Privacy notice

1. Introduction

Boost Haven Spark Pte. Ltd. ("we", "us", "our") respects your privacy and is committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA"). This privacy notice explains how we collect, use, disclose and safeguard personal data when you visit boosthavenspark.life, contact us by email or telephone, or engage our professional services.

This notice applies to all personal data we process as a data controller. Where we process personal data on behalf of a client under a professional engagement, the client's own privacy documentation may also apply.

Questions about this notice may be directed to [email protected].

2. Data controller

The data controller responsible for personal data collected through this website and our business operations is:

Boost Haven Spark Pte. Ltd.
12 Kandahar Street, #02-01, Singapore 198884
Email: [email protected]
Telephone: +65 6903 5271

3. Personal data we collect

We may collect the following categories of personal data depending on how you interact with us:

• Contact data: name, job title, company name, email address, telephone number and postal address when you write to us or enter a professional engagement.
• Correspondence data: content of emails, attachments and notes from meetings or calls.
• Technical data: IP address, browser type, device type, referring URL and pages viewed, collected automatically when you visit this website.
• Cookie data: preferences stored by our cookie consent mechanism. See our cookie notice.
• Professional data: briefs, brand materials and business information you share during an engagement.

We do not collect sensitive personal data through this website. We do not operate a contact form; data you provide arrives via email or telephone at your initiation.

4. How we collect personal data

Personal data is collected through:

• Direct email to [email protected] or [email protected]
• Telephone calls to +65 6903 5271
• In-person meetings at our studio or client premises
• Automatic logging by our web server when you browse this site
• Cookie and localStorage mechanisms described in our cookie notice
• Google Maps embeds on every page, which may collect usage data under Google's policies

5. Purposes of collection, use and disclosure

We collect and use personal data for the following purposes:

• Responding to enquiries about our services
• Delivering professional marketing and communications services under contract
• Scheduling and conducting studio sessions, video calls and courtyard intensives
• Maintaining client records and engagement documentation
• Complying with legal and regulatory obligations in Singapore
• Operating and securing this website
• Remembering your cookie preferences
• Improving our website and services through aggregated, non-identifiable analysis where permitted

We do not sell personal data. We do not use personal data for unsolicited direct marketing without consent where consent is required under the PDPA.

6. Legal basis and consent

Under the PDPA, we rely on one or more of the following bases to collect, use and disclose personal data:

• Consent: where you voluntarily provide data by email or agree to cookies beyond essential storage.
• Contractual necessity: where processing is necessary to perform a professional services agreement.
• Legitimate interests: where processing is necessary for our business operations, website security and responding to enquiries, balanced against your privacy rights.
• Legal obligation: where we must retain or disclose data to comply with applicable law.

You may withdraw consent for optional processing at any time by writing to [email protected]. Withdrawal does not affect the lawfulness of processing before withdrawal.

7. Disclosure to third parties

We may disclose personal data to:

• Hosting and infrastructure providers who store this website in Singapore
• Professional advisers such as lawyers and accountants under confidentiality obligations
• Production partners involved in a client engagement, only with client authorisation
• Google LLC in connection with Google Maps embeds on this site
• Public authorities when required by law or court order

We require third parties who process personal data on our behalf to implement appropriate security measures and process data only for specified purposes.

8. International transfers

Our primary systems are hosted in Singapore. Where personal data is transferred outside Singapore — for example, through Google Maps or email routing — we take steps to ensure recipients provide a standard of protection comparable to that under the PDPA, including contractual safeguards where appropriate.

Transfers to Google LLC occur when you load embedded maps or Google Fonts. Google's global infrastructure may process data in countries outside Singapore. We assess such transfers against PDPA requirements and rely on Google's published contractual commitments where applicable.

9. Retention

We retain personal data only as long as necessary for the purposes described in this notice:

• Enquiry correspondence: up to twenty-four months unless an engagement follows
• Client engagement records: duration of engagement plus seven years for professional and legal purposes
• Server logs: up to twelve months
• Cookie consent records: one hundred and eighty days, then renewed if you revisit

Data is securely deleted or anonymised when no longer required.

10. Security

We implement administrative, technical and physical safeguards appropriate to the nature of the personal data we hold. These include access controls, encrypted connections (HTTPS), and staff training on confidentiality.

No method of transmission over the internet is completely secure. While we strive to protect personal data, we cannot guarantee absolute security.

Access to client materials is limited to staff working on the engagement. Materials are not used for unrelated purposes or shared with third parties except as described in this notice or authorised by the client.

11. Your rights under the PDPA

Subject to exceptions under the PDPA, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent for optional processing
• Request information about how your personal data has been used or disclosed in the past year

To exercise these rights, email [email protected] with sufficient detail for us to identify your record. We respond within thirty days where the PDPA requires.

If you believe we have not handled your personal data in accordance with the PDPA, you may contact the Personal Data Protection Commission of Singapore.

12. Third-party links and embeds

This website embeds Google Maps on every page. Google may collect data about your interaction with the map in accordance with Google's privacy policy. We do not control Google's data practices.

Our site does not link to social media login or third-party advertising networks.

13. Children

This website and our services are directed at business professionals. We do not knowingly collect personal data from individuals under eighteen years of age.

14. Changes to this notice

We may update this privacy notice from time to time. The "Last updated" date at the top indicates the most recent revision. Material changes will be noted on this page.

15. Agency disclaimer

We are an independent marketing agency on Kandahar Street. This site describes our craft, working methods and engagement shapes. Outcomes depend on market conditions, product strength, timing and decisions outside our control — nothing here promises a particular commercial result.

16. Contact

Privacy enquiries: [email protected]
General enquiries: [email protected]
Address: 12 Kandahar Street, #02-01, Singapore 198884

17. Data breach notification

If we become aware of a data breach likely to result in significant harm to affected individuals, we will notify the Personal Data Protection Commission of Singapore and affected individuals as required under the PDPA, without undue delay.

Our internal breach response procedure includes containment, assessment, notification and remedial action. Staff are trained to escalate suspected breaches to [email protected] immediately.

18. Do Not Call Registry

Where the Do Not Call Provisions of the PDPA apply, we honour registry checks before sending marketing messages by telephone or text to Singapore telephone numbers, unless an exception applies or valid consent has been obtained.

19. Accuracy of Site content

We aim to keep information on this Site accurate and current. Studio hours, contact details and service descriptions may change. The version published on the Site at the time of your visit applies. For contractual purposes, rely on written agreements rather than Site copy alone.

If you notice an error in our contact details or legal information, please write to [email protected] so we can correct it promptly.

20. Marketing communications

We may send occasional updates about studio availability or published thinking to contacts who have engaged with us professionally, where permitted under the PDPA. You may opt out of such messages at any time by replying to the email or writing to [email protected].

We do not purchase contact lists or send unsolicited bulk marketing to addresses harvested from this Site.

Business cards exchanged at events are used only to follow up on conversations you initiated, not for unrelated campaigns.

We maintain a record of consent and opt-out requests where required, so preferences are honoured on subsequent contact.