Privacy policy

1. Organisation identity

This privacy policy applies to personal data collected by Campaign Matrix Pte. Ltd. (UEN 201934721K), a marketing agency registered in Singapore with its principal place of business at 9 Battery Road, #15-01 MYP Centre, Singapore 049910. References to "Campaign Matrix", "we", "us" or "our" mean Campaign Matrix Pte. Ltd. References to "you" or "your" mean individuals whose personal data we collect through this website, email correspondence, telephone calls, in-person meetings or client engagements.

Campaign Matrix provides professional marketing and advertising services including brand strategy, paid media, SEO, content marketing, creative production, marketing automation and analytics. This policy explains our data practices for website visitors, prospective clients, current clients, suppliers and other individuals who interact with us.

2. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with the PDPA and to address privacy enquiries. You may contact our DPO at:

Email: [email protected]
Postal address: Data Protection Officer, Campaign Matrix Pte. Ltd., 9 Battery Road, #15-01 MYP Centre, Singapore 049910

We aim to acknowledge privacy enquiries within five business days and resolve them within thirty days where reasonably practicable.

3. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact data: name, job title, company name, email address, telephone number, postal address.
• Enquiry and communication data: messages submitted through our contact form, email threads, meeting notes and call records where you have been informed of recording.
• Technical data: IP address, browser type, device information, pages visited, referral source and cookie identifiers (see our Cookie Policy).
• Client engagement data: billing information, project briefs, campaign assets, analytics access credentials (stored securely), and correspondence related to marketing services delivery.
• Marketing preferences: your consent choices for cookies and optional communications.

We do not intentionally collect sensitive personal data (such as health information or national identification numbers) through this website. If you provide such data voluntarily, we will handle it only with your explicit consent or as permitted by law.

4. Purposes of collection, use and disclosure

We collect, use and disclose personal data for purposes that a reasonable person would consider appropriate in the circumstances, including:

• Responding to enquiries submitted via our website, email or telephone.
• Conducting campaign reviews, preparing proposals and delivering marketing agency services under contract.
• Managing client relationships, invoicing and account administration.
• Improving our website, analysing traffic patterns and measuring marketing effectiveness (where consent is given for non-essential cookies).
• Complying with legal obligations, resolving disputes and enforcing agreements.
• Protecting the security and integrity of our systems and preventing fraud or abuse.

We will not use your personal data for purposes incompatible with those described above without notifying you and, where required, obtaining fresh consent.

5. Legal bases and consent

Under the PDPA, organisations generally require consent before collecting, using or disclosing personal data. We obtain consent through:

• Explicit opt-in checkboxes on our contact form (consent is not pre-ticked).
• Cookie banner choices for non-essential analytics and advertising technologies.
• Written or electronic agreement when engaging our marketing services.

You may withdraw consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing before withdrawal. We may continue to process data without consent where permitted under the PDPA, including deemed consent by voluntary provision for a specified purpose, or where processing is necessary for legal claims or compliance with law.

6. Disclosure to third parties

We do not sell personal data. We may disclose personal data to:

• Service providers who assist with hosting, email delivery, analytics, CRM, project management or payment processing — bound by confidentiality and data protection obligations.
• Advertising platforms (Google, Meta, LinkedIn, TikTok) where you engage us to manage campaigns and grant platform access — governed by those platforms' terms and your ad account ownership.
• Professional advisers (lawyers, accountants) under duty of confidentiality.
• Regulatory authorities, courts or law enforcement when required by Singapore law.

Where personal data is transferred outside Singapore, we take steps reasonably required under the PDPA to ensure recipients provide a standard of protection comparable to the PDPA, such as contractual clauses or verified certification schemes.

7. Retention

We retain personal data only as long as necessary for the purposes collected, unless a longer period is required by law or for legitimate business needs such as dispute resolution. Indicative retention periods:

• Website enquiry data: up to twenty-four months after last contact unless a client relationship forms.
• Client project data: duration of engagement plus seven years for contractual and accounting records.
• Cookie consent records: six months (aligned with our cookie banner storage period).
• Server logs: up to twelve months for security monitoring.

When data is no longer needed, we securely delete or anonymise it.

8. Your rights under the PDPA

Subject to exceptions in the PDPA, you have the right to:

• Access: request confirmation of whether we hold personal data about you and obtain a copy.
• Correction: request correction of inaccurate or incomplete personal data.
• Withdraw consent: withdraw consent for future processing (see Section 5).
• Data portability: where applicable, request transfer of data you provided in a structured format.

To exercise these rights, email [email protected] with sufficient detail to identify you and your request. We may charge a reasonable fee for manifestly unfounded or excessive access requests as permitted by the PDPA. We may refuse requests that would reveal another individual's data or breach legal privilege.

9. Personal Data Protection Commission

If you believe we have not handled your personal data in accordance with the PDPA, you may contact us first at [email protected]. If unresolved, you may lodge a complaint with the Personal Data Protection Commission (PDPC):

Personal Data Protection Commission
10 Pasir Panjang Road, #03-01 Mapletree Business City, Singapore 117438
Website: www.pdpc.gov.sg

10. Cookies and tracking

Our website uses cookies and similar technologies. Essential cookies are necessary for site operation. Analytics and advertising cookies are used only with your consent via our cookie banner. Full details, including vendor lists and opt-out instructions, are in our Cookie Policy.

11. Security measures

We implement reasonable administrative, technical and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. Measures include access controls, encrypted connections (HTTPS), secure password policies for internal systems, and staff training on PDPA obligations. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we review our practices regularly.

12. Children

Our marketing agency services and website are directed at business professionals. We do not knowingly collect personal data from individuals under eighteen years of age. If you believe we have collected a minor's data, contact [email protected] and we will delete it promptly.

13. Links to other websites

Our website may contain links to third-party sites (for example, advertising platforms or industry resources). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal data.

14. Changes to this policy

We may update this privacy policy to reflect changes in law, technology or our business practices. The "Last updated" date at the top indicates the latest revision. Material changes will be communicated via a notice on this website where appropriate. Continued use of our website after changes constitutes acknowledgement of the updated policy, subject to your consent rights for new processing purposes.

15. Marketing enquiries and client data

When you engage Campaign Matrix for marketing agency services, we may process additional personal data belonging to your customers or employees that you share for campaign execution — for example, email lists for marketing automation, customer segments for audience targeting or CRM records for reporting. In such cases, you represent that you have obtained all necessary consents and have the authority to share that data with us. We process client-provided data only as instructed in our service agreement and in accordance with the PDPA. We act as a data intermediary for client campaign data unless otherwise agreed in writing.

We recommend that clients avoid sharing unnecessary sensitive personal data for marketing purposes. Where platform integrations (Google Ads, Meta, LinkedIn, TikTok, analytics tools) require data processing, those platforms' terms and privacy policies also apply. We assist clients in configuring privacy-compliant tracking and consent mechanisms but cannot guarantee platform-level compliance without your cooperation on website and app implementation.

16. Automated decision-making

Campaign Matrix does not use personal data collected through this Website for solely automated decision-making that produces legal or similarly significant effects on individuals. Marketing optimisation algorithms on advertising platforms may automate bid or audience decisions when we manage campaigns on your behalf — those processes occur within platform environments governed by platform policies, not by automated profiling on our Website.

17. Contact

For any privacy-related questions, access or correction requests:

Campaign Matrix Pte. Ltd.
Data Protection Officer
Email: [email protected]
Address: 9 Battery Road, #15-01 MYP Centre, Singapore 049910
Phone: +65 6733 5120