Privacy Policy

This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit our website or contact us. It is intended to reflect the requirements of Singapore’s Personal Data Protection Act 2012 (“PDPA”).

1. Who we are

This website is operated by the business named in the “Business details” section of this page (“Black & Brace”, “we”, “us”).

2. Personal data we collect

Information you give us. When you submit our enquiry form, we collect your full name, company name, email address, phone number (if provided), the service you are interested in, your estimated budget (if provided), your project description and your preferred contact method.

Information collected automatically. Our hosting provider processes technical information such as your IP address, browser type and the pages requested, in order to deliver the website and protect it from abuse. Our bot-protection service (Cloudflare Turnstile) processes limited technical signals to check that form submissions come from a person.

We do not use advertising cookies or third-party analytics on this website.

3. How we use your personal data

We use the personal data you provide to:

• respond to your enquiry and prepare a quotation;
• communicate with you about a proposed or ongoing project; and
• keep records of our correspondence for business and legal purposes.

We do not sell your personal data, and we do not add you to marketing lists without your separate consent.

4. Consent

By submitting the enquiry form and ticking the consent box, you consent to us collecting, using and disclosing your personal data for the purposes described above. You may withdraw your consent at any time by contacting us (see section 9). Withdrawing consent may mean we are unable to continue responding to your enquiry.

5. Disclosure to service providers

We share personal data only with service providers who help us operate, and only as needed for the purposes above:

• Cloudflare — website hosting, security and bot protection;
• Resend — delivery of enquiry-form submissions to our business mailbox; and
• Google Workspace — our business email, where enquiries are received and stored.

6. Transfers outside Singapore

Some of our service providers may process or store data outside Singapore. Where this happens, we take reasonable steps to ensure that the personal data receives a standard of protection comparable to that under the PDPA.

7. Retention

We keep enquiry correspondence only for as long as it is needed for the purposes for which it was collected, or as required for business or legal reasons. When it is no longer needed, we delete it or anonymise it.

8. Protection

We use reasonable security arrangements to protect personal data, including encrypted connections (HTTPS), access controls and multi-factor authentication on our business accounts. No method of transmission or storage is completely secure, but we work to protect your information.

9. Access, correction and contact

You may ask to access or correct the personal data we hold about you, or withdraw your consent, by contacting our data protection contact listed in “Business details” on this page. We will respond as soon as reasonably possible and in accordance with the PDPA.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page shows when it was last revised.