Privacy policy

Feed Craft Vault Pte. Ltd. ("Feed Craft Vault", "we", "us") respects personal data handled through our studio operations and this website. This notice explains what we collect, why, and how to exercise your rights. Contact [email protected] for privacy enquiries.

We act as a data controller for correspondence, client onboarding records, and website consent logs. For client-owned material indexed in the archive, we act as a processor under written agreements that define retention and access.

Categories we may hold: identity and contact details (name, organisation, email, phone); correspondence content; appointment records; contract and billing references where applicable; technical logs (IP address, browser type, timestamp) for security; cookie consent choices.

Lawful bases under the PDPA and applicable law include: consent (cookie preferences, marketing where explicitly opted in); contractual necessity (delivering editions you engaged us to produce); legitimate interests (studio security, fraud prevention, improving index quality) balanced against your rights; legal obligation (record-keeping required by regulators or courts).

We collect email and phone when you write to us or call reception. We use these to respond, schedule visits, and deliver editions under contract. We do not purchase mailing lists.

Website cookies: an essential cookie/localStorage entry remembers banner choices (see Cookies page). Functional cookies load only if you consent to Google Maps embeds. We do not load advertising or analytics pixels today; if that changes, this notice will be updated before activation.

Google Maps, when enabled, may process device and location-related data under Google's terms. We embed maps to show studio location only — not to track users across sessions.

Archive intake stores public-record PDFs that may mention individuals in their professional capacity (directors, signatories). We do not enhance those documents with private contact details. Clients who receive editions are responsible for their own downstream handling.

Retention: correspondence — up to seven years unless longer required for disputes; contract records — duration of agreement plus seven years; consent logs — seven years; security logs — twelve months rolling; indexed public PDFs — per client agreement (default seven years) with hash metadata retained after file purge where permitted.

Access and correction: email [email protected] with sufficient identity verification. We respond within reasonable timeframes prescribed by law. You may request correction of inaccurate personal data we control.

Withdrawal of consent for optional processing does not affect lawfulness of prior processing. Withdrawing map consent hides embeds on your next page load.

We share data with: hosting and mail providers under contract; professional advisers bound by confidentiality; authorities when required by law. We do not sell personal data.

Cross-border transfers may occur if infrastructure providers store data outside Singapore. We require appropriate safeguards consistent with PDPA requirements.

Security measures include access controls on archive terminals, encrypted transport for mail, hashed document storage, and staff training on confidentiality. No system is perfectly secure; we notify affected parties and regulators of significant breaches where required.

Children: our services target organisations and professionals. We do not knowingly collect data from minors.

Automated decision-making: we do not make solely automated decisions with legal or similarly significant effects about individuals.

Third-party links on editions point to agency sites. Their privacy practices are governed by their own notices.

Updates: we may revise this notice when practices change. Material changes appear on this page with an updated date in schema metadata.

Complaints: contact us first at [email protected]. You may also lodge a complaint with the Personal Data Protection Commission Singapore if unresolved.

Data Protection Officer contact: [email protected], attention DPO, ${META.streetAddress}, Singapore ${META.postalCode}.

Marketing communications: we send studio updates only when you opt in during onboarding. Each message includes an unsubscribe path handled by reception.

Visitor logs at Pagoda Street reception record name, time, and purpose of visit for security; logs are purged after twenty-four months unless an incident requires longer retention.

Processor agreements with clients define sub-processors, breach notification windows, and deletion timelines when engagements end.

Research requests from journalists are assessed case by case; we do not release client correspondence without written authority.

Pagoda Street craft room · PDPA studio controller: Editors treat PDPA studio controller as operational detail on the privacy page — documented for transparency, not promotion.

Pagoda Street craft room · client processor role: Editors treat client processor role as operational detail on the privacy page — documented for transparency, not promotion.

Pagoda Street craft room · archive PDF mentions: Editors treat archive PDF mentions as operational detail on the privacy page — documented for transparency, not promotion.

Pagoda Street craft room · consent log retention: Editors treat consent log retention as operational detail on the privacy page — documented for transparency, not promotion.

Pagoda Street craft room · Google embed processing: Editors treat Google embed processing as operational detail on the privacy page — documented for transparency, not promotion.

Pagoda Street craft room · data subject rights: Editors treat data subject rights as operational detail on the privacy page — documented for transparency, not promotion.

Pagoda Street craft room · subprocessor list: Editors treat subprocessor list as operational detail on the privacy page — documented for transparency, not promotion.

Pagoda Street craft room · security access controls: Editors treat security access controls as operational detail on the privacy page — documented for transparency, not promotion.

Pagoda Street craft room · marketing opt-in path: Editors treat marketing opt-in path as operational detail on the privacy page — documented for transparency, not promotion.

Pagoda Street craft room · reception visitor logs: Editors treat reception visitor logs as operational detail on the privacy page — documented for transparency, not promotion.

Pagoda Street craft room · PDPA studio controller: The privacy desk maintains internal notes on PDPA studio controller; public prose here describes method only.

Pagoda Street craft room · client processor role: The privacy desk maintains internal notes on client processor role; public prose here describes method only.

Pagoda Street craft room · archive PDF mentions: The privacy desk maintains internal notes on archive PDF mentions; public prose here describes method only.

Pagoda Street craft room · consent log retention: The privacy desk maintains internal notes on consent log retention; public prose here describes method only.

Pagoda Street craft room · Google embed processing: The privacy desk maintains internal notes on Google embed processing; public prose here describes method only.

Pagoda Street craft room · data subject rights: The privacy desk maintains internal notes on data subject rights; public prose here describes method only.

Pagoda Street craft room · subprocessor list: The privacy desk maintains internal notes on subprocessor list; public prose here describes method only.

Pagoda Street craft room · security access controls: The privacy desk maintains internal notes on security access controls; public prose here describes method only.

Pagoda Street craft room · marketing opt-in path: The privacy desk maintains internal notes on marketing opt-in path; public prose here describes method only.

Pagoda Street craft room · reception visitor logs: The privacy desk maintains internal notes on reception visitor logs; public prose here describes method only.

Pagoda Street craft room · PDPA studio controller: When PDPA studio controller changes, this page updates at the next build cycle with a revised dateline.

Pagoda Street craft room · client processor role: When client processor role changes, this page updates at the next build cycle with a revised dateline.

Pagoda Street craft room · archive PDF mentions: When archive PDF mentions changes, this page updates at the next build cycle with a revised dateline.

Pagoda Street craft room · consent log retention: When consent log retention changes, this page updates at the next build cycle with a revised dateline.

Pagoda Street craft room · Google embed processing: When Google embed processing changes, this page updates at the next build cycle with a revised dateline.

Pagoda Street craft room · data subject rights: When data subject rights changes, this page updates at the next build cycle with a revised dateline.

Pagoda Street craft room · subprocessor list: When subprocessor list changes, this page updates at the next build cycle with a revised dateline.

Pagoda Street craft room · security access controls: When security access controls changes, this page updates at the next build cycle with a revised dateline.

Pagoda Street craft room · marketing opt-in path: When marketing opt-in path changes, this page updates at the next build cycle with a revised dateline.

Pagoda Street craft room · reception visitor logs: When reception visitor logs changes, this page updates at the next build cycle with a revised dateline.

Pagoda Street craft room · PDPA studio controller: Readers asking about PDPA studio controller should cite the page name in mail to [email protected].

Pagoda Street craft room · client processor role: Readers asking about client processor role should cite the page name in mail to [email protected].

Pagoda Street craft room · archive PDF mentions: Readers asking about archive PDF mentions should cite the page name in mail to [email protected].

Pagoda Street craft room · consent log retention: Readers asking about consent log retention should cite the page name in mail to [email protected].

Pagoda Street craft room · Google embed processing: Readers asking about Google embed processing should cite the page name in mail to [email protected].