Privacy policy

1. Who we are

This privacy policy explains how AdCrest Creative Pte. Ltd. (UEN 202789456M), a creative campaign studio registered in Singapore, collects, uses, discloses and protects personal data. Our registered office is 8 Jalan Kilang Barat, #05-02 Central Link, Singapore 159351. You may contact us at +65 6353 4196, [email protected] or, for privacy-specific matters, [email protected].

We provide professional marketing services — brand strategy, brand identity, content marketing, copywriting, editorial search engine optimisation, social media strategy, art direction and creative campaign production — to client organisations under written scopes of work. We are not an ad network, programmatic advertising platform, traffic reseller, affiliate network, heraldry service, genealogy research provider, financial adviser, insurance broker, wellness coach or educational course provider. This policy applies to personal data we process in connection with our website, business enquiries, client engagements and related studio operations.

2. Scope and legal framework

We process personal data in accordance with the Personal Data Protection Act 2012 of Singapore (PDPA) and applicable subsidiary legislation, guidance issued by the Personal Data Protection Commission (PDPC) and other relevant laws. Where we process data of individuals located outside Singapore, we apply comparable standards and contractual safeguards where required.

This policy covers data collected through adcrest.pro, email correspondence, telephone calls, video conferences, in-person meetings at our studio, proposal and contract workflows, invoicing systems and project collaboration tools. It does not govern third-party websites linked from our site; those operators maintain their own privacy policies.

3. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

Identity and contact data: name, job title, company name, business address, email address, telephone number and preferred communication channel.

Enquiry and brief data: information you submit through contact forms, campaign briefs or email, including project objectives, budget ranges, timelines, brand assets, target audiences and any other details you choose to share.

Contract and billing data: billing contact details, purchase order references, tax identifiers where applicable, payment records and correspondence relating to invoices.

Project and collaboration data: feedback, approvals, creative notes, files you upload for campaign production, meeting summaries and messages exchanged through approved project channels.

Website and technical data: IP address, browser type, device identifiers, pages viewed, referral URLs, session duration and cookie identifiers, as described in our cookie policy.

Marketing preferences: your choices regarding newsletters, event invitations or follow-up communications, including opt-in and opt-out records.

We do not intentionally collect sensitive personal data such as government-issued identification numbers, financial account credentials, health information or biometric data unless a specific engagement requires it and you provide it with informed consent or another lawful basis applies.

4. How we collect personal data

We collect personal data when you voluntarily provide it — for example, by completing a contact form, sending an email, calling our studio, attending a briefing session or signing a statement of work. We also collect certain technical data automatically when you browse adcrest.pro, subject to your cookie preferences.

We may receive personal data from third parties where appropriate and lawful, such as referrals from existing clients, publicly available business directories, event attendee lists where you have consented to share your details, or professional networking platforms when you initiate contact through those channels. When we receive data from third parties, we take reasonable steps to confirm that the disclosure to us was permitted.

5. Purposes of use

We use personal data for purposes that a reasonable person would consider appropriate in the context of our relationship with you, including:

responding to enquiries and preparing proposals; scoping, delivering and managing creative campaign engagements; invoicing, accounting and debt recovery; maintaining client records and project archives; improving our website, services and internal workflows; sending service-related notices such as scheduling changes or contract updates; conducting quality assurance and training within our team; complying with legal, regulatory and professional obligations; and, where permitted, sharing studio news or insights you have opted to receive.

We do not sell personal data. We do not use your information to operate an advertising network, resell traffic, broker affiliate leads or provide heraldry, genealogy or unrelated consumer services.

6. Legal bases and consent

Under the PDPA, we rely on one or more of the following bases: your consent, where required; deemed consent in circumstances permitted by law, such as when you voluntarily provide data for a stated purpose; contractual necessity, where processing is needed to perform a contract with you or take pre-contractual steps at your request; and legitimate interests, such as securing our systems, preventing fraud or improving our services, provided those interests are not overridden by your rights.

Where we rely on consent, you may withdraw it at any time by contacting [email protected]. Withdrawal does not affect processing already carried out lawfully before withdrawal, and it may limit our ability to continue providing certain services.

7. Disclosure to third parties

We may disclose personal data to trusted third parties who assist us in operating our studio, subject to appropriate contractual protections:

Service providers: hosting and infrastructure vendors, email and calendar platforms, accounting software, project management tools, cloud storage providers, analytics services (where you have consented to analytics cookies) and professional advisers such as lawyers or accountants.

Subcontractors and specialists: photographers, videographers, illustrators, translators, developers or other creative partners engaged for a client project, but only to the extent necessary for delivery and under confidentiality obligations.

Client-side recipients: where you are a supplier or collaborator on a client engagement, relevant project data may be shared with the client organisation named in the scope of work.

Legal and regulatory bodies: where required by court order, statutory demand or to establish, exercise or defend legal claims.

Business transfers: in connection with a merger, acquisition or sale of assets, subject to continued protection of personal data.

We require processors to handle personal data only on our instructions and to implement reasonable security measures. A list of major processor categories is available on request.

8. International transfers

Our primary systems are hosted in or connected to Singapore. Some service providers may process data in other countries. Where personal data is transferred outside Singapore, we ensure that the recipient jurisdiction provides a comparable standard of protection, or we implement appropriate safeguards such as contractual clauses approved or recognised under applicable law. You may request further information about cross-border transfers by emailing [email protected].

9. Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting and reporting requirements. Typical retention periods include: enquiry records for up to twenty-four months unless an engagement proceeds; client project files for the duration of the contract plus seven years for business and tax records; marketing preference records until you unsubscribe plus a short suppression log to honour your choice; and server logs for up to twelve months unless needed for security investigations.

When data is no longer required, we securely delete or anonymise it. Anonymised data used for aggregate reporting may be retained longer.

10. Security

We implement administrative, technical and physical safeguards appropriate to the nature of the data we hold, including access controls limited to personnel with a business need, encrypted connections for website traffic, password policies, device management for studio equipment and contractual confidentiality obligations for team members and partners. No method of transmission or storage is completely secure; we encourage you to use strong passwords on shared collaboration tools and to avoid sending highly sensitive credentials by unencrypted email.

If we become aware of a data breach likely to result in significant harm, we will notify affected individuals and the PDPC as required by law.

11. Your rights

Subject to exceptions under the PDPA and other applicable law, you may:

request access to personal data we hold about you; request correction of inaccurate or incomplete data; withdraw consent where processing is consent-based; request information about how we have used or disclosed your data over the past year; and, in certain circumstances, request that we cease processing or delete data, although we may need to retain some information for legal or contractual reasons.

To exercise these rights, email [email protected] with sufficient detail to identify you and describe your request. We may need to verify your identity before responding. We aim to respond within thirty days. If we cannot fulfil a request in full, we will explain why.

If you believe we have not handled your personal data appropriately, you may contact the Personal Data Protection Commission in Singapore after first giving us a reasonable opportunity to address your concern.

12. Marketing communications

We may send occasional studio updates, case study highlights or event invitations to business contacts who have opted in or where a relevant existing relationship makes such communication reasonable under the PDPA. Every marketing email includes an unsubscribe link or clear instructions to opt out. Opting out of marketing does not affect transactional or service-related messages necessary to perform a contract.

13. Children

Our services and website are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under eighteen years of age. If you believe a minor has provided data to us, please contact [email protected] and we will take appropriate steps to delete it.

14. Automated decision-making and profiling

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals. We may use analytics tools to understand aggregate website traffic patterns, but these insights do not determine whether we accept a client brief or how we price a proposal. Creative strategy and campaign recommendations are prepared by our human team, sometimes assisted by AI tools under human review, as described in our legal notice.

15. Data protection officer and contact

For privacy enquiries, access requests or complaints, contact our data protection contact at [email protected] or write to AdCrest Creative Pte. Ltd., 8 Jalan Kilang Barat, #05-02 Central Link, Singapore 159351, Attn: Privacy. We will acknowledge substantive requests promptly and work with you in good faith to resolve concerns.

16. Changes to this policy

We may update this privacy policy to reflect changes in law, technology or our business practices. The "Last updated" date at the top of this page indicates the most recent revision. Material changes will be posted on adcrest.pro. Where required, we will seek fresh consent or provide additional notice. Continued use of our website after an update constitutes acknowledgement of the revised policy, except where the law requires explicit consent for a new processing activity.

17. Related documents

Please also read our terms of use for rules governing access to adcrest.pro, our cookie policy for details on cookies and similar technologies, and our legal notice for company and professional disclaimers.