Privacy Policy

This Privacy Policy describes how MarkVault Creative Pte. Ltd. ("MarkVault", "we", "us" or "our"), UEN 202796947M, collects, uses, discloses and protects personal data when you visit markvault.pro (the "Website"), contact us, or engage our brand, content and campaign services. We are committed to complying with the Personal Data Protection Act 2012 of Singapore ("PDPA") and applicable data protection regulations.

1. Data controller

The data controller responsible for your personal data is:

• MarkVault Creative Pte. Ltd.
• 51 Genting Lane, #06-04, Singapore 349564
• Email: [email protected]
• Phone: +65 6904 8352

For data protection enquiries, contact us at [email protected] with the subject line "Privacy enquiry". We will respond within ten business days.

2. Personal data we collect

We may collect the following categories of personal data depending on how you interact with us:

2.1 Website visitors

• Technical data: IP address, browser type and version, operating system, device type, referring URL, pages visited, time and date of visit, and session duration.
• Cookie data: preferences stored via cookies and similar technologies (see our Cookie Policy).

2.2 Contact form and enquiries

• Identity data: full name.
• Contact data: email address, phone number (if provided).
• Communication data: enquiry type, message content, and any attachments you submit.
• Consent records: timestamp and scope of PDPA consent provided at submission.

2.3 Clients and prospective clients

• Business contact details: name, job title, company name, email, phone, billing address.
• Project data: briefs, brand materials, strategy documents and communications related to engagements.
• Financial data: invoicing details, payment records and tax identification where applicable.
• Meeting records: notes from discovery calls, workshop outputs and project correspondence.

2.4 Job applicants

• Application data: CV, portfolio, cover letter, references and interview notes if you apply for a role with us.

3. How we collect personal data

We collect personal data through:

• Direct submission via our contact form, email, phone or in-person meetings at our Genting Lane studio.
• Automated technologies when you browse the Website, including cookies, server logs and analytics tools (with your consent where required).
• Third-party referrals where a client or partner introduces you to us with your knowledge.
• Publicly available sources such as LinkedIn profiles when researching prospective clients or collaborators.

We do not purchase personal data lists or use data brokers. We do not collect sensitive personal data (such as health, biometric or financial account credentials) through the Website.

4. Purposes of collection and use

We use personal data for the following purposes:

• Responding to enquiries: To read, assess and respond to brand briefs, content enquiries, campaign requests and general questions submitted through the Website or email.
• Delivering services: To perform brand strategy, identity design, copywriting, content production, campaign development and related creative services under contract.
• Contract administration: To prepare proposals, issue invoices, process payments and maintain project records.
• Website operation: To maintain, secure and improve the Website, diagnose technical issues and analyse usage patterns.
• Legal compliance: To comply with applicable laws, regulations, court orders and government requests.
• Business communications: To send project updates, deliverables notifications and service-related messages. We do not send unsolicited marketing without consent.
• Recruitment: To evaluate and process job applications.

We will not use your personal data for purposes incompatible with those described above without notifying you and, where required by the PDPA, obtaining your consent.

5. Legal basis for processing

Under the PDPA, we rely on the following bases for processing personal data:

• Consent: When you submit our contact form, you provide explicit consent for us to use your data to respond to your enquiry. You may withdraw consent at any time (see Section 10).
• Contractual necessity: Processing required to perform a contract with you or to take steps at your request before entering a contract.
• Legitimate interests: Processing necessary for our legitimate business interests, such as Website security, fraud prevention and internal analytics, provided these interests are not overridden by your rights.
• Legal obligation: Processing required to comply with Singapore law, including tax and accounting requirements.

6. Disclosure of personal data

We do not sell, rent or trade your personal data. We may disclose personal data to:

• Service providers: Third parties who assist us with hosting, email delivery, analytics, accounting and project management tools. These providers process data only on our instructions and under confidentiality obligations.
• Collaborators: Freelance designers, photographers, developers and other specialists engaged on your project, but only to the extent necessary for delivery and with appropriate confidentiality protections.
• Professional advisers: Lawyers, accountants and auditors bound by professional confidentiality.
• Authorities: Government bodies, regulators or law enforcement when required by law or to protect our legal rights.
• Business transfers: In connection with a merger, acquisition or sale of assets, with notice to affected individuals where required.

Some service providers may process data outside Singapore. Where we transfer personal data overseas, we ensure appropriate protections are in place as required by the PDPA, including contractual safeguards with the recipient.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy:

• Contact form submissions: three years from last interaction, unless an engagement is formed.
• Client project data: duration of engagement plus seven years for legal and accounting purposes.
• Website analytics: twenty-six months from collection.
• Job applications: twelve months from decision, unless you consent to longer retention for future opportunities.
• Consent records: duration of processing plus three years.

When retention periods expire, we securely delete or anonymise personal data. Anonymised data used for aggregate statistics may be retained indefinitely.

8. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include:

• Secure HTTPS connections for all Website traffic.
• Access controls limiting personal data to team members who need it for their role.
• Protected storage of client files with regular recovery copies kept off-site.
• Strong access credentials and two-factor verification on critical systems.
• Confidentiality obligations in employment and contractor agreements.

No method of transmission or storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security. If you believe your data has been compromised, contact us immediately at [email protected]. We review our security practices periodically and update them as our systems and obligations evolve.

9. Cookies and tracking

We use cookies and similar technologies on the Website. For detailed information about the cookies we use, their purposes and how to manage your preferences, see our Cookie Policy. Essential cookies are necessary for the Website to function. Analytics cookies are used only with your consent via our cookie banner.

10. Your rights under the PDPA

Under the PDPA, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Withdrawal of consent: Withdraw consent for processing that relies on consent, without affecting the lawfulness of prior processing.
• Data portability: Request your data in a commonly used machine-readable format where technically feasible.
• Complaint: Lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe we have not handled your data appropriately.

To exercise any of these rights, email [email protected] with sufficient detail for us to identify you and the data concerned. We will respond within thirty days. We may request verification of identity before processing your request. There is no fee for most requests; we may charge a reasonable fee for manifestly unfounded or excessive requests.

11. Children's data

The Website and our services are not directed at individuals under eighteen years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, contact us and we will delete it promptly.

12. Third-party links

The Website may contain links to third-party websites (such as social media platforms or partner sites). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal data.

13. Name clarification

MarkVault Creative is a brand, content and campaign studio. We are not a bank, secure storage provider, cryptocurrency service or trademark registration firm. We do not collect financial account credentials, identity documents for banking purposes, or cryptocurrency wallet information through this Website.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The "Last updated" date at the top of this page indicates the most recent revision. Material changes will be communicated via a notice on the Website. Continued use of the Website after changes constitutes acceptance of the updated policy.

15. Contact

For questions, requests or complaints regarding this Privacy Policy or our data handling practices:

• Email: [email protected]
• Post: MarkVault Creative Pte. Ltd., 51 Genting Lane, #06-04, Singapore 349564
• Phone: +65 6904 8352 (Mon–Fri 09:00–18:00 SGT)

If you are not satisfied with our response, you may contact the Personal Data Protection Commission: www.pdpc.gov.sg.