Privacy Policy

Your data, handled plainly

How PlanckOneFoleyAI and Mocha Chai Laboratories collect, use, and protect the information you share with us — and how to exercise your rights under GDPR and Singapore's PDPA.

Last updated: 25 August 2026

1. Who we are

PlanckOneFoleyAI is a product of Mocha Chai Laboratories ("we", "us", "our"), based in Singapore. For the purposes of GDPR, Mocha Chai Laboratories is the data controller responsible for the personal data described in this policy. You can reach us at contactus@planckone.com for any privacy question or request.

2. What we collect

We only collect personal data that you choose to give us, or that's generated automatically by visiting the site:

Information you submit

  • Contact form (contact-us.html): name, company, email address, industry, and your message.
  • Subscribe form (subscribe.html): name, company, email address, and industry.

Information collected automatically

  • Standard web server logs from our hosting provider (IP address, browser type, referring page, timestamps) — used for security and troubleshooting, not for tracking individuals.
  • A single, strictly-necessary entry in your browser's local storage that remembers you've seen the privacy notice below, so it doesn't reappear on every visit. This never leaves your browser and isn't linked to any other data we hold.

We do not use advertising or analytics cookies, and we do not track you across other websites.

3. Why we process it, and our legal basis

  • Responding to your enquiry (contact form) — legitimate interest in answering questions you've directly asked us, per GDPR Art. 6(1)(f).
  • Sending you product updates (subscribe form) — your explicit consent, given by ticking the consent checkbox before submitting, per GDPR Art. 6(1)(a). You can withdraw this consent at any time.
  • Keeping the site secure (spam and abuse prevention on our forms) — legitimate interest, per GDPR Art. 6(1)(f).

4. Who we share it with

We don't sell your data. It's shared only with the service providers that help us run the site and respond to you:

  • Hosting provider (HostGator): hosts the site and delivers form submissions to our inbox by email. HostGator is based in the United States, so form data may be processed outside the European Economic Area; we rely on our provider's own security and compliance commitments for that transfer.
  • Google Fonts: the site loads typefaces from Google's servers. As with any external resource, your browser sends Google your IP address and basic request headers as part of that request — Google's handling of this data is governed by Google's own privacy policy.
  • Mocha Chai Laboratories staff who need the information to respond to your enquiry or manage the update list.

5. How long we keep it

We keep contact-form enquiries only as long as needed to resolve them, and subscribe-form data for as long as you remain subscribed. If you ask us to delete your data, or unsubscribe, we'll remove it from active use within a reasonable time, except where we're required to keep records for legal or accounting reasons.

6. Your rights under GDPR

If you're in the EU/EEA (or anywhere GDPR-equivalent rights apply), you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request erasure of your data ("right to be forgotten").
  • Restrict or object to how we process your data.
  • Receive your data in a portable format.
  • Withdraw consent at any time, without affecting processing already carried out.
  • Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email contactus@planckone.com — we'll respond within one month.

7. Singapore Personal Data Protection Act (PDPA)

Mocha Chai Laboratories is based in Singapore, so alongside GDPR (for visitors in the EU/EEA), we also handle personal data in line with Singapore's Personal Data Protection Act 2012 ("PDPA"), enforced by the Personal Data Protection Commission ("PDPC"). In practice, this means:

  • Consent Obligation: we collect, use, or disclose your personal data only with your consent (e.g. ticking the consent checkbox before submitting a form), or where the PDPA otherwise permits it.
  • Purpose Limitation: we only use your data for the purposes stated in this policy — responding to your enquiry, or sending you updates you've opted into.
  • Notification Obligation: this policy is how we notify you of those purposes, at or before the point we collect your data.
  • Access & Correction: you can ask us what personal data we hold about you, and request corrections — the same process as the GDPR rights above.
  • Accuracy Obligation: we make reasonable efforts to keep the data you give us accurate and complete for the purposes we use it for.
  • Protection Obligation: we maintain reasonable security arrangements to protect your data against unauthorised access, collection, use, or disclosure (see Security, below).
  • Retention Limitation: we stop retaining your data once it's no longer reasonably needed for the purpose it was collected for, or for legal/business record-keeping.
  • Transfer Limitation: where your data is processed outside Singapore (for example, by our US-based hosting provider), we take steps to ensure it receives a standard of protection comparable to the PDPA.
  • Data Breach Notification: if a data breach occurs that's likely to result in significant harm, we'll notify the PDPC and affected individuals as required by law.

If you're in Singapore and unsatisfied with how we've handled your personal data, you can lodge a complaint with the Personal Data Protection Commission (PDPC) after raising it with us first at contactus@planckone.com.

8. Security

We use HTTPS encryption site-wide, server-side validation on every form field, and spam-prevention measures (a hidden honeypot field and a simple challenge question) to reduce abuse. No method of transmission or storage is 100% secure, but we take reasonable technical and organizational steps to protect your information.

9. Children's privacy

This site is intended for professionals in film, television, and post-production, and isn't directed at children. We don't knowingly collect personal data from anyone under 16.

10. Changes to this policy

We may update this policy from time to time — the "Last updated" date at the top will always reflect the most recent revision. Material changes will be reflected here before they take effect.

11. Contact us

Questions about this policy or your data? Email contactus@planckone.com.

This policy is provided as a good-faith summary of our data practices and is not a substitute for independent legal advice. If you operate this site commercially, we recommend having it reviewed by a qualified data protection professional for your specific jurisdiction.

We don't use advertising or analytics cookies. Only your browser remembers you've seen this notice. See our Privacy Policy for details.