What we collect when you visit, enquire or use our free tools, why, who else sees it, how long we keep it, and your rights.
This notice explains how JCDC Ventures Pte. Ltd., trading as Fortitude21, handles personal data. We sell to businesses only, so most of what we hold is the work contact details of people at our customers and suppliers. The site is not aimed at children.
Last updated: 8 October 2026.
The form asks for your name, company, work email, country, the product category, the volume and your message. With it we record the page you sent it from, the language of that page, whether you chose email, WhatsApp or copy, and the country Cloudflare reads from your IP address. Please do not put health data or other sensitive information in the message.
Giving us these details is your choice. Without a working email address we cannot reply.
We keep your emails and WhatsApp messages and our replies. WhatsApp receives nothing unless you choose to message us there.
Cloudflare, our host, processes your IP address, browser and device details, the address you request and the time, to deliver the pages and protect the site from attacks.
Cloudflare Web Analytics counts visits for us: the page, the referring site, the browser and operating system type, the country and page-load times. It sets no cookie, uses no identifier and reports totals, not individuals.
We serve our fonts from our own domain, so loading a page sends nothing to Google.
We use the inputs you send to a calculator to work out the answer and do not store them. Our usage log keeps the tool name, the type of caller (for example a Python script or an AI assistant), whether the call worked and the country. It keeps no IP address and no user agent. Cloudflare processes your IP address to deliver the response.
We may email people whose job involves buying containers or dangerous goods packaging. We use their name, job title, employer, work email, work phone and public business profile, taken from company websites, LinkedIn, trade directories, trade fairs and business data providers such as Apollo.io. Every such email says where we found the address and how to tell us to stop.
We keep the contact persons, quotes, orders, delivery details and invoices for each order.
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and preparing a quote | Legitimate interests: replying to a business request |
| Following up the enquiry and managing the sales relationship | Legitimate interests |
| Learning which pages lead to enquiries | Legitimate interests |
| Fulfilling orders, invoicing, shipping and after-sales | Legitimate interests, because our contract is with your employer |
| Keeping the business and tax records Singapore law requires | Legitimate interests |
| Delivering the website and protecting it from attacks | Legitimate interests |
| Counting visits to the site | Legitimate interests |
| Running the free API and MCP server | Legitimate interests |
| Emailing people at businesses that may buy from us | Legitimate interests, and only where the email law of your country allows it without prior consent |
| Bringing or defending legal claims | Legitimate interests |
Our legitimate interests are replying to business enquiries, selling our containers to businesses and keeping the site secure. We make no decisions about anyone by automated means.
Under Singapore’s Personal Data Protection Act, business contact information given for business purposes falls outside most of the Act’s consent and notice rules. We apply this notice to it anyway.
We do not sell personal data.
We are based in Singapore, and our staff read enquiries there. Cloudflare stores and serves data across its global network, including the United States. Microsoft keeps our mailbox in its data centres; we can tell you the region on request.
If you are in the EU or the UK, sending us an enquiry is direct collection by a Singapore company. When we pass data on to Cloudflare or Microsoft in the United States, we rely on their certification under the EU-US Data Privacy Framework and its UK Extension, and on the Standard Contractual Clauses in their data processing terms.
For readers in Japan: the countries involved are Singapore, where the Personal Data Protection Act 2012 protects personal data, and the United States, which has no single federal data protection law. Both providers are bound by contract to protect the data to a standard equivalent to Japanese law, and we will give you the details of these measures on request.
To use any of these rights, email Clarence@fortitude21.com. We reply within one month and charge nothing.
Direct marketing. You can tell us at any time, free of charge, to stop emailing you about our products. Reply “stop” to any of our emails or write to the address above, and we stop at once.
You can also complain to the data protection authority where you live or work:
The site sets no cookies of its own and stores nothing on your device. It runs no advertising and no cross-site tracking.
Cloudflare may set a short-lived security cookie (__cf_bm or cf_clearance) when it checks whether a visitor is a bot. The site needs these to stay protected, so they need no consent.
The Cloudflare Web Analytics script described in section 2 sets no cookie. A content blocker or your browser’s tracking protection stops it, and the site works the same without it.
Every page and API call uses HTTPS. Only the staff who handle sales can read enquiries, and our providers are bound by data processing terms.
We update this notice when our handling of data changes, and change the date at the top.