Privacy Policy

1. Introduction and scope

BrightReach Marketing operates a marketing agency based in Singapore. We respect your privacy and are committed to handling personal data responsibly and in accordance with applicable data protection laws, including the Personal Data Protection Act 2012 of Singapore ("PDPA") where it applies to our activities.

This Privacy Policy applies to personal data collected through our website at brightreach.life, email correspondence, telephone communications, in-person meetings at our office, and any enquiry forms you submit to us. It does not apply to third-party websites, platforms, or services that may be linked from our site. Those services are governed by their own privacy policies.

By using our website or providing personal data to us, you acknowledge that you have read this Privacy Policy. If you do not agree with our practices, please do not use the website or submit personal data through our forms.

2. Data controller information

The data controller responsible for personal data processed in connection with this website and our agency enquiries is:

BrightReach Marketing
182 Cecil Street, #17-03, Frasers Tower
Singapore 069547
Email: [email protected]
Phone: +65 6229 3847

For privacy-related questions or requests, please contact us using the details above. We aim to respond within a reasonable timeframe, typically within ten business days for standard requests. Where a request is complex or involves large volumes of archived project data, we may extend this period and will inform you of expected timing.

3. Personal data we collect

The categories of personal data we may collect depend on how you interact with us:

• Contact and identity data: name, email address, telephone number, company name, job title, and business address when you submit an enquiry or correspond with us.
• Communication content: the content of messages you send via our contact form, email, or other channels, including project requirements and marketing objectives you choose to share.
• Technical data: IP address, browser type, device type, operating system, referring URL, pages viewed, and approximate access times collected through standard server logs when you visit our website.
• Cookie and preference data: information about cookie consent choices stored locally in your browser, as described in our Cookie Policy.

We do not intentionally collect sensitive personal data such as government identification numbers, financial account credentials, health information, or biometric data through this website. Please do not submit such information via our contact form. Our contact form is intended for business enquiries only and must not be used to transmit payment card details, passwords, one-time codes, or similar credentials.

4. How we collect personal data

We collect personal data in the following ways:

• Directly from you when you complete the contact form, send email, call our office, or meet with us.
• Automatically when you browse our website, through server logs generated by our hosting infrastructure.
• From your organisation when a colleague or representative provides your details as part of a business enquiry or project engagement.

Where personal data is provided by someone other than the data subject, we expect that person to have appropriate authority or consent to share the information for business communication purposes.

5. Purposes of processing

We process personal data for legitimate business purposes related to operating a marketing agency, including:

• Responding to enquiries and scheduling consultations;
• Preparing proposals, statements of work, and service agreements;
• Delivering marketing services under contract with clients;
• Managing client relationships, invoicing, and project communications;
• Maintaining website security, troubleshooting technical issues, and preventing abuse;
• Complying with legal obligations, regulatory requests, and professional standards;
• Improving our website content and user experience based on aggregated usage patterns;
• Protecting our legal rights in the event of disputes or claims.

We do not sell personal data. We do not use personal data collected through this website for third-party advertising profiles. Google Ads may independently process data when you arrive via an advertisement; that processing is governed by Google's policies and is separate from our website operations.

6. Legal bases for processing

Depending on context, we rely on one or more of the following bases:

• Consent: where you voluntarily submit an enquiry or opt in to functional features such as map loading after cookie consent;
• Contractual necessity: where processing is required to evaluate or perform a service agreement with you or your organisation;
• Legitimate interests: where processing is necessary for our business operations, website security, and client communication, balanced against your rights and expectations;
• Legal obligation: where we must retain or disclose information to comply with applicable law.

7. Disclosure of personal data

We may share personal data with:

• Service providers who assist with hosting, email delivery, document management, or project tools, subject to confidentiality obligations;
• Professional advisers such as lawyers or accountants when required for compliance or dispute resolution;
• Authorities when required by law, court order, or to protect rights, safety, and security;
• Successors in the event of a business reorganisation, merger, or asset transfer, with continued protection of personal data.

Some service providers may process data outside Singapore. Where cross-border transfers occur, we take reasonable steps to ensure appropriate safeguards consistent with applicable requirements.

8. Data retention

We retain personal data only as long as necessary for the purposes described in this policy, unless a longer period is required by law. Typical retention periods include:

• Enquiry records: up to twenty-four months from last meaningful contact unless a client relationship continues;
• Client project records: duration of engagement plus up to seven years for contractual, tax, and legal purposes where applicable;
• Server logs: generally up to ninety days unless needed for security investigation;
• Contact form submission logs stored on our server: retained for operational troubleshooting and then archived or deleted on a periodic schedule.

When data is no longer required, we take reasonable steps to delete or anonymise it.

9. Security measures

We implement administrative, technical, and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include access controls on server directories, validation of form submissions, sanitisation of email headers, and restricted access to enquiry logs.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect personal data, we cannot guarantee absolute security. You are responsible for ensuring that information you send us is appropriate for transmission and does not include unnecessary sensitive details.

10. Your rights

Subject to applicable law, you may have rights including:

• Requesting access to personal data we hold about you;
• Requesting correction of inaccurate or incomplete data;
• Requesting deletion of data where retention is no longer necessary or lawful;
• Withdrawing consent where processing is consent-based, without affecting prior lawful processing;
• Objecting to certain processing based on legitimate interests;
• Requesting information about cross-border transfers where applicable.

To exercise these rights, contact [email protected] with sufficient detail for us to verify your identity and locate relevant records. We may need to confirm your identity before fulfilling certain requests. If you are dissatisfied with our response, you may have the right to lodge a complaint with the Personal Data Protection Commission in Singapore.

11. Children's privacy

Our website and services are directed at businesses and professional audiences. We do not knowingly collect personal data from individuals under eighteen years of age. If you believe a minor has submitted personal data to us, please contact us so we can take appropriate steps to delete the information.

12. Third-party links and embedded content

Our website may include links to third-party sites and, with your consent, embedded Google Maps on the contact page. Third-party services may collect data according to their own policies. We encourage you to review those policies before interacting with external services. Map embedding is loaded only after you accept functional cookies or enable the map explicitly.

13. Marketing communications

If you enquire about our services, we may follow up with relevant information about BrightReach offerings. We do not send unsolicited bulk marketing email without appropriate consent where required. You may opt out of non-essential marketing messages at any time by using the unsubscribe instructions in our emails or by contacting us directly.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Material changes will be posted on this page. Continued use of the website after updates constitutes acknowledgement of the revised policy, subject to applicable law.

16. Automated decision-making

We do not use personal data collected through this website to make solely automated decisions that produce legal or similarly significant effects on individuals. Marketing performance tools used in client engagements operate under separate contractual terms and are not applied to casual website visitors or newsletter subscribers who have not entered a service agreement.

17. Contact

For questions about this Privacy Policy or our data practices, contact:

BrightReach Marketing
182 Cecil Street, #17-03, Frasers Tower, Singapore 069547
Email: [email protected]
Phone: +65 6229 3847