Legal

Privacy Policy

Last Updated: 14 April 2025

1. Data Controller

Padang Digital Pte. Ltd. is the data controller for personal data collected through this website and during our engagement process. Our registered address is 78 Shenton Way, #21-09, Singapore 079120.

2. What Personal Data We Collect

We collect the following categories of personal data:

• Contact details: name, email address, and phone number (where provided), collected via the enquiry form on our website.
• Message content: the text of any message you submit through our contact form.
• Usage data: anonymised information about how visitors interact with our website, collected through analytics tools where consent has been given.
• Cookie data: technical information about your browser session and cookie preferences, stored locally in your browser.

We do not collect sensitive personal data (as defined under the PDPA) through this website.

3. Legal Basis and Purpose of Processing

We process personal data on the following legal bases:

• Consent: for analytics and marketing cookies, where you have indicated your preference.
• Legitimate interest: to respond to enquiries submitted through our contact form.
• Contract: to fulfil obligations arising from any engagement agreement entered into with you or your organisation.
• Legal obligation: where processing is required to comply with applicable Singapore law.

4. How We Use Personal Data

We use the personal data we collect to:

• Respond to your enquiries and correspond with you about potential or current engagements.
• Maintain records of our client engagements as required by applicable law.
• Understand how our website is used and improve its content, where analytics consent has been given.
• Comply with any legal obligations applicable to our business in Singapore.

We do not use personal data submitted through our contact form for unsolicited marketing. If you enquire about our services, we may follow up by email or phone in connection with that enquiry.

5. Data Retention

We retain personal data for the following periods:

• Enquiry contact data: up to 12 months from the date of the initial enquiry, unless you proceed to a formal engagement.
• Engagement-related data: for the duration of the engagement plus 5 years, in accordance with standard business record-keeping practice under Singapore law.
• Analytics data: in anonymised, aggregated form for up to 26 months.

When the retention period expires, we delete or anonymise the relevant data.

6. Sharing Personal Data

We do not sell personal data. We may share data in limited circumstances:

• Service providers: we use third-party tools to operate our website (including web hosting and analytics). These providers process data only on our instructions and are bound by appropriate data processing agreements.
• Legal requirements: we may disclose data where required by Singapore law or by order of a competent authority.
• Business transfer: if Padang Digital undergoes a significant business change, personal data may be transferred as part of that process, subject to the same protections described in this policy.

We do not transfer personal data outside Singapore except where a recipient country provides an adequate level of protection, or where we have taken appropriate contractual safeguards.

7. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted data transmission (HTTPS) for all website communications.
• Restricted access to personal data within our organisation on a need-to-know basis.
• Regular review of our data handling procedures.

In the event of a data breach that is likely to result in significant harm to individuals, we will notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with the PDPA Notification of Data Breaches Regulations.

8. Cookies

Our website uses cookies. Some are essential to site operation; others require your consent. For full details, see our Cookie Policy. You can manage your cookie preferences at any time through that page.

9. Your Rights Under the PDPA

Under the Singapore Personal Data Protection Act, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete personal data.
• Withdrawal of consent: withdraw consent to the processing of your personal data where consent is the legal basis, subject to any legal or contractual obligations that require us to retain the data.
• Data portability: in certain circumstances, receive your personal data in a portable format.

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.

If you are dissatisfied with how we handle your personal data, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal data.

11. Children's Privacy

Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website after a change is published constitutes acceptance of the updated policy. For material changes, we will take reasonable steps to notify relevant individuals directly.

13. Contact

For any questions about this policy or to exercise your rights, please contact our data management team: