Privacy notice
How PromoWave Pro handles personal data on promowavepro.pro.
Introduction
PromoWave Pro Pte. Ltd. ("we", "us") operates promowavepro.pro. This notice explains how we handle personal data under the Personal Data Protection Act 2012 (PDPA) of Singapore. We collect only what is needed to respond to enquiries, operate the site, and honour cookie choices.
Data controller
PromoWave Pro Pte. Ltd., 68 Tanjong Katong Road, #05-03, Singapore 436956. Privacy requests: [email protected].
Scope
This notice covers visitors to promowavepro.pro, individuals who email us, and client contacts when client work is discussed through the same channels. Separate engagement letters may add processor terms for project files.
What we collect
When you email us, we process your address, name if provided, and message content. When you use the site, essential cookies and optional preferences described on Cookies may apply. Google Maps embeds on every page may collect device and usage data according to Google policies when loaded.
Categories of data
Identity data (name), contact data (email, phone if you include it), content data (message body and attachments), technical data (browser type from server logs where collected by hosting), and consent records (JSON cookie preferences).
Purpose — enquiries
We use contact data to reply, schedule conversations, and maintain reasonable correspondence records. We do not use enquiry mail for unrelated marketing unless you opt in separately in writing.
Purpose — site operation
Hosting providers process IP addresses and request metadata for security and delivery. We review aggregated server logs only for intrusion investigation.
Purpose — cookies
Cookie data stores your consent choices for essential, functional, analytics, and maps categories. Analytics is off at launch; the toggle records preference for possible future measurement disclosed before activation.
Legal basis
Consent for optional cookies; legitimate interest for responding to enquiries and securing the site; contractual necessity when you become a client under a separate agreement.
Retention — mail
General enquiry correspondence is kept up to twenty-four months unless a longer period is required for ongoing engagements or law. Marketing opt-in records are kept until withdrawal.
Retention — clients
Client project material follows schedules in engagement letters, often twelve to thirty-six months after project close unless law requires longer.
Retention — cookies
Consent JSON persists up to one hundred eighty days per browser profile. You may clear cookies manually at any time.
Sharing — processors
We use hosting providers in Singapore. Email may transit provider infrastructure. Processors are selected for reliability and contracted where applicable.
Sharing — maps
Google operates embedded maps. Data processing occurs under Google terms. Disable maps in cookie Customise if you prefer not to load the embed.
International transfers
Email and map embeds may involve processing outside Singapore. We minimise personal data in messages and avoid sending special-category data through webmail.
Security measures
We use TLS on production hosting, restrict mailbox access to staff who need it, and store consent in cookies with SameSite=Lax. No system is perfectly secure; report suspected incidents promptly.
Your rights — access
You may request access to personal data we hold about you by writing to [email protected] with enough detail to locate records.
Your rights — correction
You may request correction of inaccurate data. We will verify identity before amending client records.
Your rights — withdrawal
You may withdraw consent for optional processing where consent is the basis. Essential site operation may continue.
Your rights — complaint
You may complain to the Personal Data Protection Commission Singapore if you believe processing violates the PDPA.
Children
This site is not directed at children under thirteen. Do not send us minors' data without guardian authority.
Automated decisions
We do not make solely automated decisions with legal or similarly significant effects based on site browsing.
Links
External links are not covered by this notice. Read policies on sites you visit from here.
Changes
We may update this notice; last updated 2026-08-13. Material changes will be noted on this page with a revised date.
Contact
Privacy questions: [email protected]. General contact: [email protected].
Disclaimer
PromoWave Pro is an independent communications studio. This site describes our craft, the working methods we use, and the shapes an engagement can take. Outcomes depend on market conditions, product readiness, timing, and decisions outside our control; nothing here promises a particular commercial result.
We do not sell personal data lists. We do not purchase third-party contact lists for cold outreach from this domain.
If you attach planning documents to email, you remain responsible for redacting third-party personal data not needed for our review.
Server logs, if retained by hosting partners, may include IP addresses; we do not merge those logs with marketing profiles on this site.
When you use tel: links on mobile devices, your carrier may process call metadata outside our control.
Cookie backup in localStorage mirrors consent JSON for resilience when cookies are cleared partially; both keys are documented on Cookies.
Data breach notification will follow PDPA requirements if applicable to an incident involving our systems.
If you need a copy of this notice in another format, email [email protected].
68 Tanjong Katong Road
We log consent changes only inside your browser storage unless you later email us about a data subject request referencing approximate time.
Attachments you send may contain personal data about colleagues; obtain their permission before forwarding org charts or staff lists.
We delete mailbox exports during offboarding of staff who monitored hello@ addresses according to the same retention as general enquiry mail.
If Singapore law changes PDPA obligations, we will update this page before or alongside operational changes where practicable.
Processors are reviewed annually for hosting location and TLS configuration.
We do not respond to data requests sent to unrelated domains pretending to represent us; verify the privacy@ address on this page.
Marketing opt-in, if ever offered, will be separate from enquiry mail and logged with timestamp and source page.
You may request portability of correspondence we hold in mbox format where technically feasible.
Children's data is deleted upon discovery unless parental authority is documented.
Special-category data should not be sent through the general mailbox; contact us to arrange appropriate secure transfer if needed.
We minimise fields in webserver logs and do not use them to profile individual visitors on this marketing site.
If you unsubscribe from optional mailings, we retain suppression records to honour your choice.
Incident response includes notifying affected individuals when PDPA requires and documenting remediation steps internally.
Data protection queries from client engagements may be handled under separate processor clauses with different contacts.
We do not combine cookie consent strings with enquiry identity unless you email us referencing your browser session, which we cannot reliably match.
Public Wi-Fi may expose metadata; use trusted networks when emailing documents containing personal data.
Redacted examples in training materials use fictional names; notify us if you believe real data appeared in error.
Third-party fonts and maps may log IP addresses; see Cookies for toggles and Google policies for map embeds.
Retention schedules may extend when litigation hold applies; we notify affected clients when holds engage.
Anonymised aggregate statistics about site traffic may be derived without identifying individuals when analytics is enabled in future.
We log consent changes only inside your browser storage unless you later email us about a data subject request referencing approximate time.
Attachments you send may contain personal data about colleagues; obtain their permission before forwarding org charts or staff lists.
We delete mailbox exports during offboarding of staff who monitored hello@ addresses according to the same retention as general enquiry mail.
If Singapore law changes PDPA obligations, we will update this page before or alongside operational changes where practicable.
Processors are reviewed annually for hosting location and TLS configuration.
We do not respond to data requests sent to unrelated domains pretending to represent us; verify the privacy@ address on this page.
Marketing opt-in, if ever offered, will be separate from enquiry mail and logged with timestamp and source page.
You may request portability of correspondence we hold in mbox format where technically feasible.
Children's data is deleted upon discovery unless parental authority is documented.
Special-category data should not be sent through the general mailbox; contact us to arrange appropriate secure transfer if needed.
We minimise fields in webserver logs and do not use them to profile individual visitors on this marketing site.
If you unsubscribe from optional mailings, we retain suppression records to honour your choice.
Incident response includes notifying affected individuals when PDPA requires and documenting remediation steps internally.
Data protection queries from client engagements may be handled under separate processor clauses with different contacts.
We do not combine cookie consent strings with enquiry identity unless you email us referencing your browser session, which we cannot reliably match.
Public Wi-Fi may expose metadata; use trusted networks when emailing documents containing personal data.
Redacted examples in training materials use fictional names; notify us if you believe real data appeared in error.
Third-party fonts and maps may log IP addresses; see Cookies for toggles and Google policies for map embeds.
Retention schedules may extend when litigation hold applies; we notify affected clients when holds engage.