Privacy

Personal data protection

Grow Brand Fast Pte. Ltd. ([email protected]) operates growbrandfast.pro and the Gemmill Lane studio. This policy explains how we handle personal data under the Personal Data Protection Act 2012 (PDPA) of Singapore and related guidance from the Personal Data Protection Commission.

We act as a data controller for information collected through this website, email, telephone, and in-person visits. When we process data on behalf of clients during engagements, we act as a data intermediary under client instructions; that processing is governed by contract, not this policy alone.

Categories we may collect: identity and contact data (name, employer, email, phone); brief and project data you voluntarily provide; technical data (IP address, browser type, cookie identifiers); correspondence records; appointment and access logs for studio visits.

We collect data because you contact us, visit the site, consent to optional cookies, or enter our studio. We do not buy personal data lists or scrape social profiles for prospecting.

Purposes: respond to enquiries; perform contracts; operate website security; embed maps when you consent to functional cookies; maintain archives required by law or contract; improve site accessibility based on aggregated technical logs if analytics cookies are accepted.

Legal bases under PDPA include consent (optional cookies, marketing if ever offered), contractual necessity (delivering commissioned work), legitimate interests (security, fraud prevention, replying to unsolicited business enquiries at a proportionate level), and legal obligation (tax, regulatory retention).

We do not sell personal data. Recipients may include: hosting and email providers; translation partners bound by confidentiality; professional advisers under privilege; authorities when required by law.

International transfers occur when cloud services store data outside Singapore. We assess safeguards and vendor terms before engagement.

Retention: enquiry emails—twenty-four months unless a project follows; project archives—per contract, typically three to seven years for regulated clients; cookie consent records—twenty-six weeks minimum; server logs—ninety days unless security incident extends retention.

Your rights: access, correction, withdrawal of consent (without affecting prior lawful processing), and complaint to the PDPC. Contact [email protected] with requests. We respond within thirty days where PDPA requires.

Security: TLS for the site; access controls in the studio; staff confidentiality undertakings. No method is perfectly secure; we notify affected individuals and PDPC of eligible breaches as required.

Children: services are business-directed; we do not knowingly collect data from persons under eighteen without guardian involvement.

Automated decisions: we do not use profiling or automated decision-making with legal or similarly significant effects on individuals visiting this site.

Third-party links: linked sites have their own policies. Our footer links to legal, terms, and cookies pages on this domain only.

Changes: we post updates here with a revised date. Material changes may be highlighted on the cookies page.

Cookie detail is in the cookies policy. Google Maps embeds appear on every page.

Telephone calls may be logged for note-taking if you are told at the start; recordings require explicit consent.

Studio CCTV may operate in common areas for security; signs are posted at entry.

If you are a client end-user whose data we process as intermediary, direct access requests to your organisation first; we will assist them under our data processing terms.

Data Protection Officer contact: [email protected]. Postal: 9 Gemmill Lane, #03-01, Singapore 069248.

Last updated: 24 August 2026.