Last updated: 11 October 2026
Shenton Research is based in Singapore. This policy explains how we collect, use, disclose and protect personal data through shentonresearch.com, in line with Singapore's Personal Data Protection Act 2012 (PDPA). It also explains how you can access or correct your data, or withdraw your consent.
Our Data Protection Officer handles questions, requests and complaints about personal data. You can reach them through our contact form; please start your message with “Data Protection Officer”.
Contact form. Your name, email address and message. We also record your IP address to limit spam.
Report request form. Your name, job title, company, fund type and company email address, the report you asked for and the page you asked from. We also record your IP address to limit spam.
Website visits. We use Google Analytics to understand how the site is used. It records the pages you view, how you reached the site, your device and browser type, and your approximate location, and uses cookies to tell visits apart. Our web server also keeps standard access logs, which include your IP address, the pages requested, your browser type and the time of the request.
Security checks. Our forms use Cloudflare Turnstile to check that a person, not a bot, is submitting them. All traffic to the site passes through Cloudflare, which protects it against attacks.
We do not ask for, and do not want, sensitive personal data such as NRIC numbers, health information or financial account details. Please do not include them in your message.
When you submit our contact form or report request form, you consent to us collecting, using and disclosing the data in the form for the purposes set out below. If you give us personal data about another person, please make sure they have agreed to it. Analytics and server log data are used to improve the site and keep it secure, as the PDPA allows.
We will not use your data for any other purpose without telling you first and, where needed, asking for your consent. We do not sell your personal data, and we do not use it for advertising. We do not send marketing messages by phone call, SMS or fax.
Form submissions are stored on our own servers. We use a small number of service providers to run the site:
We may also disclose personal data where the law requires or allows it.
Our service providers may process data outside Singapore. When this happens, we take steps to make sure your data receives a standard of protection comparable to the PDPA, for example through the providers' contractual data protection terms.
Google Analytics sets cookies (named _ga and _ga_*) to count visits and tell visitors apart. Cloudflare may set cookies needed for security. We do not use advertising cookies. You can block or delete cookies in your browser settings; the site will still work.
We use reasonable security measures to protect personal data from unauthorised access, use, disclosure, change or loss. The site is served only over encrypted connections, and access to form submissions is limited to the people who need it. No method of transmission or storage is completely secure, but we review our measures regularly.
If a data breach is likely to cause you significant harm, or is of a significant scale, we will notify the Personal Data Protection Commission and, where required, the people affected.
We keep personal data only as long as it is needed for the purposes above, or for legal or business reasons. When it is no longer needed, we delete it or remove the details that identify you. Server logs are kept for a limited period for security and troubleshooting.
You can ask us what personal data we hold about you and how it has been used or disclosed in the past year, and ask us to correct any errors. Send your request to our Data Protection Officer through our contact form. We will reply within 30 days. If we need longer, we will tell you within that time when we expect to reply. We may charge a reasonable fee for an access request, and will tell you the amount before we proceed.
Please help us keep your data accurate by telling us when your details change.
You can withdraw your consent at any time by writing to our Data Protection Officer through our contact form. You can also unsubscribe from the Daily Digest using the link in any digest. We will tell you what withdrawing means for you (for example, we can no longer send you reports) and act on your request within a reasonable time. Withdrawing consent does not affect our right to keep data where the law requires or allows it.
If you have a concern about how we handle your data, please contact our Data Protection Officer first and we will do our best to resolve it. You may also contact the Personal Data Protection Commission at www.pdpc.gov.sg.
This site links to other websites, including Smartkarma, LinkedIn and our distribution partners. Their own privacy policies apply when you visit them.
We may update this policy from time to time. The date at the top shows when it last changed.