Privacy Policy

1. Introduction

Sablebrook ("we", "our" or "us") is a B2B brand strategy consulting practice based at 16 Collyer Quay, #15-04, Income at Raffles, Singapore 049318. We are committed to handling personal data with care and in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

This Privacy Policy describes the types of personal data we collect through our website and in the course of providing our services, the purposes for which we use that data, the measures we take to protect it, and the rights available to individuals in relation to their data.

By using our website or engaging our services, you acknowledge that you have read and understood this policy. If you have questions, please contact us at [email protected] before proceeding.

2. Data We Collect

We collect personal data only when there is a clear business reason to do so. The categories of data we may collect include:

• Contact information — name, business email address, telephone number and company name, submitted via our website contact form or provided directly in the course of an engagement.
• Correspondence — the content of messages sent to us by email or through our website, including any documents or materials voluntarily shared for review.
• Technical data — browser type, device type, IP address, pages visited and time spent on our website, collected automatically via server logs and analytics tools.
• Cookie data — preferences and usage data stored via browser cookies, subject to your cookie settings. See section 5 for details.

We do not collect payment card data directly. Where payment is required, it is processed by a third-party payment service operating its own security controls.

Legal basis for processing (PDPA): We process personal data on the basis of consent (for marketing communications and optional cookies), contractual necessity (for service delivery), and legitimate interests (for responding to enquiries and maintaining website security). Where consent is the basis, you may withdraw it at any time.

Retention: Contact data submitted through the website is retained for up to twenty-four months from last interaction, after which it is deleted unless an ongoing service relationship exists. Correspondence and engagement records are retained for seven years in accordance with standard business record-keeping practice. Technical and analytics data is retained for up to fourteen months.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Responding to enquiries — to reply to messages submitted via our contact form or email.
• Service delivery — to perform the brand audit, tone of voice or retainer services you have engaged us for, including reviewing materials you share and preparing written deliverables.
• Scheduling and administration — to arrange calls and follow-up communications related to active engagements.
• Website improvement — to understand how visitors use our website so that we can make it more useful.
• Legal compliance — to retain records as required by applicable law.

We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.

We may share data with service providers who assist with website hosting, email delivery and analytics, under data processing agreements that restrict their use of the data to the purposes for which it was shared.

4. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, disclosure, alteration or loss. These steps include:

• Serving our website over HTTPS using TLS encryption.
• Limiting access to personal data to those within our practice who need it to perform their work.
• Using password protection and access controls on systems where personal data is stored.
• Selecting third-party service providers who maintain appropriate security standards.

In the event of a data breach that is likely to affect individuals, we will notify the Personal Data Protection Commission (PDPC) and any affected individuals in accordance with the PDPA mandatory breach notification requirements.

5. Cookies

Our website uses cookies — small text files stored in your browser — to enable basic functionality and to understand how our website is used. We use the following categories of cookies:

• Essential cookies — required for the website to function. These cannot be disabled.
• Analytics cookies — used to understand which pages are visited and how long visitors spend on each. This data is aggregated and does not identify individuals.
• Preference cookies — used to remember settings such as your cookie consent choice.

You can manage your cookie preferences through the cookie banner shown on your first visit to our website, or at any time via our Cookie Policy page.

6. Your Rights

Under the PDPA, individuals whose personal data we hold have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request that inaccurate or incomplete data be corrected.
• Withdrawal of consent — withdraw consent for the processing of your data where consent is the legal basis. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Data portability — request your data in a commonly used format where technically feasible.

To exercise any of these rights, please write to us at [email protected]. We will respond within thirty days. We may ask you to verify your identity before acting on a request.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg.

7. Third-Party Links

Our website may contain links to other websites operated by third parties. We are not responsible for the content or privacy practices of those websites. We recommend reading the privacy policy of any third-party site you visit.

8. Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of eighteen. If you believe we have inadvertently received data from a minor, please contact us at [email protected] and we will delete it promptly.

9. Policy Updates

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. Material changes will be communicated via a notice on our website for a reasonable period following the update. Continued use of our website after such notice constitutes acceptance of the updated policy.

10. Contact

For any questions, requests or concerns related to this Privacy Policy or the handling of your personal data, please contact us:

• Email: [email protected]
• Post: Sablebrook, 16 Collyer Quay, #15-04, Income at Raffles, Singapore 049318
• Telephone: +65 6817 4259