Legal / Privacy
What we collect, and what we do not.
This site takes no account, runs no third-party script, and asks you for nothing. It counts visits, and it remembers which pages you have read so it can suggest the next one. This is the whole of it.
What we collect
There is no account to create on this site, no form to fill in, and nothing you are asked to type. So the only personal data we hold is what you send us yourself, and what your browser reports while you read.
What you send us. You might email us, message us, call one of the numbers in the footer, or book a call through our scheduling link. If you do, we hold what you chose to write: your name, your address or number, and what you said. We use it to answer you.
What your browser reports. Which pages you opened and in what order. How long you stayed and how far down you scrolled. What referred you. Your screen size, your language, and the rough location your network address implies. We cannot tell who you are from it, and we do not try.
How you moved through the page. We use Microsoft Clarity, which records the session: where you clicked, how you scrolled, where the pointer went, and what changed on screen as you went. Played back it looks like a screen recording of your visit, and aggregated it shows which parts of a page people use and which they never reach. It is how we find the bit that is not working. Clarity masks what you type, and we never ask you to type anything here anyway.
Cookies and browser storage
Five things are stored in your browser. None of them is sold, shared or used to build a profile of you, and all five can be cleared at any time from your browser's settings.
_ga: a random identifier, so a reader who comes back is counted once. We set it ourselves, not a Google script. It lasts two years.
_f3ga: the current visit. It records when the visit started, how many came before it, and whether this one counted as engaged. Two years.
f3:visited: which pages you have already read, so the block at the bottom of each page can offer you one you have not. It is session storage, so it is gone when you close the tab.
_clck: Microsoft Clarity's identifier, so several visits are recognised as one person rather than several. It lasts a year.
_clsk: the Clarity session, so the pages you open in one sitting join into one recording. It lasts a day.
The site asks for no consent before setting the first two, and we would rather say so plainly than not mention it. If that matters to you, blocking cookies for this domain costs you nothing here: every page works without them.
Who else sees it
We do not sell, rent or trade personal data, and we do not use it for automated decision-making or profiling. There is no advertising network on this site.
Two companies receive what is described above. Google gets the page and scroll measurement, collected by our own code and sent on — there is no Google script on the page. Microsoft gets the session recording, and that one is their script running here, loaded from clarity.ms. Both handle it under their own terms, on servers that may be outside Singapore, and Clarity sends a beacon to Bing that lets Microsoft tie a visit to an advert if you arrived from one.
Two more, and both are things you choose to open. One case study embeds a YouTube video, and YouTube may set its own cookies once it loads. The booking link goes to cal.com, which handles your name and email under its own policy.
Our hosting provider keeps its own connection logs, as any host does.
How long we keep it
Measurement data is deleted automatically once the retention period set on our Google Analytics property expires. We keep no copy of our own.
An enquiry that does not turn into work is deleted within 12 months. If it does turn into work, it becomes part of the client record and is kept for as long as Singapore law requires us to keep business records.
Your rights
Under Singapore's Personal Data Protection Act you may ask us what personal data we hold about you, ask us to correct it, or withdraw a consent you have given. Email start@form-three.com and we will answer within 30 days.
You can opt out of the Google measurement with Google's Analytics Opt-out Browser Add-on, and out of the session recording at Microsoft Clarity's opt-out page. Blocking cookies for this domain, or any content blocker that stops clarity.ms loading, does both at once. None of it changes what the site does.
Changes, and who to ask
When this policy changes, the date at the top of the page changes with it. We do not keep an archive of old versions, so if a change matters to you, the date is the thing to watch.
This site is run by form-three Pte. Ltd., registered in Singapore under UEN 202321123E. Anything you want to ask about this policy goes to start@form-three.com.