Data protection

Privacy policy

Last updated: 5 August 2026

This privacy policy explains how Click Haven Pte. Ltd. ("Click Haven", "we", "us" or "our") collects, uses, discloses and protects personal data when you visit clickhaven.life, contact our studio, or engage our brand communications services. We are committed to handling personal data responsibly and in accordance with Singapore's Personal Data Protection Act 2012 ("PDPA") and related guidance issued by the Personal Data Protection Commission ("PDPC").

By using our website or providing personal data to us, you acknowledge that you have read this policy. Where consent is required under the PDPA, we will obtain it through clear, affirmative means — for example, through a checked consent box on our contact form or a written agreement for client engagements.

1. Organisation identity

The data controller responsible for personal data described in this policy is:

Click Haven Pte. Ltd.
18 Bukit Pasoh Road, #02-03
Singapore 089832
Email: [email protected]
Telephone: +65 6814 9273

Click Haven is a Singapore-based professional services studio specialising in brand storytelling, narrative architecture, creative direction and integrated marketing communications. We serve founders, marketing leads and brand teams primarily in Singapore and across the APAC region. Our data protection practices reflect the nature of a boutique communications atelier: we collect only what we need, limit access within our team, and do not sell personal data.

2. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

Identity and contact data — name, job title, organisation name, email address, telephone number and postal address.
Enquiry and correspondence data — messages you send through our contact form, email threads, meeting notes and records of phone conversations.
Client and project data — briefing materials, brand assets, audience research, campaign documents and other content you provide for discovery, sprints, retainers or launch partnerships.
Technical and usage data — IP address, browser type, device information, pages viewed, referral source and approximate location derived from IP (country or city level).
Cookie and preference data — choices you make in our cookie banner and similar settings stored on your device. See our cookie policy for detail.

We do not intentionally collect sensitive personal data such as national identification numbers, financial account details, health information or data relating to minors through our public website. If project work requires handling sensitive categories of information, we will address that separately in a client agreement and apply appropriate safeguards.

3. Purposes of collection, use and disclosure

We collect and use personal data for purposes that a reasonable person would consider appropriate in the context of our relationship with you. These purposes include:

Responding to enquiries submitted via our website, email or telephone.
Assessing fit for engagement models described on clickhaven.life and preparing proposals or statements of work.
Delivering professional brand communications services — including workshops, narrative architecture, creative direction, campaign systems and integrated communications advisory.
Managing contracts, invoicing, project administration and client relationship records.
Improving our website, understanding aggregate visitor behaviour and maintaining site security.
Complying with applicable laws, responding to lawful requests from authorities, and establishing or defending legal claims.
Sending service-related communications — for example, scheduling updates, deliverable notifications or policy changes that affect how we handle your data.

We may disclose personal data to the following categories of recipients where necessary for the purposes above:

Members of our studio team who require access to perform their role on your matter.
Trusted service providers — such as hosting providers, email platforms, document storage, accounting tools and production partners — bound by confidentiality and data protection obligations.
Professional advisers including lawyers and accountants, where engaged and subject to duty of confidentiality.
Public authorities or regulators when required by Singapore law or a valid legal process.

We do not sell, rent or trade your personal data to third parties for their independent marketing purposes.

4. Consent and legal bases

Under the PDPA, organisations must not collect, use or disclose personal data unless the individual has given consent, or an exception applies. Click Haven relies on the following bases:

Consent — When you tick the PDPA consent box on our contact form, subscribe to updates (if offered), or sign a client agreement that includes data processing terms, you consent to the collection, use and disclosure of your personal data for the stated purposes.
Contractual necessity — Processing needed to perform a contract with you or to take steps at your request before entering a contract — for example, scoping a positioning sprint.
Legitimate interests — Processing that is reasonably necessary for our legitimate business interests, provided those interests are not overridden by your rights — for example, maintaining internal records of enquiries or securing our website against abuse.
Legal obligation — Processing required to comply with applicable law, regulation or court order.

You may withdraw consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. If you withdraw consent for purposes essential to an active engagement, we may need to adjust or conclude the engagement in accordance with our contract terms.

Where we rely on consent for non-essential cookies or analytics, you may manage preferences through our cookie banner or browser settings as described in our cookie policy.

5. Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. Our general retention approach is as follows:

Enquiry records — typically up to twenty-four months from last meaningful contact, unless an engagement proceeds or you request earlier deletion.
Client and project files — for the duration of the engagement and up to seven years thereafter for contractual, accounting and dispute-resolution purposes, unless a shorter period is agreed in writing.
Cookie consent records — six months from the date preferences are saved, aligned with our cookie banner behaviour.
Server and security logs — generally up to twelve months, unless needed for an ongoing investigation.

When personal data is no longer required, we take reasonable steps to delete, anonymise or securely destroy it. Anonymised or aggregated data that cannot reasonably identify an individual may be retained for internal analysis.

6. Access, correction and other rights

Under the PDPA, you have the right to:

Access — request information about whether we hold personal data about you and, subject to exceptions in the PDPA, obtain a copy of that data.
Correction — request correction of personal data that is inaccurate or incomplete.
Withdrawal of consent — withdraw consent for processing that relies on consent, subject to legal or contractual restrictions.
Data portability — where applicable under PDPA guidance and our systems, request transfer of certain data you provided in a structured, commonly used format.

To exercise these rights, email [email protected] with sufficient detail for us to verify your identity and locate relevant records. We aim to respond within thirty days, or inform you if an extension is required under the PDPA. We may charge a reasonable fee for manifestly unfounded or excessive requests, or for copies beyond the first reasonable provision, as permitted by law.

If you believe we have not handled your personal data in accordance with the PDPA, you may contact us first so we can address your concern. You also have the right to lodge a complaint with the PDPC (see Section 12 below).

7. Contact for privacy matters

For any question, request or complaint relating to this privacy policy or our handling of personal data, contact our privacy team at:

[email protected]
Click Haven Pte. Ltd.
18 Bukit Pasoh Road, #02-03, Singapore 089832

Please include your name, contact details and a clear description of your request. We treat privacy correspondence confidentially and assign it to team members responsible for data protection compliance.

8. Cookies and similar technologies

Our website uses cookies and similar technologies to operate core functions, remember cookie preferences and — if you opt in — support analytics or marketing-related features. Essential cookies are necessary for the site to function and do not require consent under typical PDPA interpretations for strictly necessary technical storage.

Non-essential cookies are placed only after you accept them through our cookie banner or save customised preferences. Full details of cookie categories, durations, vendors and opt-out methods are set out in our cookie policy. You may change your choices at any time by clearing site data, adjusting browser settings or revisiting the banner where available.

9. Third-party embeds and services

Some pages on clickhaven.life include embedded content or services operated by third parties. When you interact with these embeds, the third party may collect personal data under its own privacy policy. Key examples include:

Google Maps — Our contact page (contact.php) and the map strip appearing in the footer of site pages load an embedded Google Maps iframe to show our Bukit Pasoh Road studio location. Google may set cookies, collect usage data and process information according to Google's privacy policy. Loading the map may occur when you scroll to the footer or visit the contact page; if you block third-party cookies or scripts, the map may not display correctly.
Hosting and infrastructure — Our hosting provider processes server logs and technical metadata necessary to deliver the website.
Email and productivity tools — Correspondence and documents may be processed through commercial email and cloud storage services with data centres that may be located in Singapore or other jurisdictions with contractual safeguards.

We select providers with reasonable security practices but do not control third-party processing. We encourage you to review the privacy policies of embedded services you choose to interact with.

10. International transfers

Click Haven is based in Singapore and primarily stores and processes personal data in Singapore. Where we use service providers that process data outside Singapore, we take steps reasonably required under the PDPA — such as contractual clauses, vendor assessment and limiting data to what is necessary — to ensure a comparable standard of protection. If you engage us for APAC communications work involving cross-border sharing of materials you provide, we will address transfer mechanisms in our client agreement where relevant.

11. Security

We implement administrative, technical and physical safeguards appropriate to the nature of the personal data we hold and the size of our organisation. Measures include:

Access controls limiting personal data to team members with a legitimate need.
Secure hosting with encryption in transit (HTTPS) for our public website.
Password-protected accounts and, where available, multi-factor authentication on critical systems.
Confidentiality expectations and training for staff handling client materials.
Procedures for responding to suspected data incidents, including assessment, containment and notification where required by law.

No method of transmission or storage is completely secure. While we strive to protect personal data, we cannot guarantee absolute security. You are responsible for keeping your own credentials confidential and for sending sensitive materials through agreed secure channels when we provide them.

12. PDPC reference and complaints

This policy is designed to align with Singapore's Personal Data Protection Act 2012 and advisory guidelines published by the Personal Data Protection Commission. The PDPC is the national body responsible for administering and enforcing the PDPA. For general information about data protection in Singapore, visit the PDPC website at pdpc.gov.sg.

If we are unable to resolve your privacy concern satisfactorily, you may contact the PDPC to lodge a complaint in accordance with its published procedures. We ask that you contact us first at [email protected] so we have the opportunity to address your issue promptly.

13. Change-log

We may update this privacy policy from time to time to reflect changes in our practices, services, technology or legal requirements. When we make material changes, we will post the revised policy on this page with an updated "Last updated" date. For active client engagements, we may also notify you by email or through project channels where appropriate.

5 August 2026 — Initial publication of this privacy policy for clickhaven.life, covering website operations, contact enquiries, client engagements, cookies, Google Maps embeds and PDPA rights.

We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes acknowledgement of the updated policy, subject to any additional consent requirements under the PDPA.