Privacy Policy
1. Who We Are
This website, whalehound.ai (the "Site"), is owned and operated by ChainLabs Pte. Ltd. (UEN 201800320C), a company incorporated in Singapore with its registered address at 160 Robinson Road, #14-04 SBF Center, Singapore 068914 ("ChainLabs," "we," "us," or "our").
"WhaleHound by ChainLabs" is a brand and product line operated by ChainLabs. This Privacy Policy applies to the Site and to personal data we collect from Site visitors, such as individuals who submit a contact or demo request form. It does not apply to personal data that ChainLabs processes on behalf of its operator clients as part of the WhaleHound service (for example, wallet or transaction data supplied by a client for analysis). Where ChainLabs processes such data, it does so as a processor acting on the instructions of the client, who is the controller of that data, under a separate signed agreement. Any request relating to that data should be directed to the relevant operator client.
For the purposes of this Site, ChainLabs acts as the controller of the personal data described below.
2. Contact Details
General / privacy enquiries: info@chainlabs.com · +1 (628) 236-9769
Data protection point of contact
Contactable at info@chainlabs.com. This individual is responsible for ChainLabs' compliance with Singapore's Personal Data Protection Act 2012 ("PDPA") and, for EU-facing processing, with the General Data Protection Regulation (GDPR).
3. Information We Collect
We collect limited personal data through the Site, specifically:
- Contact and demo request form: name, business email address, company name, job title (if provided), phone number (if provided), and the content of your message or enquiry.
- Automatically collected data: IP address, browser type, device information, pages visited, and similar technical data collected via server logs and cookies (see our Cookie Policy).
- Correspondence: if you email us directly, we keep a record of that correspondence and any personal data it contains.
We do not knowingly collect special categories of personal data through the Site, and we do not require end-user KYC or personal identification data to operate the core WhaleHound wallet-analysis service.
4. How We Use Your Information
| Purpose | Data categories | Legal basis (GDPR) | Legal basis (PDPA) |
|---|---|---|---|
| Responding to your enquiry or demo request | Contact form data | Art. 6(1)(f) legitimate interest; or 6(1)(b) pre-contractual steps | Consent (form submission); deemed consent |
| Maintaining and developing business relationships | Contact form data, correspondence | Art. 6(1)(f) legitimate interest | Consent; legitimate interests exception |
| Sending marketing communications (opt-in) | Business email, name | Art. 6(1)(a) consent | Consent |
| Site security and diagnostics | Technical/log data | Art. 6(1)(f) legitimate interest | Legitimate interests exception |
| Complying with legal obligations | Any of the above | Art. 6(1)(c) legal obligation | Compliance with applicable law |
Where we rely on legitimate interests, we have weighed that interest against your rights and freedoms and concluded our processing is proportionate in a business-to-business context. You have the right to object to processing based on legitimate interests (see Section 8).
5. How We Share Your Information
We share personal data only as necessary, with:
- Service providers and processors supporting our operations (CRM, email and communications tools, hosting, analytics), bound by contractual confidentiality and data protection obligations.
- Professional advisers, such as legal, accounting, or audit firms, where necessary.
- Regulators or authorities, where required by law.
- A successor entity, in the event of a merger, acquisition, restructuring, or sale of assets, subject to appropriate safeguards.
We do not sell your personal data, and we do not share it with third parties for their own independent marketing purposes without your consent.
6. International Data Transfers
ChainLabs is based in Singapore. Where you submit personal data to us directly through the Site (for example, via our contact form), this is a direct collection by us as controller and does not, of itself, constitute a "transfer" of personal data subject to Chapter V of the GDPR.
Where we share personal data with service providers located outside Singapore or the European Economic Area (EEA), we take steps to ensure an adequate level of protection, which may include Standard Contractual Clauses approved by the European Commission, other recognised safeguards, or, for Singapore-based recipients, compliance with the PDPA's Transfer Limitation Obligation. There is currently no European Commission adequacy decision for Singapore. Contact us for more information about the safeguards applied to a specific transfer.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your personal data, we securely delete or anonymise it. In practice, this generally means:
- Contact and demo request data: for the duration of our business discussions, and generally up to 24 months afterward, unless you ask us to delete it sooner.
- Marketing consent records: until you withdraw consent, plus a reasonable period to evidence compliance.
- Technical/log data: for a limited period necessary for security and diagnostic purposes, as described in our Cookie Policy.
We may retain data for longer where required by law or to establish, exercise, or defend legal claims.
8. Your Rights
If you are in the European Economic Area or the United Kingdom, subject to applicable conditions, you have the right to request access, rectification, or erasure of your personal data, request restriction of processing, object to processing based on legitimate interests (including direct marketing), request data portability, and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority, or with the authority where our EU representative is established.
If you are in Singapore or otherwise subject to the PDPA, you have the right to withdraw consent to our collection, use, or disclosure of your personal data (subject to legal or contractual restrictions), request access to and correction of personal data we hold about you, and lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore.
To exercise any of these rights, contact us using the details in Section 2. We may need to verify your identity before responding.
9. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Data Breach Notification
In the event of a data breach affecting personal data for which we are the controller, we will assess the breach and, where required, notify the Singapore PDPC and/or the relevant EU supervisory authority within the timeframes required by applicable law, and notify affected individuals where the breach is likely to result in significant harm or a high risk to their rights and freedoms.
11. Cookies and Tracking Technologies
The Site uses cookies and similar technologies. Please see our Cookie Policy for full details on the categories of cookies we use, their purposes, and how you can manage your preferences.
12. Children's Privacy
The Site is intended for business audiences and is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when this Policy was last revised. Material changes will be notified through the Site.
14. Contact Us
If you have questions about this Privacy Policy or how we handle your personal data, please contact us at:
ChainLabs Pte. Ltd.
160 Robinson Road, #14-04 SBF Center, Singapore 068914
For EU-related enquiries, you may also contact our EU representative listed in Section 2.