Privacy

AdSwift Haven Pte. Ltd. ("we", "us", "our") respects your privacy. This policy explains how we collect, use, disclose, and protect personal data when you visit adswifthaven.pro or communicate with our studio.

Effective date: 11 August 2026 · Last updated: 11 August 2026

1. Data Protection Officer

Our Data Protection Officer (DPO) can be reached at [email protected]. Write to this address for any privacy-related enquiry, access request, or complaint.

2. Scope

This policy applies to personal data collected through our website, email correspondence, telephone calls, in-person visits to our studio, and any other channel where we interact with you in a professional capacity. It does not apply to third-party websites linked from our pages.

3. Personal data we collect

3.1 Website visitors

When you browse adswifthaven.pro, we may collect technical data including IP address, browser type, device type, operating system, referring URL, pages viewed, and timestamps. This data is collected through essential cookies and, if you consent, analytics cookies described on our Cookies page.

3.2 Correspondence

When you email or call us, we collect your name, contact details, organisation, and the content of your message. If you visit our studio, we may record your name and visit time for security and scheduling purposes.

3.3 Client engagements

During studio engagements we may process additional personal data including billing contacts, approval stakeholders, and content that identifies individuals (photographs, quotations, case references). The scope of processing is defined in engagement letters and confidentiality agreements.

4. Purposes of processing

We process personal data for the following purposes:

Operating and securing our website
Responding to enquiries and scheduling briefings
Delivering studio services under contract
Managing billing and accounts
Complying with legal obligations in Singapore
Improving website content and usability (with consent for analytics)

We do not sell personal data. We do not use personal data for automated decision-making that produces legal or similarly significant effects.

5. Legal bases

Under the Personal Data Protection Act 2012 (PDPA) of Singapore, we rely on:

Consent — for analytics cookies and optional marketing communications
Contractual necessity — to perform studio engagements you have commissioned
Legitimate interests — to operate our business, secure our premises, and respond to enquiries, balanced against your rights
Legal obligation — where Singapore law requires retention or disclosure

6. Disclosure to third parties

We may share personal data with:

Hosting and infrastructure providers who process data on our instructions
Production partners involved in your project, under confidentiality obligations
Professional advisers (legal, accounting) when necessary
Authorities when required by law or court order

Third parties are permitted to process data only for the purposes we specify and must protect it appropriately. A list of key sub-processors is available on request to the DPO.

7. International transfers

Our primary systems are located in Singapore. Where data is transferred outside Singapore—for example, to cloud services with regional redundancy—we ensure appropriate safeguards are in place consistent with PDPA requirements, including contractual clauses with recipients.

8. Retention

We retain personal data only as long as necessary for the purposes described:

Enquiry correspondence: up to twenty-four months after last contact unless an engagement follows
Client project files: duration of engagement plus seven years for legal and accounting purposes
Website analytics (if consented): aggregated reports retained up to twenty-six months; raw logs rotated sooner
Cookie consent records: twelve months, then refreshed on next visit

When retention periods expire, data is securely deleted or anonymised.

9. Your rights

Under the PDPA you may:

Request access to personal data we hold about you
Request correction of inaccurate data
Withdraw consent where processing is consent-based (without affecting prior lawful processing)
Request information about how your data has been used or disclosed in the past year

Submit requests to [email protected]. We respond within thirty days unless an extension is permitted by law. We may verify your identity before fulfilling a request.

10. Security

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of data processed. Measures include access controls, encrypted transmission (TLS), secure storage for client materials, and staff training on confidentiality. No system is entirely immune to breach; if we become aware of a breach affecting your data, we will notify you and the Personal Data Protection Commission where required.

11. Cookies and tracking

See our Cookies page for detailed information about cookies, how to manage preferences, and the relationship between cookie consent and map embeds on this site.

12. Children

Our website and services are directed at business professionals. We do not knowingly collect personal data from individuals under eighteen. If you believe we have collected such data, contact the DPO for prompt deletion.

13. Changes to this policy

We may update this policy to reflect changes in law, technology, or our practices. Material changes will be noted on this page with an updated effective date. Continued use of the website after changes constitutes acknowledgement of the revised policy for website-related processing.

14. Complaints

If you are dissatisfied with our handling of your personal data, contact the DPO first. If the matter is not resolved satisfactorily, you may lodge a complaint with the Personal Data Protection Commission of Singapore (pdpc.gov.sg).

15. Contact

AdSwift Haven Pte. Ltd.
115 Amoy Street, #05-02
Singapore 069935
Email: [email protected]
Telephone: +65 6209 7315

16. Definitions

Personal data means data about an individual who can be identified from that data or from that data and other information to which we have or are likely to have access. Processing means any operation performed on personal data, including collection, storage, use, disclosure, and deletion. Data intermediary means an organisation that processes personal data on our behalf under a written contract.

17. Collection practices in detail

We collect personal data by fair and reasonable means. We do not collect data that is not needed for the stated purpose. When you telephone the studio, we may note your number and name to return your call; we do not record calls unless you are notified and consent where required.

Email attachments you send may contain metadata (author names, revision history). We do not extract metadata for unrelated purposes. Attachments are stored within project folders with access restricted to assigned team members.

Website server logs rotate automatically. Raw logs are retained for up to ninety days for security investigation, then deleted or aggregated. Aggregated statistics contain no identifiable individuals.

18. Marketing communications

We do not send unsolicited marketing email. If you engage us professionally, we may occasionally share studio updates or relevant editorial notes—you may opt out at any time by writing to the DPO. Opt-out does not affect transactional correspondence about active engagements.

19. Data breach notification

In the event of a data breach likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission as required by the PDPA. Notification includes the nature of the breach, data involved, and steps we are taking. We maintain an internal incident response procedure reviewed annually.

20. Access request procedure

To submit an access request, email [email protected] with sufficient detail for us to locate your records. We may request identity verification (government-issued ID or corporate authorisation letter). We provide data in a commonly used electronic format unless you request otherwise. A reasonable fee may apply for manifestly unfounded or excessive requests as permitted by law.

21. Third-party websites

Links from our Site to external websites are provided for convenience. Those sites operate under their own privacy policies. We encourage you to read their policies before submitting personal data. Embedding Google Maps subject to your cookie consent is governed by Google's terms and privacy policy.

22. Employee and contractor obligations

Studio staff and contractors with access to personal data receive confidentiality training and are bound by contractual obligations consistent with this policy. Access is granted on a need-to-know basis and revoked when engagements end.

23. Accuracy of personal data

We take reasonable steps to ensure personal data is accurate and complete. If you believe our records are incorrect, contact the DPO with supporting detail. We correct verified inaccuracies promptly and notify recipients of disclosed data where required.

24. Anonymisation

Where possible we anonymise analytics data so individuals cannot be re-identified. Anonymised datasets may be retained indefinitely for trend analysis. Anonymisation is irreversible; anonymised data is no longer personal data under the PDPA.

25. Processing records

We maintain internal records of processing activities as required by good practice under the PDPA. These records describe categories of data, purposes, recipients, retention, and safeguards. Summary information is available to the DPO and regulators on request.

26. Minimisation in practice

We ask for personal data only when needed. Briefing emails that include unnecessary attachments or distribution lists are handled carefully—we extract what the project requires and avoid copying unrelated contacts into project files.

27. Policy review cycle

This policy is reviewed at least annually and whenever material changes occur in our processing activities or applicable law. The DPO signs off on revisions before publication.

Previous versions of this policy are not published online. If you require historical versions for regulatory purposes, contact the DPO with your request.