Privacy Policy

1. Introduction

BoostSpark Pte. Ltd. ("BoostSpark", "we", "us") respects your privacy and is committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA"). This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit boostspark.pro, submit an enquiry through our contact form, or engage our growth-communications programmes.

By using this website or providing personal data to us, you acknowledge that you have read this Privacy Policy. Where consent is required under the PDPA, we obtain it through clear opt-in mechanisms — for example, the consent checkbox on our contact form, which is never pre-ticked.

2. Organisation identity and data controller

The data controller for personal data described in this policy is BoostSpark Pte. Ltd., located at 128 Beach Road, #17-02, Guoco Midtown, Singapore 189773. For privacy-related enquiries, contact [email protected] or write to the address above.

3. Personal data we collect

3.1 Website enquiries

When you submit our contact form, we collect: your name, email address, optional company name, enquiry type selection and message content. We also record the timestamp of submission in Asia/Singapore (SGT). We do not collect payment card data or government identification numbers through the public website.

3.2 Programme engagements

When you become a client, we may collect additional business contact information, billing contacts, programme materials you share with us, and correspondence related to deliverables. The scope of programme-related data is defined in your statement of work.

3.3 Technical and usage data

Our web server may automatically log IP addresses, browser type, referring URLs, pages visited and timestamps. If you accept analytics cookies via our cookie banner, we may collect aggregated usage statistics through configured analytics tools. Essential cookies support site functionality and cookie preference storage.

3.4 Third-party embeds

Google Maps is embedded on every page of this website via an iframe. When the map loads, Google may collect data including IP address, device information and interaction data according to Google's own privacy policies. We do not control Google's data collection practices. See Section 10 for further detail.

4. Purposes of collection and use

We collect and use personal data for the following purposes:

• Responding to enquiries submitted through the contact form
• Scoping, delivering and administering growth-communications programmes
• Communicating about programme milestones, working sessions and deliverables
• Issuing proposals, statements of work and related business correspondence
• Maintaining client records and programme documentation
• Complying with applicable legal and regulatory obligations in Singapore
• Improving website functionality and, with consent, analysing aggregated usage patterns
• Protecting the security and integrity of our website and systems

We do not sell personal data to third parties. We do not use personal data for purposes incompatible with those described above without notifying you and, where required, obtaining fresh consent.

5. Legal bases and consent

Under the PDPA, we rely on consent, contractual necessity and legitimate business interests as appropriate to each processing activity. Contact form submissions require explicit consent via the PDPA checkbox. You may withdraw consent at any time by writing to [email protected], subject to legal or contractual restrictions on deletion.

For existing clients, processing necessary to perform our statement of work may continue under contractual necessity even if marketing consent is withdrawn.

6. Disclosure to third parties

We may share personal data with:

• Service providers who assist with email delivery, document storage, hosting and analytics (under confidentiality obligations)
• Professional advisers where required (legal, accounting)
• Authorities when required by Singapore law or valid legal process

Third-party processors are permitted to use personal data only to perform services on our behalf. We require appropriate security measures in our agreements with processors.

7. International transfers

Some service providers may process data outside Singapore. Where personal data is transferred overseas, we take steps reasonably required under the PDPA to ensure recipients provide a comparable standard of protection, including contractual safeguards where applicable.

8. Retention

Enquiry data is retained for up to twenty-four months after our last meaningful correspondence unless a programme engagement follows, in which case enquiry data merges into the client record. Client programme records are retained for the duration of the engagement plus seven years for business and legal record-keeping purposes, unless a shorter period is agreed in writing or deletion is requested and no overriding legal obligation applies.

Server logs are retained for up to ninety days. Cookie consent preferences are stored locally in your browser for six months, as noted in our cookie banner.

9. Security

We implement administrative, technical and physical safeguards appropriate to the sensitivity of the data we hold. These include access controls, encrypted transmission (HTTPS), secure storage for programme documents and staff training on data handling. No method of transmission over the internet is completely secure; we encourage you to use business email addresses and avoid sending confidential materials through the public contact form.

10. Google Maps embed (site-wide)

A Google Maps iframe displaying our studio address at 128 Beach Road, Guoco Midtown, Singapore 189773 appears on every content page of boostspark.pro — including the home page, programme pages, legal pages and this Privacy Policy. The embed uses Google's standard map interface and loads resources from Google's servers when the page renders or when you interact with the map.

Google may set cookies and collect usage data including IP address, location approximation, device identifiers and interaction events. This processing is governed by Google's Privacy Policy and Terms of Service, not by BoostSpark. We include the map to help visitors locate our studio; we do not receive identifiable map analytics from Google in a form that lets us track individual visitors' map interactions.

If you prefer to avoid Google Maps cookies, you may block third-party cookies in your browser settings. Blocking may prevent the map from rendering correctly while the rest of the page remains accessible. You may also contact us for address directions without using the embedded map.

11. Your rights under the PDPA

Subject to exceptions under the PDPA, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent for processing that relies on consent
• Request information about how your data has been used or disclosed

Submit requests to [email protected]. We respond within thirty days unless an extension is permitted under the PDPA. We may charge a reasonable fee for manifestly unfounded or excessive requests.

If you believe we have not handled your personal data appropriately, you may contact the Personal Data Protection Commission (PDPC) in Singapore. We encourage you to contact us first so we can address your concern directly.

12. Cookies and similar technologies

We use cookies and local storage for essential site functions, cookie consent memory and, with your consent, analytics. Full details including categories, durations and opt-out instructions are in our Cookie Policy.

13. Links to other websites

Our website may contain links to third-party sites. We are not responsible for the privacy practices of external sites and encourage you to read their policies before providing personal data.

14. Children

Our services are directed at business professionals. We do not knowingly collect personal data from individuals under eighteen years of age. If you believe we have inadvertently collected such data, contact [email protected] and we will delete it promptly.

15. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology or legal requirements. The "Last updated" date at the top of this page indicates the current version. Material changes will be noted on this page. Continued use of the website after changes constitutes acknowledgement of the updated policy where permitted by law.

17. Marketing programme data

During programme delivery, clients may share brand materials, audience research, campaign performance summaries and internal strategy documents. We treat all programme materials as confidential client data. Access is limited to personnel directly involved in your engagement. Programme files are stored in secure cloud environments with access logging. When a programme concludes, we retain materials per Section 8 unless you request earlier deletion and no legal obligation prevents it.

We do not use client programme data to train generalised models, build shared libraries or market to third parties. Anonymised methodology descriptions may appear in our portfolio only with your written approval.

If you participate in working sessions via video conference, session recordings are made only with prior notice and stored for the programme duration unless you request deletion earlier.

We review this Privacy Policy at least annually and whenever we introduce new data processing activities that materially affect how personal data is handled.

18. Contact for data matters

BoostSpark Pte. Ltd.
128 Beach Road, #17-02, Guoco Midtown, Singapore 189773
Email: [email protected]
General: [email protected] · +65 6473 5081
Mon–Fri 09:00–18:00 SGT