Are you a vCISO?Join TruCISO →
TruCISO Logo

TruCISO

Privacy Policy

Last Updated: October 27, 2025

Additional Privacy Information

The following additional privacy information is specific to TruCISO's compliance with Singapore's Personal Data Protection Act 2012 (PDPA):

This Privacy Policy describes how TruCISO ("we", "us", or "our") collects, uses, and discloses your Personal Data in compliance with Singapore's Personal Data Protection Act 2012 ("PDPA").

1. Data Protection Officer (DPO)

Our DPO is responsible for ensuring our compliance with the PDPA. You can contact our DPO at: info@truciso.com

2. Personal Data We Collect

We collect Personal Data for the purpose of operating our Platform and providing our services. This includes:

  • Identity & Contact Data: Name, email address, contact number.
  • Verification Data (for vCISOs): Government-issued ID, academic records, professional certifications, and other data for KYC purposes.
  • Transaction Data: Details about payments and services you have purchased.
  • Technical & Usage Data: IP address, browser type, and information about how you use our Platform.

3. Purpose of Collection, Use and Disclosure

We use your Personal Data for the following purposes:

  • To register and manage your account.
  • To facilitate the connection between Clients and vCISOs.
  • To process transactions and service fees.
  • To conduct verification and due diligence (KYC) on vCISO partners.
  • To comply with legal and regulatory obligations.

4. Consent

By using our Platform, you consent to our collection, use, and disclosure of your Personal Data as described in this policy. You may withdraw your consent at any time by contacting our DPO. Withdrawal of consent may affect your ability to use the Platform.

5. Access and Correction

You have the right to request access to and correct your Personal Data held by us. Please submit your request to our DPO.

6. Protection and Security

We take reasonable technical and administrative measures to protect your Personal Data from unauthorized access, use, or disclosure. This includes encryption, access controls, and secure data storage.

7. Retention

We will only retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

8. Cross-Border Data Transfer

Your Personal Data may be transferred to, stored, or processed in a country outside of Singapore (e.g., India). We will ensure that any transfer of your Personal Data complies with the PDPA's transfer limitation obligations, typically through contractual agreements like a Data Processing Agreement (DPA).