Privacy policy

1. Organisation identity

This privacy policy applies to FlareLife Creative Pte. Ltd. (UEN 202782617K), a brand, content and creative marketing agency at 180 Bencoolen Street, #06-04 The Bencoolen, Singapore 189646, operating the website flarelife.life. We are a data controller for personal data collected through this site, enquiry forms, consultations and client engagements. Contact our Data Protection Officer at [email protected] or +65 6688 4712 for privacy matters.

2. Personal data we collect

We may collect: name, email address, phone number, company name, job title, enquiry message content, consultation notes, billing and contract details for clients, campaign assets you provide, analytics and cookie data as described in our cookie policy, and correspondence records. For client projects we may process brand materials, audience research inputs, analytics access credentials under contract, and content approvals. We do not collect health data, insurance information or financial account passwords through this website.

3. Purposes of collection and use

We use personal data to: respond to enquiries and book brand sessions; prepare proposals and signed scopes of work; deliver marketing services including brand strategy, content marketing, copywriting and creative campaigns; issue invoices and maintain accounts; send project updates and reporting dashboards; improve our website and measure anonymous traffic where consented; comply with legal obligations; and protect our legitimate interests in operating a professional marketing agency. We do not sell personal data to third parties.

4. Legal bases and consent

Under the PDPA, we rely on consent (explicit checkbox on forms, not pre-ticked), contractual necessity for client delivery, and legitimate interests for security and basic analytics where appropriate. You may withdraw consent for marketing emails at any time without affecting lawful processing before withdrawal. Enquiry consent is required to respond under our stated purpose.

5. Client and campaign data

Client organisations may share customer lists, CRM exports, advertising account data, analytics log-ins, brand assets and confidential briefs. Such data is used only to perform the signed scope of work — for example SEO analysis, copywriting, social media scheduling, creative campaign production or reporting on KPIs and engagement. Client data remains your property; we return or delete it per contract on project completion unless retention is required by law or agreed for continuity on retainer.

6. AI tools and sub-processors

We use AI-assisted tools for research, drafting and production efficiency. Human staff review outputs before client delivery. Some tools may process data on servers outside Singapore; where this occurs we apply contractual safeguards and minimise sensitive content. Sub-processors may include cloud hosting, email delivery, analytics platforms, project management software, design tools and advertising platforms when managing campaigns on your behalf. A current list is available on request from [email protected].

7. Cookies and tracking

See our cookie policy for categories, durations and opt-out instructions. Analytics and marketing cookies run only with consent via our cookie banner; choices are stored for six months.

8. Retention

Enquiry records: up to 24 months unless a client relationship continues. Client project files: duration of contract plus up to 7 years for legal and accounting purposes unless otherwise agreed. Cookie consent logs: 6 months. Marketing suppression lists: indefinitely to honour opt-out. Backup tapes containing personal data are rotated and destroyed per our retention schedule.

9. Security

We apply access controls, encrypted connections (HTTPS), password policies for internal systems, and limited staff access on need-to-know basis. No method of transmission is completely secure; we notify affected individuals and the Personal Data Protection Commission where required if a breach poses significant harm. Staff receive periodic training on handling client and enquiry data responsibly.

10. Cross-border transfers

Where data is processed outside Singapore — for example US-based cloud or analytics providers — we ensure comparable protection through standard contractual clauses or provider certifications and conduct transfer impact assessments for material client datasets.

11. Your rights

You may request access to, correction of, or withdrawal of consent for your personal data. Contact [email protected]. We respond within 30 days where possible. You may lodge a complaint with the Personal Data Protection Commission (PDPC), Singapore, if you believe we have handled your data contrary to the PDPA.

12. Marketing communications

We send project and service emails to clients under contract. Occasional studio updates go only to contacts who opted in. Every marketing email includes an unsubscribe link. We do not buy mailing lists. For Singapore recipients we comply with DNC Registry requirements where applicable and maintain suppression lists when you opt out.

13. Children's data

Our services target business clients. This site is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has submitted data, contact [email protected] and we will delete it promptly.

14. Changes to this policy

We update this policy when practices or law change. Material changes will be noted on this page with a revised "Last updated" date. Continued use after changes constitutes acknowledgement for non-material updates; material changes to client processing will be communicated directly where required. Previous versions may be archived internally for compliance reference.

15. Third-party advertising platforms

When delivering social media or creative campaign services we may access client advertising accounts on Meta, Google, LinkedIn or TikTok solely to implement agreed work. We do not use your personal enquiry data for advertising. Client ad accounts remain client-owned; we request access permissions in writing and revoke on project completion unless a retainer continues.

16. Data accuracy

You are responsible for the accuracy of personal and business data you submit. We may refuse or delay service if information is incomplete or misleading in ways that affect delivery or legal compliance.

17. Automated decision-making

We do not make solely automated decisions with legal or similarly significant effects on individuals based on website enquiry data. AI tools assist human staff; proposals and acceptances involve human review.

18. Records for legal and accounting

Invoices, contracts, tax records and correspondence may be retained beyond project completion as required by Singapore law and our accountants. Such records are access-controlled and not used for marketing without consent. Accounting data may include your company billing address and contact name linked to project fees — not used for unrelated profiling.

19. Your responsibilities

When providing audience research, customer quotes or user-generated content for campaigns, you confirm you have rights to share that material and that it does not infringe third-party privacy or intellectual property. We may pause work if lawful basis for using supplied personal data is unclear.

20. Public relations and portfolio use

We do not name clients or display live campaign assets on this website without written permission. Proposals may include anonymised examples. Contract schedules specify whether we may list your organisation in our credentials deck or submit work for industry awards — default is no unless agreed in writing. Portfolio requests after project completion require a separate written consent specifying channels and duration.

21. Contact

Data Protection Officer: [email protected]
FlareLife Creative Pte. Ltd.
180 Bencoolen Street, #06-04 The Bencoolen, Singapore 189646
+65 6688 4712
We aim to acknowledge privacy requests within five working days wherever possible.