Start a brand brief

Legal

Privacy Policy

Last updated: 24 July 2026

This Privacy Policy explains how ChinCrime Studio Pte. Ltd. ("ChinCrime Studio", "we", "us", "our") collects, uses, discloses and protects personal data when you visit chincrime.pro, contact us, or engage our brand and content services. We comply with the Personal Data Protection Act 2012 of Singapore ("PDPA") and its subsidiary legislation.

1. Data controller

ChinCrime Studio Pte. Ltd.
UEN: 202780495M
Registered address: 151 Chin Swee Road, #09-04 Manhattan House, Singapore 169876
Email: [email protected]
Phone: +65 6970 4295

For data protection enquiries, contact us at the email above with the subject line "Privacy enquiry". We aim to respond within five working days.

2. Scope

This policy applies to personal data we collect through our website, email correspondence, contact forms, client engagements, studio visits and any other channel where we act as a data controller. It does not apply to third-party websites linked from our site, or to personal data we process solely on behalf of clients where we act as a data intermediary — in those cases, the client's privacy policy governs and we process data per our contract with them.

3. Personal data we collect

Depending on how you interact with us, we may collect:

  • Identity and contact data: name, job title, company name, email address, phone number, postal address.
  • Enquiry and brief data: information you submit through our contact form or email, including project descriptions, budget ranges, timelines and business context.
  • Client project data: brand materials, business information, audience data and other content you provide for us to deliver services.
  • Technical data: IP address, browser type, device information, pages visited, referring URL, date and time of access — collected via server logs and, if you consent, analytics cookies.
  • Communication records: emails, meeting notes and correspondence related to enquiries and engagements.
  • Consent records: your cookie preferences and PDPA consent timestamps.

We do not intentionally collect sensitive personal data (as defined under the PDPA) through our website. If your brief includes such data, we will handle it per your instructions and applicable law.

4. How we collect personal data

We collect personal data when you:

  • Submit our contact form at chincrime.pro/contact.php;
  • Email or call us directly;
  • Visit our studio by appointment;
  • Sign a client agreement and provide information for project delivery;
  • Browse our website (technical data via server logs and optional cookies);
  • Interact with us at events or through referrals from mutual contacts.

Where we collect personal data from a source other than you directly (for example, a referral from an existing client), we will take reasonable steps to ensure you are aware of this policy before or as soon as practicable after collection.

5. Purposes of collection, use and disclosure

We collect and use personal data for the following purposes:

  • Responding to enquiries and brand briefs;
  • Providing brand strategy, content and creative services to clients;
  • Preparing proposals, contracts, invoices and project documentation;
  • Managing client relationships and retainer accounts;
  • Operating and improving our website;
  • Understanding how visitors use our site (with consent for analytics);
  • Complying with legal and regulatory obligations in Singapore;
  • Protecting our legal rights and preventing fraud or abuse.

We may disclose personal data to:

  • Our employees and contractors who need access to perform their roles (bound by confidentiality);
  • Service providers such as email hosting, cloud storage, accounting and analytics platforms;
  • Professional advisers including lawyers and accountants when required;
  • Government authorities when required by law or court order.

We do not sell personal data. We do not share enquiry data with unrelated third parties for their marketing.

6. Legal basis and consent

Under the PDPA, we rely on consent, contractual necessity and legitimate interests as appropriate. When you submit our contact form, you must tick the PDPA consent checkbox confirming you agree to our collection and use of your data to respond to your enquiry. You may withdraw consent at any time by emailing [email protected] — withdrawal does not affect processing already completed lawfully before withdrawal, and may limit our ability to continue serving you.

7. Cookies and similar technologies

Our website uses essential cookies to remember your cookie consent choice and optional analytics cookies if you accept them. See our Cookie Policy for details on each cookie, retention periods and how to change preferences.

8. Retention

We retain personal data only as long as necessary for the purposes collected:

  • Enquiries not converted to clients: up to 24 months from last contact, then deleted or anonymised.
  • Client project data: duration of engagement plus up to seven years for legal, tax and dispute purposes.
  • Server logs: up to 90 days unless needed for a security review.
  • Cookie consent records: six months, aligned with our cookie banner.
  • Invoices and contracts: per Singapore statutory requirements (typically seven years).

9. Security

We implement reasonable administrative, technical and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. These include access controls on cloud systems, encrypted connections (HTTPS) on our website, password policies for staff accounts and confidentiality obligations in contractor agreements. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we review our practices periodically.

10. Cross-border transfers

Some service providers we use may store or process data outside Singapore (for example, cloud hosting in the United States or European Union). Where we transfer personal data overseas, we take steps required under the PDPA to ensure the recipient provides a standard of protection comparable to that under the PDPA, including contractual clauses where appropriate.

11. Your rights under the PDPA

Subject to exceptions under the PDPA, you have the right to:

  • Access — request access to personal data we hold about you;
  • Correction — request correction of inaccurate or incomplete data;
  • Withdrawal of consent — withdraw consent for collection, use or disclosure where consent is the basis;
  • Data portability — where applicable under future PDPA amendments, request transfer of your data in a commonly used format.

To exercise these rights, email [email protected] with sufficient information for us to verify your identity. We may charge a reasonable fee for access requests as permitted by law. We respond within 30 days or inform you if an extension is needed.

12. Marketing communications

We do not send unsolicited marketing email to individuals who have not opted in or who are not existing clients with a legitimate ongoing relationship. If you receive studio updates and wish to unsubscribe, use the link in the email or contact us directly. We process unsubscribe requests promptly.

13. Children

Our services and website are directed at business clients and professionals. We do not knowingly collect personal data from individuals under 18. If you believe we have collected a minor's data, contact us and we will delete it promptly.

14. Third-party links

Our website may link to external sites (for example, client portfolios or social platforms). We are not responsible for the privacy practices of those sites. Review their policies before providing personal data.

19. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology or legal requirements. The "Last updated" date at the top will change when we do. Material changes will be posted on this page. Continued use of our website after changes constitutes acknowledgment of the updated policy where permitted by law.

16. Data Protection Officer

ChinCrime Studio Pte. Ltd. has designated a Data Protection Officer (DPO) responsible for overseeing our compliance with the PDPA and handling data protection enquiries. You may contact the DPO at [email protected] with the subject line "DPO enquiry". The DPO will acknowledge receipt within three working days and aim to resolve routine requests within 30 days.

17. AI tools and automated processing

We use AI-assisted software to help draft copy, organise research and speed up repetitive tasks during brand and content projects. These tools may process text you provide as part of a brief or engagement. We do not use AI to make automated decisions that produce legal or similarly significant effects about individuals without human review. Client materials submitted for projects are handled under our contract and this policy; we configure third-party AI tools to avoid training on client data where the provider allows such settings. If you have questions about AI use on your project, ask before engagement begins.

18. Contact and complaints

Questions or requests regarding this policy: [email protected]

If you are not satisfied with our response, you may contact the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.

This Privacy Policy was last reviewed on 24 July 2026. We review it at least annually and whenever we introduce new data-processing activities, such as additional analytics tools or AI-assisted workflow providers used in client project delivery.