PDPA
Privacy notice
Last updated: 2026-08-11
MarkWave Craft Pte. Ltd. ("MarkWave Craft", "we", "us") respects your privacy. This notice explains how we collect, use, disclose, and protect personal data when you visit markwavecraft.pro, contact us, or engage our services — in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.
1. Data controller
MarkWave Craft Pte. Ltd., 456 River Valley Road, #08-03, Singapore 248352. Email: [email protected].
2. Personal data we collect
Website visitors: technical data such as IP address, browser type, device type, pages viewed, and referral source — collected via server logs and, if you consent, functional cookies for Google Maps embeds. We do not use analytics cookies by default on this site.
Enquiries: name, email address, telephone number, organisation name, and any information you include in your message or attachments when you email or call us.
Clients: contact details, billing information, project material you provide, correspondence, and meeting notes relevant to the engagement.
We do not knowingly collect data from children under thirteen. If you believe we have, contact us and we will delete it promptly.
3. Purposes and legal bases
We use personal data to: respond to enquiries; perform contracts; manage accounts; improve our website; comply with law; and protect our legitimate interests in running a professional services studio, where those interests are not overridden by your rights.
Consent is obtained for non-essential cookies via our cookie banner. You may withdraw consent by managing cookies on cookies.php without affecting the lawfulness of processing before withdrawal.
4. Google Maps
Every page on this site includes a Google Maps embed showing our studio location. Loading the map transfers data to Google LLC (United States) including IP address and interaction data. See Google's privacy policy for their processing. Maps load on each page regardless of your optional cookie choice.
5. Disclosure
We may share personal data with: cloud hosting and document providers under contract; professional advisers bound by confidentiality; authorities when required by law. We do not sell personal data. Processors are required to protect data and use it only for instructed purposes.
6. International transfers
Some processors and Google Maps operate outside Singapore. Where required, we implement appropriate safeguards such as contractual clauses or verified certification mechanisms.
7. Retention
Enquiry records: up to twenty-four months unless an engagement follows. Client project material: duration of engagement plus seven years for legal and accounting purposes unless otherwise agreed. Server logs: up to twelve months. Cookie consent records: six months (aligned with cookie Max-Age).
8. Security
We use access controls, encrypted connections (HTTPS), and reputable service providers. No method of transmission is completely secure; we encourage strong passwords on shared document platforms you control.
9. Your rights under PDPA
You may request access to, correction of, or cessation of collection/use/disclosure of your personal data, subject to legal exceptions. Contact [email protected]. We respond within thirty days where possible. You may lodge a complaint with the Personal Data Protection Commission of Singapore.
10. Marketing
We do not send unsolicited marketing email. Updates about our services are sent only with consent or to existing clients in relation to similar services, with an opt-out in each message.
11. Third-party links
Our site links to external pages (e.g. Google Maps directions). Their privacy practices are their own responsibility.
12. Changes
We may update this notice; the date at the top will change. Material changes will be highlighted on this page.
13. Contact
MarkWave Craft Pte. Ltd., 456 River Valley Road, #08-03, Singapore 248352. [email protected] · +65 6669 3184.
14. Additional detail on enquiries
When you email [email protected], your message is stored in our mail system with standard server logs. Attachments may contain personal data about your colleagues; please obtain their consent before sharing. We redact unrelated third-party data when preparing case notes for internal use.
15. Data protection contact
For PDPA requests, email [email protected] with sufficient detail to locate your records. We may ask for verification to prevent unauthorised disclosure. Responses are provided in English unless otherwise agreed in a client contract.
16. Breach notification
We maintain incident procedures appropriate to a small professional services studio. If a breach affecting your personal data occurs, we will notify you and the Personal Data Protection Commission where required by law, describing likely consequences and remedial steps taken.
17. Legitimate interests assessment
Where we rely on legitimate interests — for example, maintaining server security logs or responding to correspondence that may not yet have become a contract — we balance those interests against your rights. You may object to processing based on legitimate interests by writing to [email protected]; we will explain our reasoning and, where appropriate, cease processing unless we have compelling grounds.
18. Client material and third-party data
Clients sometimes share customer lists, interview transcripts, or internal documents that contain personal data about individuals who are not our direct contacts. You remain responsible for ensuring you have a lawful basis to share that material with us. We process it only to deliver the engagement described in our proposal and delete or return it according to the contract schedule.
19. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals. Cookie consent choices are stored mechanically based on your button clicks, but no automated scoring of visitors occurs on this site.
20. Records of processing
We maintain an internal register of processing activities covering website operation, enquiry handling, client delivery, billing, and legal compliance. Summaries are available on reasonable request to regulators or clients whose data is included, subject to confidentiality of other parties.
21. Correspondence retention
Email threads about prospective work are kept until the enquiry is closed or converts to a client engagement. Marketing suppression flags are honoured indefinitely once you opt out. We do not merge enquiry data with unrelated marketing lists.
22. Access requests in detail
Access requests should specify whether you seek website log data, enquiry correspondence, or client project files. We may redact third-party personal data contained in shared documents. Where files are voluminous, we may offer inspection at our premises or structured exports rather than indiscriminate dumps.
23. Vendor due diligence
Cloud providers and email hosts we use are selected for reliability and contractual data protection terms. We review subprocessors periodically and require confidentiality commitments comparable to our own obligations under PDPA. A list of primary processor categories is available on request to clients whose data they process.
24. Minimisation in practice
We collect only what is needed for the stated purpose. Enquiry forms are not used on this site partly to avoid collecting fields you did not intend to share. When scheduling meetings, we ask for names and contact details only — not personal identifiers unrelated to arranging the session.
25. Updates and notification
When this notice changes materially, we update the date above and may draw attention to the change on the home page for a reasonable period. Continued use of the site after an update constitutes acknowledgement of the revised notice where permitted by law.
26. Contact summary
For any privacy matter — access, correction, complaint, or question about maps and cookies — write to [email protected] or call +65 6669 3184 during office hours. We respond in plain language, not legalese, wherever possible.
Independent brand agency · scope agreed in writing. Outcomes depend on factors outside the studio; this notice does not promise particular commercial results.