Privacy Policy

This Privacy Policy explains how YINQ CREATIVE PTE. LTD. (UEN 202628994G) ("Yinq Creative", "we", "us" or "our") collects, uses, discloses and protects personal data, in line with Singapore's Personal Data Protection Act 2012 ("PDPA") and its regulations. It applies when you visit www.yinq-creative.com, contact us or use our services.

1. Personal data we collect

Depending on how you interact with us, we may collect:

• Contact details, such as your name, email address, phone number and company name
• Enquiry details you share with us, such as your project needs and budget
• Information needed to provide our services, such as website content, brand materials and account access details you choose to give us
• Billing details, such as your billing name, company address and payment records
• If you apply for a job with us, your resume and application details
• Website usage information, such as pages visited and device or browser type, if analytics or cookies are used on our website

We do not collect NRIC, FIN or passport numbers unless it is required by law or strictly necessary to verify identity to a high degree of accuracy. If that is ever needed, we will tell you why before collecting it.

2. How we collect it

We collect personal data when you fill in our contact form, email us, message us on WhatsApp, speak with us by phone or video call, meet us, or sign up for one of our services. If you give us personal data about another person, such as a colleague, you confirm that they have agreed to it being shared with us for the purposes in this policy.

3. Why we use your personal data

We use your personal data to:

• Reply to your enquiries and prepare quotations
• Provide, manage and support the services you sign up for
• Send invoices, process payments and keep business records
• Send updates about your project or plan
• Send marketing messages, only where you have agreed to receive them
• Assess job applications and contact applicants
• Improve our website and services
• Meet our legal and regulatory obligations

We collect, use and disclose personal data with your consent, or where the PDPA otherwise allows it, for example where it is needed to carry out a contract with you, or for our legitimate interests or business improvement, where the PDPA permits. We will not use your personal data for a new purpose without telling you and, where required, getting your consent.

4. Your consent and withdrawing it

You may withdraw your consent at any time by emailing [email protected]. We will tell you the likely consequences of withdrawing, such as not being able to continue a service, and we will stop collecting, using and disclosing your personal data for the relevant purposes within a reasonable time, unless the law requires or allows us to continue.

5. Marketing messages

We send marketing messages only if you have agreed to receive them. You can unsubscribe at any time using the link in our emails or by contacting us. We will not send marketing messages to Singapore telephone numbers registered on the Do Not Call Registry unless you have given us clear and unambiguous consent.

6. Who we share it with

We do not sell your personal data. We may share it with:

• Service providers who help us run our business, such as website hosting, email, cloud storage and payment providers
• Our team members and remote staff who work on your project or plan, who are bound by confidentiality obligations
• Professional advisers, such as accountants and lawyers, where needed
• Government or regulatory authorities, where required or allowed by law

Where we share personal data with service providers, we require them by contract to protect it and to use it only for the purposes we have given them.

7. Transfers outside Singapore

Some of our service providers and remote team members may be located outside Singapore, and accessing data from overseas also counts as a transfer. Before transferring personal data overseas, we take reasonable steps, such as contractual safeguards, to make sure the recipient protects it to a standard comparable to the PDPA.

8. When we handle data for our clients

When we provide services such as remote administrative support or website management, we may handle personal data on behalf of our clients, for example their customers' or staff details. In these cases, we act as a data intermediary for our client. We process that data only on our client's instructions, protect it, keep it only as long as needed, and tell our client promptly if a data breach occurs. Our client remains responsible for that data under the PDPA.

9. Accuracy

We make reasonable efforts to keep the personal data we hold accurate and complete. Please tell us if your details change.

10. Protecting your personal data

We use reasonable security arrangements to protect personal data from unauthorised access, collection, use, disclosure, copying, changes, disposal or loss, and from loss of any storage device holding it. No method of transmission over the internet is completely secure, but we work to protect your data.

11. How long we keep it

We keep personal data only for as long as it is needed for the purposes it was collected for, or as required for legal and business purposes, such as keeping accounting records. After that, we delete it or make it anonymous.

12. Access and correction

You may ask for a copy of the personal data we hold about you, and information about how it has been used or disclosed in the past year. You may also ask us to correct any error or omission in it. Please email [email protected].

We will respond within 30 days. If we cannot respond within 30 days, we will tell you within that time when we will be able to respond. We may charge a reasonable fee for access requests, and will tell you the fee before processing your request. Where we correct your personal data, we will also send the corrected data to organisations we disclosed it to in the past year, where needed.

13. Data breaches

If we suspect a data breach, we will assess it promptly. If the breach is likely to cause significant harm to the people affected, or affects 500 or more people, we will notify the Personal Data Protection Commission no later than 3 calendar days after our assessment, and notify the people affected where required.

14. Cookies

Our website may use cookies and similar technologies to understand how visitors use the site. Where cookies collect personal data and are not essential to run the website, we will ask for your consent first. You can block or delete cookies through your browser settings, although some parts of the website may not work as intended.

15. Children

Our services are meant for businesses and adults. We do not knowingly collect personal data from children under 13 without the consent of a parent or guardian.

16. Contact our Data Protection Officer

For any questions, requests or complaints about this policy or your personal data, please contact our Data Protection Officer at [email protected]. If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore.

17. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page. This policy is effective from 12 November 2026.