designam.sg

Menu

Privacy Policy

Last Updated: 1/9/2026

Draft notice (remove before publishing): This is a working draft built around Singapore’s Personal Data Protection Act (PDPA), since that is DesignAm’s current operating basis. It is written in generic, extensible language so it doesn’t need a full rewrite if DesignAm later markets to other jurisdictions (e.g. the EU) — but it does not yet include GDPR-specific mechanisms (EU representative, granular cookie consent, etc.), which are not required unless and until DesignAm deliberately targets clients outside Singapore. This is not legal advice; have a Singapore-qualified lawyer review before publishing, especially once real client and visitor data starts flowing through the Site.

1. Introduction

[Legal Entity Name / Sole Proprietor Name], operating as “DesignAm” (“DesignAm”, “we”, “us”, “our”), is committed to protecting the personal data of individuals who interact with our website, designam.sg (“the Site”), and our services, in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”).

This Privacy Policy explains what personal data we collect, why, how we use and protect it, and the rights available to you. It applies to:

  • Visitors to the Site (e.g. enquiring through our contact form); and
  • Our own use of tools and services to run the Site and deliver our services.

It does not cover how an individual client business (e.g. a business we build or manage a website for) handles the personal data of its own customers — that is governed by that client’s own privacy policy, referenced separately in Section 9 below.

2. Personal Data We Collect

Depending on how you interact with the Site, we may collect:

  • Contact/enquiry form submissions: name, email address, phone number, business name, and any details you choose to include in your message.
  • Proposal and onboarding information (once you engage us as a client): business information, branding materials, content you provide for your website, billing/contact details, and communications related to your project.
  • Automatically collected technical information: IP address, browser type, general location (e.g. country-level), and site usage data, collected via analytics and security tools described in Section 4.

We do not knowingly collect sensitive categories of personal data (e.g. financial account numbers, health information) through the Site unless you voluntarily provide them, and we ask that you avoid including such information in enquiry forms.

3. How We Use Your Personal Data

We collect and use personal data only for purposes a reasonable person would consider appropriate in the circumstances, including to:

  • Respond to enquiries and follow up on potential engagements;
  • Prepare proposals, contracts, and quotes;
  • Deliver, manage, and support websites for our clients;
  • Send service-related communications (e.g. billing, maintenance updates, monthly health reports) to active clients;
  • Maintain the security, functionality, and performance of the Site;
  • Comply with legal or regulatory obligations.

We do not sell personal data to third parties, and we do not use enquiry form data for unrelated marketing without your consent.

4. Third-Party Tools & Service Providers

To operate the Site and deliver our services, we use third-party tools that may process personal data on our behalf, including:

  • Hosting providers (e.g. Hostinger) — to host the Site and client websites;
  • Cloudflare, including Cloudflare Turnstile — for security and anti-spam protection on forms;
  • Google Search Console (and, where used, other analytics tools) — to monitor site performance and search visibility;
  • Website management/reporting tools (e.g. Modular DS, where in use) — for centralised monitoring, maintenance, and reporting across managed client websites.

These providers are contractually or by policy bound to appropriate data protection standards. Where personal data is transferred to a server or provider located outside Singapore, we take reasonable steps to ensure a comparable standard of protection is applied, consistent with the PDPA’s data transfer requirements.

5. Disclosure of Personal Data

We do not disclose your personal data to third parties except:

  • To the service providers described in Section 4, to the extent necessary to operate the Site or deliver services;
  • Where required by law, regulation, or a valid legal process;
  • With your consent, or where reasonably necessary to complete a transaction you have requested (e.g. connecting you with a relevant tool as part of your website build).

6. Data Retention

  • Enquiry form submissions that do not result in an engagement are retained for a reasonable period to allow follow-up, and deleted if no engagement proceeds within a reasonable timeframe, or earlier upon request.
  • Active client data is retained for the duration of the engagement, in accordance with the applicable Service Agreement.
  • Data belonging to a cancelled client’s website is retained for 12 months from the date of cancellation, to allow for reactivation of services, after which it is permanently deleted unless you request earlier deletion or a longer period is required by law.

7. Your Rights

Subject to applicable exceptions under the PDPA, you have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate or incomplete personal data;
  • Withdraw consent for the collection, use, or disclosure of your personal data (which may affect our ability to continue providing services to you); and
  • Request deletion of your personal data, subject to any legal or contractual retention obligations.

To exercise any of these rights, contact us using the details in Section 10.

8. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, collection, use, disclosure, or similar risks, including the use of security tools such as SSL encryption and anti-spam/bot protection (e.g. Cloudflare Turnstile) on forms. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Client Websites

 

Where DesignAm builds or manages a website on behalf of a client, that website will typically have its own Privacy Policy governing how the client’s own customers’ personal data (e.g. submitted through that website’s own contact forms) is handled. DesignAm may act as a data intermediary, processing that data on the client’s behalf and in accordance with the client’s instructions and our Service Agreement with them — DesignAm does not use such data for its own independent purposes.

This Privacy Policy governs designam.sg specifically, and DesignAm’s own collection of data (e.g. from prospective clients enquiring about our services) — not the operation of any individual client’s website.

10. Contact Us

 

If you have questions about this Privacy Policy, or wish to exercise your rights regarding your personal data, please contact:

[Business Name] Email: [YOUR EMAIL ADDRESS]

If you have concerns that cannot be resolved directly with us, you may also contact Singapore’s Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

11. Changes to This Policy

 

We may update this Privacy Policy from time to time to reflect changes in our practices, tools, or legal requirements. The “Last Updated” date above will reflect the most recent revision. Continued use of the Site after changes take effect constitutes acceptance of the updated Policy.