Privacy Policy

Effective: April 2026

1. About This Policy

Stewardship Consulting Pte. Ltd. ("Stewardship Consulting", "we", "us", "our") is a boutique advisory firm headquartered in Singapore with an office in Seattle, Washington, USA. This Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with this website (www.stewardshipconsulting.com) and our advisory services.

We are committed to complying with Singapore's Personal Data Protection Act 2012 (PDPA) and, where applicable, relevant US privacy laws including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We do not sell personal data.

By using this website or contacting us, you acknowledge that you have read and understood this policy.

2. What Personal Data We Collect

We collect personal data only when you voluntarily provide it to us. The categories of data we collect are limited to:

Contact enquiries

• First and last name
• Email address
• Company or family office name (optional)
• Your message or enquiry

Website usage

We may collect standard technical data such as IP address, browser type, and pages visited through analytics tools (e.g. Google Analytics). This data is aggregated and is not used to identify individual visitors.

We do not collect sensitive personal data (including financial account numbers, health information, or government identification numbers) through this website. Any sensitive information shared in the course of an advisory engagement is governed by a separate client engagement agreement.

3. How We Use Your Personal Data

We use the personal data you provide for the following purposes:

• To respond to your enquiry or consultation request
• To schedule and conduct an initial consultation
• To assess whether an advisory engagement may be appropriate
• To comply with our legal and regulatory obligations
• To maintain records of communications as required for professional services

We do not use your personal data for marketing without your explicit consent. We do not use automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing

Under the PDPA, we process personal data on the basis of your consent (given when you submit our contact form) and our legitimate business interest in responding to professional enquiries. Under US law, we process data as a service provider in the context of potential professional engagement.

5. How We Share Your Data

We do not sell, rent, or trade personal data. We may share data only in the following limited circumstances:

• Service providers: Google LLC (contact form infrastructure via Google Forms; analytics via Google Analytics). Google processes data in accordance with its own privacy policy and applicable data processing agreements.
• Within our firm: Personal data may be accessed by our advisors in Singapore and the USA solely for the purpose of responding to your enquiry.
• Legal requirements: We may disclose data where required by law, court order, or regulatory authority in Singapore or the United States.

Any third-party service providers we engage are required to handle personal data in a manner consistent with the PDPA and applicable law.

6. Cross-Border Data Transfers

Our firm operates from Singapore (headquarters) and Seattle, Washington (USA). Personal data submitted through this website may be accessed by advisors in both jurisdictions. Where data is transferred internationally, we take reasonable steps to ensure it receives a standard of protection consistent with the PDPA.

Our use of Google services may involve data being processed on servers outside Singapore. Google participates in standard contractual and data protection frameworks applicable to such transfers.

7. Data Retention

We retain personal data submitted through enquiry forms for as long as is necessary to respond to your enquiry and, where an advisory engagement results, for the duration of that engagement and for seven (7) years thereafter, consistent with professional services recordkeeping obligations.

If no engagement results from an initial enquiry, we will retain your contact data for no longer than two (2) years, after which it will be deleted or anonymised.

8. Cookies and Tracking

This website may use cookies and similar technologies for analytics purposes (e.g. Google Analytics) to help us understand how visitors use the site. These cookies collect anonymised, aggregated information and do not identify you personally.

You may disable cookies through your browser settings. Disabling analytics cookies does not affect your ability to use this website or contact us.

9. Your Rights

Under Singapore's PDPA

• Access: You may request access to personal data we hold about you.
• Correction: You may request correction of inaccurate or incomplete personal data.
• Withdrawal of consent: You may withdraw consent to our use of your personal data at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Do Not Contact: You may request that we cease or limit use of your personal data for contacting you.

Under applicable US law (including California)

• Right to know: You may request information about the categories and specific pieces of personal data we have collected about you.
• Right to delete: You may request deletion of personal data we hold, subject to applicable exceptions.
• Right to correct: You may request correction of inaccurate personal data.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
• No sale of data: We do not sell personal data. We do not share personal data for cross-context behavioural advertising.

To exercise any of these rights, please contact our Data Protection contact below. We will respond within the timeframes required by applicable law (30 days under the PDPA; 45 days under CCPA).

10. Security

We implement reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Access to personal data is limited to advisors who require it to respond to your enquiry or deliver advisory services.

No method of transmission over the internet is completely secure. If you have reason to believe that your interaction with us has been compromised, please contact us immediately.

11. Children's Privacy

This website is intended for adult individuals and families seeking professional advisory services. We do not knowingly collect personal data from persons under the age of 18. If we become aware that we have collected personal data from a minor, we will delete it promptly.

12. Third-Party Links

This website may contain links to third-party websites (including LinkedIn profiles of our advisors). We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or business operations. The "Effective" date at the top of this page reflects the date of the most recent revision. Material changes will be communicated by updating this page.

14. Contact Us

For questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how we handle personal data, please contact:

If you are located in Singapore and your concern is not resolved to your satisfaction, you may contact the Personal Data Protection Commission (PDPC). If you are located in California, you may contact the California Attorney General's Office.