Privacy
Privacy Policy
This Privacy Policy explains how GlowLife Studio Pte. Ltd. ("GlowLife", "we", "us", "our") collects, uses, discloses and protects personal data when you visit glowlife.life, submit an enquiry, engage our brand, content and creative services, or otherwise interact with us. We comply with the Personal Data Protection Act 2012 of Singapore ("PDPA") and respect your rights as a data subject.
1. Organisation identity
Data controller: GlowLife Studio Pte. Ltd.
UEN 202783617K
200 Jalan Sultan, #06-14 Textile Centre, Singapore 199018
Email: [email protected]
General enquiries: [email protected]
Phone: +65 6788 3162
GlowLife is a brand, content and creative studio — a marketing agency serving client organisations in Singapore. We are not a beauty, wellness or coaching business. This policy applies to personal data collected through our website, email, phone, studio visits and client engagements.
2. Personal data we collect
Depending on how you interact with us, we may collect:
- Identity and contact data: name, job title, company name, email address, phone number, postal address.
- Enquiry data: messages submitted through our contact form, enquiry type, and any information you choose to provide about your brand or project.
- Client and campaign data: brief materials, brand assets, audience information, marketing performance data, analytics access credentials (where authorised), feedback and correspondence related to signed projects.
- Technical data: IP address, browser type, device information, pages visited, referring URLs, cookie identifiers (see our Cookie Policy).
- Consent records: timestamps and choices relating to PDPA consent, cookie preferences and marketing communications.
We do not intentionally collect sensitive personal data such as health information unless you voluntarily provide it and we have a legitimate need with your consent. We do not collect NRIC or passport numbers through our public website.
3. Purposes of collection, use and disclosure
We collect and use personal data for the following purposes:
- Responding to enquiries and scheduling visibility reviews or consultations.
- Preparing proposals, scopes of work and contracts for marketing agency services.
- Delivering brand strategy, visual identity, content marketing, copywriting, social media creative, video production and campaign art direction under signed engagements.
- Managing client relationships, invoicing, project reporting and account administration.
- Operating, securing and improving glowlife.life, including analytics (with consent where required).
- Complying with legal obligations, resolving disputes and enforcing agreements.
- Sending service-related communications about active projects or account matters.
We may disclose personal data to:
- Service providers who assist with hosting, email delivery, analytics, project management, accounting and IT security — bound by confidentiality and data protection obligations.
- Sub-processors involved in creative production (e.g. licensed stock libraries, music licensing, print vendors) where necessary to deliver contracted work.
- Performance marketing partners when a client engagement explicitly includes referral to paid media specialists and the client authorises sharing.
- Professional advisers (lawyers, auditors) when required.
- Public authorities when required by Singapore law or court order.
We do not sell personal data. We do not buy contact lists or use personal data for unrelated third-party marketing without consent.
4. Legal bases and consent
Under the PDPA, we rely on:
- Consent: when you tick the PDPA consent checkbox on our contact form, subscribe to optional communications, or agree to analytics/marketing cookies. Consent is not pre-checked on forms.
- Contractual necessity: processing needed to perform a signed scope of work or take pre-contractual steps at your request.
- Legitimate interests: securing our website, preventing fraud, improving services, and maintaining business records — balanced against your rights.
- Legal obligation: retaining records required by tax, accounting or regulatory requirements in Singapore.
You may withdraw consent for optional processing by contacting [email protected]. Withdrawal does not affect the lawfulness of processing before withdrawal, and may limit our ability to provide certain services.
5. Client and campaign data
When you engage us as a client, we process campaign data — including brand guidelines, customer segments, advertising account information, analytics dashboards and creative assets — strictly to deliver the agreed marketing services. Access is limited to team members and contractors who need it for your project. Confidential brief materials are stored on secured systems with access controls.
Where AI-assisted tools are used in production workflows, client data is not used to train public models without explicit agreement. Human review applies to outputs before client delivery unless otherwise specified in the scope of work.
Upon project completion, deliverables are transferred to you per contract terms. Working files may be retained for a defined period for revision support and legal compliance, then deleted or anonymised according to our retention schedule.
6. Data Protection Officer
We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the PDPA and handling data subject requests.
DPO contact: [email protected]
Postal: Data Protection Officer, GlowLife Studio Pte. Ltd., 200 Jalan Sultan, #06-14 Textile Centre, Singapore 199018
We aim to respond to DPO enquiries within ten business days.
7. Retention
We retain personal data only as long as necessary for the purposes collected:
- Enquiry records: up to 24 months from last contact unless an engagement proceeds.
- Client project records: duration of engagement plus up to seven years for legal, tax and dispute purposes.
- Cookie consent records: six months, refreshed when you revisit.
- Server logs: typically 90 days unless needed for security investigation.
When retention periods expire, we delete or anonymise data securely.
8. Access, correction and other rights
Under the PDPA, you have the right to:
- Request access to personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Withdraw consent for optional processing (subject to contractual and legal limits).
- Request information about how your data has been used or disclosed in the past year.
Submit requests to [email protected] with sufficient identity verification. We respond within thirty days where possible. A reasonable fee may apply for manifestly unfounded or excessive requests as permitted by law.
If you believe we have not handled your data properly, you may contact the Personal Data Protection Commission (PDPC):
Personal Data Protection Commission
10 Pasir Panjang Road, #03-01 Mapletree Business City, Singapore 117438
Website: pdpc.gov.sg
9. Cookies and similar technologies
Our website uses cookies for essential functionality and, with your consent, analytics and marketing measurement. Details — including categories, durations, vendors and opt-out instructions — are in our Cookie Policy. You can change preferences at any time via the cookie banner or browser settings.
10. Security and breach notification
We implement appropriate technical and organisational measures to protect personal data, including HTTPS encryption, access controls, password policies, and secure storage for client materials. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we review practices regularly and respond to incidents promptly.
Team members and contractors with data access receive confidentiality obligations and training on responsible handling of client and enquiry information. We apply data minimisation: we collect only what is needed for the stated purpose and delete or anonymise data when retention periods expire.
If a data breach is likely to result in significant harm or affect a significant number of individuals, we will notify the Personal Data Protection Commission and affected individuals as required under the PDPA, and take reasonable steps to contain and remediate the incident.
11. Cross-border transfers and sub-processors
Some service providers may process data outside Singapore (e.g. cloud hosting, email infrastructure, analytics platforms, AI tooling, advertising platforms when used in client campaigns). Where personal data is transferred overseas, we ensure comparable protection through contractual clauses, provider certifications, or your consent as required under the PDPA.
A current list of sub-processor categories is available on request from [email protected]. Material changes to sub-processors affecting client data will be communicated to active clients where appropriate.
12. Third-party links
Our website may link to third-party sites (e.g. social platforms, analytics documentation). We are not responsible for their privacy practices. Review their policies before submitting personal data.
13. Children
Our services are directed at businesses and marketing professionals. We do not knowingly collect personal data from individuals under eighteen without parental or guardian consent.
14. Marketing communications
We do not send unsolicited bulk marketing without consent. Project updates and service communications related to an active engagement are sent on the basis of contractual relationship. You may opt out of optional newsletters by contacting [email protected].
15. Changes to this policy
We may update this Privacy Policy to reflect legal, technical or business changes. The "Last updated" date at the top will change accordingly. Material changes will be posted on glowlife.life. Continued use of our website after changes constitutes acknowledgement where permitted by law.
16. Contact
For privacy questions, access requests or complaints:
[email protected]
GlowLife Studio Pte. Ltd., 200 Jalan Sultan, #06-14 Textile Centre, Singapore 199018