OTAMA Capital Fund (“OTAMA”, “we”, “us”, “our”) is a single-family office incorporated and operating in Singapore. This Privacy Policy describes how we collect, use, store, and protect personal information obtained through otamacapital.com (the “Site”).
We take privacy seriously. This policy is written to be read — not filed and forgotten.
For information about how we use cookies, please see our separate Cookie Policy.
1. Who We Are
Data Controller
OTAMA Capital Fund
Singapore
For the purposes of the General Data Protection Regulation (GDPR) and the Singapore Personal Data Protection Act 2012 (PDPA), OTAMA Capital Fund is the data controller responsible for personal data collected through this Site.
2. What Personal Data We Collect
2.1 Contact form submissions
When you use the “Register an Introduction” form on the Contact page, we collect:
Full name
Email address
Company or affiliation (optional)
Nature of correspondence (selected from a list)
A brief note or message
This data is submitted voluntarily. You are not required to provide it.
2.2 Cookies and analytics
The Site uses cookies and analytics tools to operate correctly and to understand how visitors use it. For full details of what is collected, how it is used, and how to manage your preferences, see our Cookie Policy.
2.3 Data we do not collect
We do not collect payment information, government identification, or sensitive personal data as defined under GDPR Article 9 or PDPA. We do not run advertising networks or sell data to third parties.
3. How We Use Your Data
We use personal data only for the purposes for which it was provided:
Contact form data is used to read your introduction and, where appropriate, to respond. Submissions are not stored in our WordPress admin panel.
Cookie and analytics data is used to understand how the Site performs and how visitors navigate it, so we can improve the experience. See our Cookie Policy for details.
We do not use your data for automated decision-making or profiling.
We do not use your data for marketing or unsolicited outreach.
4. Legal Basis for Processing (GDPR)
For visitors located in the European Economic Area (EEA) or United Kingdom, our legal bases for processing personal data are:
Legitimate interests (Article 6(1)(f)) — for contact form submissions, where our legitimate interest is to receive and respond to correspondence from operators, founders, and managers.
Consent (Article 6(1)(a)) — for non-essential cookies and analytics. You may withdraw consent at any time via the cookie preferences panel. See our Cookie Policy for details.
For visitors in Singapore, we process personal data in accordance with the purposes notified under the PDPA, with your deemed consent where data is voluntarily provided for a stated purpose.
5. Data Retention
We retain personal data only for as long as necessary for the purposes set out in this policy:
Contact form submissions — retained for up to 2 years from the date of submission, or until the correspondence relationship concludes, whichever is earlier.
Analytics and cookie data — see our Cookie Policy for retention periods.
You may request deletion of your data at any time (see Section 7).
6. Who We Share Data With
We do not sell, rent, or trade personal data. We may share data with a limited number of service providers who help us operate the Site:
Hosting provider — the Site is hosted on a third-party web server. Server logs may contain IP addresses and request data as a standard function of web hosting.
Analytics provider — anonymised usage data is processed by our analytics platform. No personally identifiable data is shared. See our Cookie Policy for details.
Email delivery — if we respond to a contact form submission, the reply is sent via standard email. No bulk email platform is used.
All service providers are required to handle data in accordance with applicable law. We do not transfer personal data outside Singapore or the EEA to countries that do not provide an adequate level of data protection, unless appropriate safeguards are in place.
7. Your Rights
Under GDPR (EEA / UK residents)
You have the right to:
Access — request a copy of the personal data we hold about you.
Rectification — request correction of inaccurate or incomplete data.
Erasure — request deletion of your personal data (“right to be forgotten”).
Restriction — request that we limit processing of your data in certain circumstances.
Portability — receive your data in a structured, machine-readable format.
Object — object to processing based on legitimate interests.
Withdraw consent — for cookie-based processing, at any time via the cookie preferences panel.
To exercise any of these rights, contact us at office@otamacapital.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.
Under PDPA (Singapore residents)
You have the right to:
Access — request access to personal data we hold about you and information about how it has been used or disclosed in the past year.
Correction — request correction of personal data that is inaccurate, incomplete, or misleading.
Withdrawal of consent — withdraw consent for collection, use, or disclosure of your personal data. Note that withdrawal may affect our ability to respond to your correspondence.
To exercise these rights, contact our Data Protection Officer.
8. Security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include:
HTTPS encryption on all pages of the Site.
Access controls limiting who can view contact form submissions.
Regular software and security updates to the Site platform.
No method of transmission over the internet is completely secure. While we take appropriate precautions, we cannot guarantee absolute security.
9. Third-Party Links
The Site may contain links to third-party websites (for example, portfolio companies). This Privacy Policy applies only to otamacapital.com. We are not responsible for the privacy practices of any third-party sites.
10. Children’s Privacy
The Site is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. Material changes will be noted at the top of the policy. We encourage you to review this policy periodically.
12. Contact & Complaints
Data Controller & DPO Contact
OTAMA Capital Fund
Singapore
For GDPR complaints, you may also contact your national data protection authority. For PDPA complaints, you may contact the Personal Data Protection Commission Singapore (pdpc.gov.sg).
Effective date: 3 May 2026
Last updated: 3 May 2026