Privacy Policy

This Privacy Policy explains how MediaCraft Studio Pte. Ltd. ("MediaCraft", "we", "us" or "our") collects, uses, discloses and protects personal data in accordance with the Personal Data Protection Act 2012 ("PDPA") of Singapore and its subsidiary legislation. By using our website at mediacraft.life or engaging our production and media placement services, you acknowledge that you have read and understood this policy.

1. Organisation identity

Data controller: MediaCraft Studio Pte. Ltd.

Registered address: 60 Robertson Quay #02-01, The Quayside, Singapore 238252

UEN: 202552739E

General contact: [email protected]

Data Protection Officer (DPO): [email protected]

MediaCraft is a professional production and media placement studio providing brand film production, social and short-form content, campaign production, post-production, media placement and content strategy to businesses in Singapore and the APAC region. This policy covers personal data collected through our website, contact forms, production engagements and related communications.

2. Personal data we collect

We collect personal data only where necessary for the purposes described in this policy. Categories of personal data may include:

• Identity and contact data: full name, job title, company name, email address, telephone number, postal address.
• Enquiry and communication data: messages submitted through contact forms, email correspondence, meeting notes and call records.
• Technical data: IP address, browser type, device information, pages visited, referring URL and cookie identifiers (see our Cookie Policy).
• Production engagement data: creative briefs, brand assets, shoot schedules, talent release information, account credentials for ad platforms (managed on your behalf), reporting preferences and billing information for contracted clients.
• Marketing preferences: consent records, communication opt-in/opt-out status and Do-Not-Call (DNC) registry checks where applicable.

We do not intentionally collect sensitive personal data (as defined under the PDPA) unless required for a specific production engagement — for example, where on-screen talent or location permissions require it — and with your explicit consent or a lawful basis.

3. Purposes of collection, use and disclosure

We collect and use personal data for the following purposes:

• Responding to enquiries submitted through our website or email
• Delivering production and media placement services under contract — filming, editing, placement management and related work
• Managing client relationships, billing and account administration
• Providing placement reporting and transparency on media performance
• Improving our website and understanding how visitors use it (with consent where required)
• Complying with legal obligations, including PDPA requirements and regulatory requests
• Protecting our legal rights and preventing fraud or misuse
• Sending service-related communications to existing clients

We may disclose personal data to:

• Service providers who assist with hosting, email delivery, analytics, payment processing, cloud storage for production assets or advertising platform management — bound by confidentiality and data protection obligations
• Freelance crew and contractors engaged for specific productions, where necessary for project delivery and under confidentiality agreements
• Professional advisers (legal, accounting) where necessary
• Government authorities when required by law

We do not sell personal data to third parties. We do not disclose personal data for purposes unrelated to those described above without your consent, unless permitted or required by law.

4. Legal bases and consent

Under the PDPA, we rely on the following bases for processing personal data:

• Consent: When you submit a contact form, you provide explicit consent via the PDPA consent checkbox. When you engage our services, consent is obtained through service agreements. You may withdraw consent at any time, subject to legal and contractual restrictions.
• Contractual necessity: Processing required to perform production and placement services you have contracted us to deliver.
• Legitimate interests: Operating and improving our business, website security and fraud prevention — balanced against your rights and expectations.
• Legal obligation: Compliance with applicable Singapore laws and regulations.

Where consent is the basis for processing, we will not process your data for that purpose if you withdraw consent, although this may affect our ability to provide certain services.

5. Do-Not-Call (DNC) provisions

MediaCraft complies with Singapore's Do Not Call Registry requirements. We will not send marketing messages (voice calls, text messages or faxes) to Singapore telephone numbers listed on the DNC Registry unless we have obtained valid consent or an applicable exemption applies. If you wish to opt out of marketing communications from us, contact [email protected] or use the unsubscribe mechanism in any marketing email we send.

6. Cookies and tracking

Our website uses cookies and similar technologies. Necessary cookies support basic site functionality. Analytics cookies, where used, require your consent via our cookie banner. Your preferences are stored for six months. For full details on cookie categories, vendors, storage durations and opt-out instructions, see our Cookie Policy.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Enquiry data: up to 24 months from last contact, unless a business relationship is established
• Client engagement data: duration of the engagement plus seven years for legal, accounting and dispute-resolution purposes
• Production assets containing personal data: as specified in service agreements; raw footage and releases retained per contractual terms or deleted on request where legally permissible
• Cookie consent records: six months, aligned with cookie preference storage
• Website analytics data: as configured with analytics providers, typically 14–26 months

When personal data is no longer needed, we securely delete or anonymise it.

8. Data security

We implement reasonable administrative, technical and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification or disposal. Measures include HTTPS encryption for website traffic, access controls on internal systems and production storage, secure handling of client ad account credentials and staff training on data protection obligations. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we take breaches seriously and will notify affected individuals and the Personal Data Protection Commission where required by law.

9. Cross-border transfers

Some service providers we use may process data outside Singapore — for example, cloud storage, analytics or advertising platforms with regional data centres. Where personal data is transferred overseas, we ensure that comparable protection standards are maintained in accordance with PDPA requirements — through contractual clauses, provider certifications or your consent where applicable.

10. Your rights under the PDPA

Under the PDPA, you have the right to:

• Access: Request access to personal data we hold about you
• Correction: Request correction of inaccurate or incomplete personal data
• Withdrawal of consent: Withdraw consent for processing based on consent, subject to legal and contractual restrictions
• Data portability: Request a copy of your data in a commonly used format where technically feasible

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within 30 days, or inform you if an extension is needed. We may request verification of your identity before processing requests.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC):

Personal Data Protection Commission
10 Pasir Panjang Road, #03-01
Mapletree Business City
Singapore 117438
Website: www.pdpc.gov.sg

11. Third-party links

Our website may contain links to third-party websites (advertising platforms, social media, analytics providers, video hosting services). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing personal data. Links are provided for convenience and do not imply endorsement of third-party data handling practices.

12. Children's data

Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under 18 years of age through our website. Where production engagements involve minors on camera, appropriate guardian consent and release documentation is obtained as part of the production process.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our website or services after changes constitutes acceptance of the updated policy.

14. Automated decision-making

MediaCraft does not use automated decision-making or profiling that produces legal or similarly significant effects on individuals. Placement optimisation and audience targeting performed during service engagements involve platform algorithms operated by third-party ad networks; we configure campaigns with human oversight and report on aggregate performance rather than automated decisions about individuals.

If we introduce any automated processing that may affect you in a significant way, we will update this policy and seek your consent where required under the PDPA before such processing begins.

15. Production assets and personal data

During production engagements, personal data may appear in raw footage, photographs or audio recordings — for example, identifiable employees, customers or passers-by captured on location. We handle such data in accordance with service agreements, talent release forms and location permissions obtained before shoot days. Clients are responsible for ensuring they have appropriate rights to feature individuals and branded materials supplied to MediaCraft for production purposes.

Where we store production files containing personal data, access is restricted to project team members and retained only for the periods described in Section 7. Clients may request deletion or return of identifiable materials subject to contractual terms and legal retention requirements.

16. Contact

For privacy-related questions, access requests or complaints:

Data Protection Officer
MediaCraft Studio Pte. Ltd.
60 Robertson Quay #02-01, The Quayside, Singapore 238252
Email: [email protected]
Phone: +65 6222 3495