Privacy

Privacy policy

Last updated: 27 July 2026

DriftLife Campaigns Pte. Ltd. ("we", "us") operates driftlife.life. This policy explains how we collect, use, disclose and protect personal data under Singapore's Personal Data Protection Act 2012 (PDPA).

This document applies to visitors and enquiry contacts. Client project data may also be governed by separate contractual data processing terms where those terms are more specific.

1. Data controller

DriftLife Campaigns Pte. Ltd., 3 Gateway Drive, #16-05 Westgate Tower, Singapore 608532. Privacy enquiries: [email protected].

2. What we collect

Contact form: name, email, phone (optional), subject, message, consent record. Technical logs: IP address, browser type, pages viewed, timestamps. Cookies: see Cookie policy.

3. Purposes

Respond to enquiries; deliver contracted services; improve site security and performance; comply with law; send service communications where permitted.

4. Legal bases / consent

We rely on consent for marketing contact and non-essential cookies. Contract performance for client work. Legitimate interests for fraud prevention and site analytics where applicable.

5. Disclosure

Processors: hosting, email, analytics (if consented). Authorities when required. We do not sell personal data.

6. Transfer

Data may be processed on servers outside Singapore with appropriate safeguards and vendor agreements.

7. Retention

Enquiry records: up to 24 months unless a client relationship continues. Client project data: per contract and legal requirements. Logs: typically 12 months.

8. Security

Access controls, encryption in transit, staff confidentiality. No method is perfectly secure; report concerns to [email protected].

9. Your rights

Access, correction, withdrawal of consent, portability where applicable. Contact [email protected]. You may complain to the Personal Data Protection Commission.

10. Children

Services are B2B; we do not knowingly collect data from minors.

11. Changes

We may update this policy; material changes posted here with a new date.

12. Marketing communications

If you opt in or become a client, we may send service updates related to driftlife.life. You may unsubscribe from non-essential marketing emails at any time. Transactional messages about active projects may still be sent.

13. Automated decision-making

We do not make solely automated decisions with legal or similarly significant effects about individuals based on contact form data.

14. Data breach notification

If a breach likely to cause harm occurs, we will notify affected individuals and authorities as required under Singapore law, and describe remedial steps taken.

15. Vendor management

Hosting providers, email relays and analytics tools (when enabled) process limited data under contract. We review vendors periodically for security and PDPA alignment.

16. Access requests procedure

Email [email protected] with your name, relationship to DriftLife Campaigns Pte. Ltd., and the data you wish to access or correct. We respond within reasonable periods prescribed by law, typically within thirty days for straightforward requests.

17. Cookies and similar technologies

Non-essential cookies load only after banner consent. See the Cookie policy for category descriptions and retention periods. Browser controls may also block cookies.

18. Third-party sites

Our site may link to platform help centres or partner tools. Their privacy practices govern data you provide there, not this policy.

19. Records of consent

Contact form PDPA checkboxes and cookie banner choices are logged with timestamps to demonstrate consent where required.

20. Contacting the PDPC

If you believe we mishandled personal data, contact us first at [email protected]. You may escalate unresolved concerns to the Personal Data Protection Commission Singapore.

21. Categories of personal data

Identifiers (name, email, phone), professional information you choose to share (company, role), communication content, technical metadata (IP, device, browser), and cookie preference records.

22. Minimisation

We collect only data reasonably necessary for stated purposes. Optional fields are labelled; required fields are limited to what we need to respond.

23. Accuracy

Please inform us if your contact details change so we can maintain accurate records and avoid misdirected communications.

24. Withdrawal of consent

You may withdraw consent for marketing or non-essential cookies without affecting lawfulness of prior processing. Some processing may continue where another legal basis applies.

25. International clients

Clients outside Singapore may submit enquiries; data may be processed in Singapore and other locations where processors operate, subject to safeguards.

26. Employee access

Only staff with a need to know access personal data. Access is logged where systems support auditing.

27. Retention schedule summary

Enquiries: up to twenty-four months. Client contracts: duration plus statutory periods. Security logs: about twelve months unless investigation requires longer retention.

28. Anonymisation

Aggregated analytics, when enabled, do not identify individuals. Portfolio metrics are anonymised before publication.

29. Policy review

We review this policy at least annually and after material changes to processing activities or law.

30. Questions

Privacy officer contact: [email protected]. Postal: DriftLife Campaigns Pte. Ltd. registered address listed on the Contact page.

31. Lawful basis summary table (narrative)

Enquiry handling: consent and legitimate interest in responding. Contract delivery: performance of agreement. Security monitoring: legitimate interest and legal obligation. Analytics: consent via cookie banner where required.

32. Data Protection Officer

For organisations of our size, privacy enquiries are handled by designated staff reachable at [email protected]. Complex requests may require identity verification to prevent unauthorised disclosure.

33. Marketing lists

We do not purchase third-party contact lists for cold outreach. Business contacts developed through events or referrals are handled under appropriate consent or legitimate interest assessments.

34. Photography at events

If we photograph client workshops with permission, images are used only as agreed in writing. Individuals may request removal where feasible without harming project documentation.

35. Archiving

Closed project folders may be archived in encrypted storage for the period required by contracts or tax law, then securely deleted.

36. Your responsibilities

Do not submit special categories of personal data via the public contact form unless necessary and lawful. Redact sensitive identifiers when possible.

37. Complaint handling

We acknowledge privacy complaints promptly, investigate, and respond with outcomes or remediation steps within reasonable timeframes.

38. Version history

Previous versions available on request. Current version dated 27 July 2026 supersedes prior website privacy statements.

39. Sensitive data warning

Please do not include national ID numbers, full payment card details, or medical information in web forms. Use secure channels agreed in client contracts for such data.

40. Processor instructions

When we process data on your behalf as a client, we act according to your documented instructions and applicable data processing terms annexed to contracts.

41. Public sources

We may review publicly available business information to prepare for meetings you request. We do not combine it with unrelated personal databases.

42. De-identification

Where feasible, we de-identify datasets used for internal training examples before storage.

43. Cross-border transfers

Transfers rely on contractual clauses, adequacy decisions, or consent where required. Copies of safeguards available on request for enterprise clients.

44. Audit cooperation

Enterprise clients may request reasonable information about security practices under confidentiality agreements.

45. Training

Staff with data access receive periodic PDPA awareness training and instructions for incident reporting.

46. Statistical reporting

We may publish aggregate website traffic trends without identifying individuals. Small sample sizes are suppressed to reduce re-identification risk.

47. Link shorteners

If we share tracked links in client reports, click metadata is governed by client agreements and platform policies, not this public site policy.

48. Data portability

Where applicable, clients may request exports of personal data they provided in structured formats reasonable for our systems.

49. Closure

If DriftLife Campaigns Pte. Ltd. ceases operations, personal data will be transferred, returned, or deleted according to law and contractual obligations.

50. Definitions

"Personal data" follows the PDPA definition. "Processing" includes collection, use, disclosure, and storage. "Client" means an organisation with a signed services agreement.

51. Contact again

For any section above, email [email protected] with the subject line Privacy Request so we can route your message quickly to the right person.

"DriftLife" refers to how attention and demand drift. We are a marketing agency: not motorsport, not travel or lifestyle, not coaching, and not a software product.