correspondence are retained for as long as needed to address requests or resolve disputes, usually between 1 and 3 years depending on context.

System logs, analytics data and security records are retained for operational and security purposes, generally for periods ranging from 90 days to 3 years in aggregated or anonymized form.

When retention periods expire or upon valid deletion requests, we securely delete or anonymize personal data unless retention is needed for legal reasons.

Security Measures

We implement reasonable technical and organizational measures to protect personal data from unauthorized access, loss or misuse. Security practices are regularly reviewed and updated to reflect evolving risks.

• Encryption of data in transit using HTTPS and industry-standard protocols.
• Access controls and role-based permissions to limit data access to authorized personnel only.
• Regular backups, monitoring and incident response procedures to detect and address potential breaches.

Your Rights

You have rights regarding your personal data. We provide clear channels to exercise those rights and will respond within applicable timeframes.

• Right to access: request a copy of personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to deletion: request erasure of personal data when no longer necessary and subject to legal exceptions.
• Right to restrict processing: request limits on how we use your data in certain circumstances.
• Right to data portability: request transfer of personal data in a structured, commonly used format where applicable.
• Right to object: object to certain processing based on legitimate interests or marketing.
• Right to withdraw consent: where processing is based on consent, you can withdraw it for future processing.
• Right to lodge a complaint with the relevant data protection authority if you believe your rights are not being respected.

How to Make a Rights Request

To exercise any rights described in this policy, contact us at the address below with details of your request and a copy of a valid ID if required to verify your identity. We aim to respond promptly and may ask for additional information to locate the data.

[email protected]

We will acknowledge receipt of your request within a few business days and respond substantively within a timeframe consistent with applicable law, typically within 30 days. Complex requests may require additional time and we will keep you informed.

Marketing and Communications

Virelya uses contact details you provide to send relevant updates about coaching programs, blog highlights, upcoming webinars, promotional offers, and donation opportunities. Marketing messages are tailored to show how our services help you develop a stronger personal brand, grow a client base, or prepare for paid consultations. Communications may include email, in-app messages, and targeted content where you have not opted out.

You can unsubscribe from promotional communications at any time using the unsubscribe link included in every marketing email, or by contacting us at [email protected]. Unsubscribing will not prevent transactional messages about bookings, purchases, or account matters.

Children's Privacy

Virelya is intended for adult professionals and entrepreneurs. We do not knowingly collect personal information from persons under 16 years of age. If we learn that we have collected such information, we will take steps to delete it. If you believe we may hold data from a minor, contact us so we can address the matter promptly.

Third-Party Links and Services

Our website and emails may include links to third-party sites and services such as payment processors, scheduling platforms, analytics providers, and social networks. These third parties have separate privacy practices and are responsible for their own compliance. Virelya is not responsible for the content or privacy practices of external sites.