Privacy Policy

1. Scope and application

This Privacy Policy applies to personal data collected through our website at pitchdrive.pro, email communications, telephone calls, in-person meetings at our Guoco Tower studio, video conferences and any other channels through which you provide information to us. It covers data relating to website visitors, prospective clients, current clients, former clients, suppliers, contractors and any individual whose personal data we process in connection with our business operations as a performance digital marketing agency.

This policy does not apply to third-party websites, platforms or services that may be linked from our site — including Google Ads, Meta Ads, analytics providers and CRM systems operated by clients. Those services maintain their own privacy policies and you should review them independently. When we manage campaigns on behalf of clients, we may process end-user data as a data intermediary or processor under instructions from the client, who remains the primary organisation responsible for compliance with applicable privacy laws in respect of that data.

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not submit personal data through our channels or engage our services without first discussing your concerns with our Data Protection Officer.

2. Personal data we collect

We may collect the following categories of personal data depending on how you interact with us:

• Identity and contact data: full name, job title, company name, email address, telephone number, postal address and billing address.
• Enquiry and communication data: messages submitted through our contact form, email correspondence, meeting notes, briefing documents and any other information you voluntarily provide when requesting our services or communicating with our team.
• Technical and usage data: IP address, browser type and version, device identifiers, operating system, referring URL, pages viewed, time spent on pages, click patterns and similar analytics data collected through cookies and similar technologies as described in our Cookie Policy.
• Transaction and engagement data: programme selections, scope documents, invoices, payment records, contract terms, campaign briefs, account credentials shared for platform access and service delivery records.
• Marketing preferences: your choices regarding communications, cookie consent preferences stored in local storage and opt-in or opt-out records.

We do not intentionally collect sensitive personal data such as national identification numbers, financial account details beyond what is necessary for invoicing, health information or data relating to children under 13. If you provide such data voluntarily, we will handle it only to the extent necessary for the stated purpose and in compliance with PDPA requirements.

3. How we collect personal data

We collect personal data through several methods. Direct collection occurs when you complete our contact form at pitchdrive.pro/contact.php, send email to [email protected] or other PitchDrive addresses, call our office at +65 6251 3847, attend meetings at our Wallich Street studio or participate in video briefings. Our contact form requires explicit PDPA consent before submission — the consent checkbox is not pre-selected.

Indirect collection may occur when you are referred to us by a business partner, when publicly available information is used for legitimate business development purposes, or when clients provide contact details of their team members for campaign coordination. Automated collection occurs through cookies, server logs and analytics tools when you browse our website, subject to your cookie preferences as managed through our cookie banner.

We may also receive personal data from advertising platforms when you interact with campaigns we manage on behalf of clients. In such cases, the client remains the data controller and our processing is governed by the client's instructions and applicable data processing agreements.

4. Purposes of collection, use and disclosure

We collect, use and disclose personal data for the following purposes, and we will not use your data for purposes incompatible with those stated below without obtaining fresh consent where required by the PDPA:

• Responding to enquiries and providing information about our programmes, services and performance marketing capabilities.
• Conducting discovery briefings, preparing proposals, negotiating and performing contracts for agency services.
• Delivering Google Ads, Meta Ads, CRO, lead-generation, growth strategy and analytics services as scoped in engagement agreements.
• Processing invoices, collecting payments and maintaining financial records required by Singapore law.
• Communicating about account performance, reporting, meetings and service-related matters.
• Improving our website, analysing traffic patterns and understanding how visitors interact with pitchdrive.pro.
• Complying with legal obligations, responding to lawful requests from authorities and protecting our legal rights.
• Managing internal operations including human resources, vendor relationships and business continuity.

We may disclose personal data to the following categories of recipients where necessary for the purposes above: employees and contractors of PitchDrive who require access to perform their duties; professional advisers including lawyers and accountants bound by confidentiality; payment processors and banks; IT infrastructure and hosting providers operating in Singapore and the Asia-Pacific region; advertising platform operators (Google, Meta) where account access requires sharing contact details; and government authorities when required by law. We require third-party processors to implement appropriate security measures and process data only on our instructions.

5. Consent and withdrawal

Under the PDPA, we obtain consent before collecting, using or disclosing your personal data unless an exception applies — such as where collection is necessary for a contract you have entered with us, required by law or deemed to be in your vital interests. Contact form submissions require affirmative consent via the consent_pdpa checkbox. Cookie analytics and marketing cookies require consent through our cookie banner before non-essential cookies are activated.

You may withdraw consent at any time by contacting [email protected] with reasonable notice. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. However, withdrawal may limit our ability to provide services — for example, if you withdraw consent for campaign-related communications while an active retainer is in place, we may need to discuss how delivery can continue or whether the engagement should be terminated in accordance with our Terms of Service.

6. Access, correction and portability

You have the right to request access to personal data we hold about you and to request correction of any inaccurate or incomplete data. Submit access or correction requests to [email protected] with sufficient information to verify your identity. We will respond within thirty days or such longer period as permitted under the PDPA where the request is complex.

We may charge a reasonable fee for manifestly unfounded or excessive requests. If we are unable to provide access — for example, because disclosure would reveal confidential commercial information of another party or is prohibited by law — we will explain the reasons within the permitted timeframe. Where technically feasible and legally required, we will facilitate data portability for data you have provided to us in structured, commonly used formats.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting and reporting requirements. Enquiry data from contact forms is typically retained for twenty-four months unless a business relationship is established, in which case data is retained for the duration of the engagement plus seven years for contractual and tax records. Cookie consent preferences are stored in your browser local storage for six months. Server logs may be retained for up to twelve months for security monitoring.

When personal data is no longer required, we securely delete or anonymise it using procedures appropriate to the data format and storage medium. Anonymised data that cannot reasonably be used to identify you may be retained indefinitely for statistical analysis.

8. Data security

We implement reasonable administrative, technical and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. Measures include access controls limiting employee data access to those with legitimate business needs, encrypted transmission where appropriate for web forms and email, secure storage on infrastructure hosted in Singapore and the Asia-Pacific region, and regular review of our security practices.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any account credentials shared with us for platform access and for notifying us promptly at [email protected] if you suspect unauthorised access.

9. Cross-border transfers

Our primary data processing occurs in Singapore. Where personal data is transferred outside Singapore — for example, to cloud infrastructure in the Asia-Pacific region or to advertising platforms with global operations — we ensure that the recipient jurisdiction provides a comparable standard of protection or that appropriate safeguards are in place as required under the PDPA, including contractual clauses obliging recipients to protect data to standards equivalent to Singapore law.

10. Data breach notification

In the event of a data breach that is likely to result in significant harm to affected individuals or is of significant scale, we will notify the Personal Data Protection Commission of Singapore and affected individuals as soon as practicable, in accordance with PDPA requirements and any applicable guidance. Our breach response procedure includes containment, assessment, notification and remediation steps designed to minimise harm and prevent recurrence.

11. Children's privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under 13 years of age. If we become aware that we have collected data from a child without appropriate parental consent, we will take steps to delete that information promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or business operations. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Material changes will be communicated through a notice on pitchdrive.pro or by email where we have your contact details. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy where permitted by law.

13. Contact and complaints

For questions, access requests, correction requests, consent withdrawals or complaints about our handling of personal data, contact our Data Protection Officer:

PitchDrive Pte. Ltd.
Attn: Data Protection Officer
1 Wallich Street, #21-01 Guoco Tower
Singapore 078881
Email: [email protected]
Phone: +65 6251 3847

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg.

← Back to Legal hub