Privacy

Personal data protection

Build Brand Now ([email protected]) operates buildbrandnow.life and the Keong Saik studio. This policy explains how we handle personal data under the Personal Data Protection Act 2012 (PDPA) of Singapore and related guidance from the Personal Data Protection Commission.

We act as a data controller for information collected through this website, email, telephone, and in-person visits. When we process data on behalf of clients during engagements, we act as a data intermediary under client instructions; that processing is governed by contract, not this policy alone.

Categories we may collect: identity and contact data (name, employer, email, phone); brief and project data you voluntarily provide; technical data (IP address, browser type, cookie identifiers); correspondence records; appointment and access logs for studio visits.

We collect data because you contact us, visit the site, consent to optional cookies, or enter our studio. We do not buy personal data lists or scrape social profiles for prospecting.

Purposes: respond to enquiries; perform contracts; operate website security; embed maps when you consent to functional cookies; maintain archives required by law or contract; improve site accessibility based on aggregated technical logs if analytics cookies are accepted.

Legal bases under PDPA include consent (optional cookies, marketing if ever offered), contractual necessity (delivering commissioned work), legitimate interests (security, fraud prevention, replying to unsolicited business enquiries at a proportionate level), and legal obligation (tax, regulatory retention).

We do not sell personal data. Recipients may include: hosting and email providers; translation partners bound by confidentiality; professional advisers under privilege; authorities when required by law.

International transfers occur when cloud services store data outside Singapore. We assess safeguards and vendor terms before engagement.

Retention: enquiry emails—twenty-four months unless a project follows; project archives—per contract, typically three to seven years for regulated clients; cookie consent records—twenty-six weeks minimum; server logs—ninety days unless security incident extends retention.

Your rights: access, correction, withdrawal of consent (without affecting prior lawful processing), and complaint to the PDPC. Contact [email protected] with requests. We respond within thirty days where PDPA requires.

Security: TLS for the site; access controls in the studio; staff confidentiality undertakings. No method is perfectly secure; we notify affected individuals and PDPC of eligible breaches as required.

Children: services are business-directed; we do not knowingly collect data from persons under eighteen without guardian involvement.

Automated decisions: we do not use profiling or automated decision-making with legal or similarly significant effects on individuals visiting this site.

Third-party links: linked sites have their own policies. Our footer links to legal, terms, and cookies pages on this domain only.

Changes: we post updates here with a revised date. Material changes may be highlighted on the cookies page.

Cookie detail is in the cookies policy. Google Maps embeds appear on every page.

Telephone calls may be logged for note-taking if you are told at the start; recordings require explicit consent.

Studio CCTV may operate in common areas for security; signs are posted at entry.

If you are a client end-user whose data we process as intermediary, direct access requests to your organisation first; we will assist them under our data processing terms.

Scope of this policy: this document applies to visitors of buildbrandnow.life, recipients of studio correspondence, and individuals who attend appointments at our Keong Saik premises. It does not replace client-specific data processing agreements where we handle end-user data on a client's behalf during commissioned work.

Accuracy and minimisation: we ask only for information needed to respond to an enquiry or perform contracted services. If you provide excess material in a brief, we store it only for the engagement period unless you request earlier deletion and no legal retention applies.

Marketing communications: we do not send promotional email without consent. Operational messages about an active project are not marketing. If we ever introduce a newsletter, it will be opt-in with a separate unsubscribe mechanism.

Email security: messages to [email protected] and [email protected] are transmitted over TLS where supported by your mail provider. We do not request passwords, payment card numbers, or government identifiers by email.

Studio visits: when you attend 39 Keong Saik Road, we may record your name, host, and time of entry in a visitor log for fire safety and access control. Logs are kept for twelve months unless an incident requires longer retention.

Photography on premises: we do not photograph visitors without consent. Internal studio photography used on this website is taken during working sessions without identifiable client materials visible.

Vendor management: hosting, email, translation, and accessibility partners receive data only to perform their function. Contracts require confidentiality, breach notification, and deletion at end of service where feasible.

Cross-border transfers: if a vendor stores data outside Singapore, we review adequacy of protection, contractual clauses, and whether the transfer is necessary. You may request details of major subprocessors by writing to [email protected].

Data breach response: if we become aware of a breach likely to cause significant harm, we assess notification duties under PDPA, inform affected individuals where required, and document remedial steps. We maintain an internal incident log.

Access request procedure: email [email protected] with sufficient detail to locate your records. We may verify identity before disclosure. We do not charge a fee for reasonable requests unless a request is manifestly unfounded or excessive.

Correction requests: if data we hold is inaccurate, tell us and we will correct it promptly where we agree it is wrong. Disputed factual statements in client materials are referred to the client data owner when we act as intermediary.

Withdrawal of consent: you may withdraw consent for optional cookies via the footer Cookie settings control. Withdrawal does not affect prior lawful processing. For other consents, email [email protected].

Complaints: you may contact the Personal Data Protection Commission if you believe we have handled your data unlawfully. We encourage you to contact us first so we can resolve concerns quickly.

Records of processing: we maintain an internal register of major processing activities covering website operations, enquiry handling, and project archives. Summaries are available on request for enterprise procurement reviews.

Special categories: we do not seek sensitive personal data through this website. If you voluntarily include health or other sensitive information in a brief, we treat it as confidential client material and limit access to staff who need it for the project.

Automated log analysis: server logs may be reviewed manually for security anomalies. We do not use automated profiling to make decisions about site visitors.

Linking to third parties: our pages link to Google Maps and may link to client-approved public documents. Those services operate under their own policies. We do not control cookies set by Google when maps load.

Retention schedule summary: enquiry correspondence—twenty-four months; signed project files—per contract; cookie consent—twenty-six weeks minimum; visitor logs—twelve months; security logs—ninety days unless extended for investigation.

Policy review: we review this policy at least annually and after material changes to our processing. The date at the foot of this page indicates the latest revision.

Employee and contractor data: staff and freelancers who work at Build Brand Now receive separate employment or contractor privacy notices. This public policy focuses on website visitors and client contacts.

Anonymous analytics: if analytics cookies are enabled in future builds, we will use aggregated metrics without attempting to identify individuals across unrelated sessions. IP addresses will be truncated where feasible.

Paper records: limited paper notes may be kept during studio sessions. Paper is stored in locked cabinets and shredded when digitised or when retention ends.

Your responsibilities: please provide accurate contact details and notify us of changes. Do not send passwords or payment card numbers by email. Use appointment scheduling by phone if you need to share sensitive documents.

Third-party embeds on this site: Google Maps appears on every page with a fixed studio pin at 39 Keong Saik Road. Fonts may load from Google Fonts. These providers may process IP addresses and device data under their own policies. We select embeds that minimise optional tracking where alternatives exist.

Consent records: when you use the cookie banner, we store your category choices locally and in a first-party cookie named sg_studio_consent. The record includes essential, functional, and analytics flags plus a timestamp. We retain consent evidence for at least twenty-six weeks to demonstrate compliance if queried.

Data minimisation in projects: during brand engagements we ask clients to redact customer lists and financial detail from shared briefs unless strictly necessary. We return or delete working files at project close according to the contract schedule.

Subject access requests from former clients: if you worked with us under a company account, write from your corporate email or provide authorisation from your employer so we can verify identity before releasing project correspondence.

Updates to subprocessors: if we change hosting or email providers in a way that affects where data is stored, we update this policy and notify active retainer clients by email where contact details are available.

Data Protection Officer contact: [email protected]. Postal: 39 Keong Saik Road, #02-01, Singapore 089142.

Last updated: 21 August 2026.