Privacy policy

1. Introduction

ChoaBoost Pte. Ltd. ("ChoaBoost", "we", "us", "our") respects your privacy and is committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA"). This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit choaboost.pro, contact us, engage our marketing services or interact with us in any capacity.

By using our website or providing personal data to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use our website or submit personal data.

2. Data controller

ChoaBoost Pte. Ltd., UEN 202694752M, registered at 21 Choa Chu Kang North 6, #03-12 Yew Tee Point, Singapore 689548, is the organisation responsible for personal data collected through this website and our business operations. Contact: [email protected] or [email protected].

3. Personal data we collect

3.1 Website visitors

When you browse choaboost.pro, we may automatically collect technical data including IP address, browser type, device type, operating system, referring URL, pages viewed, time spent and general geographic location derived from IP. This data helps us maintain site security, analyse aggregate traffic patterns and improve user experience.

3.2 Contact form submissions

When you submit our contact form, we collect your name, email address, enquiry type, message content and your explicit consent under PDPA. We do not pre-tick consent checkboxes. Submission timestamps are recorded in Singapore time (SGT).

3.3 Client and engagement data

When you engage ChoaBoost for marketing services, we may collect additional business contact information, billing details, brand assets, audience data, campaign performance metrics, communication records and project documentation necessary to deliver contracted services.

3.4 Cookies and similar technologies

We use cookies as described in our Cookie Policy. Cookie consent preferences are stored locally for up to six months.

4. Purposes of collection and use

We collect and use personal data for the following purposes:

• Responding to enquiries submitted through our website or email
• Delivering marketing agency services under contract
• Managing client relationships, invoicing and project communication
• Improving our website, services and internal processes
• Complying with legal and regulatory obligations in Singapore
• Protecting our rights, property and safety, and that of our clients
• Conducting aggregate analytics where consent has been given

We do not sell personal data to third parties. We do not use client data to train public AI models without explicit written consent.

5. Legal basis and consent

Under the PDPA, we rely on consent, contractual necessity, legal obligation and legitimate interests as appropriate. For marketing enquiries, we require explicit consent via our contact form checkbox before processing your submission. You may withdraw consent at any time by contacting [email protected], though withdrawal may limit our ability to respond or continue services.

6. Disclosure to third parties

We may disclose personal data to:

• Service providers who assist with hosting, email delivery, analytics (where consented), payment processing and IT security — bound by confidentiality obligations
• Professional advisers including lawyers and accountants where necessary
• Government authorities when required by Singapore law
• Media and advertising platforms only with client authorisation as part of contracted campaign delivery

We require third parties to handle personal data in accordance with applicable law and our instructions.

7. Cross-border transfers

Our website is hosted in Singapore. Some service providers may process data outside Singapore. Where cross-border transfer occurs, we take reasonable steps to ensure recipients provide a standard of protection comparable to the PDPA.

8. Retention

We retain personal data only as long as necessary for the purposes collected. Contact form data is retained for up to twenty-four months unless a client relationship develops. Client project data is retained per contract terms and applicable legal requirements — typically seven years for business records. Cookie consent records follow our Cookie Policy (six months).

9. Security

We implement reasonable administrative, technical and physical safeguards including access controls, secure hosting, encrypted transmission where supported and staff confidentiality training. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

10. Your rights under PDPA

Subject to exceptions under the PDPA, you may:

• Request access to personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent for processing based on consent
• Request information about how your data has been used or disclosed

Submit requests to [email protected]. We respond within thirty days where required. A reasonable fee may apply for access requests permitted under law.

11. Marketing communications

We do not send unsolicited marketing email without consent. Service-related communications to existing clients are sent based on contractual relationship. You may opt out of non-essential communications at any time.

12. AI and automated processing

ChoaBoost uses generative AI tools to assist internal drafting under human review. Contact form data is not fed into public AI training systems. Client campaign data processed through AI tools remains confidential and is handled per engagement contracts.

13. Children's data

Our services are directed at business clients. We do not knowingly collect personal data from individuals under eighteen. If you believe we have collected such data, contact us for deletion.

14. Third-party links

Our website may link to third-party sites. We are not responsible for their privacy practices. Review their policies before providing personal data.

15. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change. Material changes will be noted on this page. Continued use after changes constitutes acceptance where permitted by law.

16. Contact and complaints

Data protection enquiries: [email protected]
ChoaBoost Pte. Ltd., 21 Choa Chu Kang North 6, #03-12 Yew Tee Point, Singapore 689548
Phone: +65 6768 5294

If you are unsatisfied with our response, you may contact the Personal Data Protection Commission of Singapore.

17. Definitions

"Personal data" means data about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access. "Processing" includes collection, use, disclosure, storage and deletion. "Consent" means voluntary agreement given in accordance with PDPA requirements.

18. Do Not Call Registry

Where we contact individuals by phone or text for marketing purposes, we check against the Do Not Call Registry unless an exception applies under the PDPA and DNC provisions. Business enquiry responses to individuals who contacted us first are not unsolicited marketing.

19. Data breach notification

In the event of a data breach likely to result in significant harm or scale, we will assess notification obligations under the PDPA and notify affected individuals and the Personal Data Protection Commission where required. We maintain internal incident response procedures and review them periodically.

20. Employee and contractor data

This policy primarily addresses client and website visitor data. Employee and contractor personal data is handled under separate internal HR policies consistent with PDPA obligations. Contractors with access to client data sign confidentiality agreements.

21. Accuracy and minimisation

We take reasonable steps to ensure personal data is accurate and complete. We collect only data reasonably necessary for stated purposes — we do not collect excessive fields on contact forms or retain data longer than needed for those purposes.

22. Automated decision-making

ChoaBoost does not make solely automated decisions producing legal or similarly significant effects on individuals based on personal data collected through this website. Marketing campaign optimisation for clients may use platform algorithms under client direction — separate from website visitor processing.

23. Third-party social and advertising pixels

We currently minimise use of third-party advertising pixels on choaboost.pro. If implemented in future with consent, this policy will be updated to name providers, purposes and opt-out mechanisms. Reject-all cookie choice disables optional analytics pixels.

24. Records of consent

Contact form submissions record timestamp, consent checkbox state and enquiry content. Cookie consent choices are stored locally on your device for six months. We retain consent records to demonstrate PDPA compliance if queried.

25. Policy review schedule

We review this Privacy Policy at least annually and whenever material changes occur to our data practices, technology stack or legal requirements. The Last updated date reflects the most recent revision. Previous versions are not published online but may be available on request for compliance purposes.