BrandFlare Co

Privacy Policy

BrandFlare Co Pte. Ltd. · UEN 202428914D · Last updated: 21 July 2026

This Privacy Policy explains how BrandFlare Co Pte. Ltd. ("BrandFlare Co", "we", "us") collects, uses, discloses and protects personal data when you visit brandflareco.pro, submit enquiries, or engage our brand strategy and identity services. We comply with the Personal Data Protection Act 2012 ("PDPA") of Singapore.

1. Organisation identity

BrandFlare Co Pte. Ltd. is a Singapore-registered company (UEN 202428914D) operating a brand systems and identity atelier at 43 Jalan Merah Saga, #02-05, Singapore 278115. We provide B2B marketing agency services including brand discovery, positioning, verbal identity, visual identity, content direction and AI-assisted brand research. We are a brand atelier — not life coaching, not a follower-growth service, and not an income course.

2. Personal data we collect

Depending on your interaction with us, we may collect:

  • Contact and identity data: name, email address, phone number, company name, job title and mailing address when you submit forms, email us or enter a contract.
  • Enquiry and project data: messages, briefs, brand materials, stakeholder lists, research inputs and correspondence related to engagements.
  • Billing data: invoicing details, payment references and tax identifiers where applicable.
  • Website usage data: IP address, browser type, device information, pages viewed, referral source and approximate location — collected via cookies and similar technologies where you have consented to analytics.
  • Communications: records of emails, calls and meeting notes where relevant to service delivery or legal compliance.

We do not intentionally collect sensitive personal data unless required for a specific engagement and with your explicit consent. We do not purchase personal data lists for marketing purposes.

3. Purposes of collection and legal bases

We collect and use personal data for the following purposes:

  • To respond to enquiries submitted via our website or email, including scheduling brand sessions and preparing proposals.
  • To deliver brand strategy, positioning, identity and governance services under contract.
  • To manage client accounts, invoicing, payment and project administration.
  • To improve our website, user experience and service quality, where analytics cookies are consented to.
  • To comply with legal obligations, including tax, accounting and regulatory requirements in Singapore.
  • To send service-related updates and, where permitted, marketing communications about brand atelier offerings — always with an unsubscribe option.
  • To protect our rights, prevent fraud and maintain the security of our systems.

Under the PDPA, we rely on consent (for example, unchecked form consent and cookie banner choices), contractual necessity, legitimate interests (such as responding to enquiries and improving services) and legal obligation as applicable bases for processing.

4. AI-assisted processing

Our brand research and documentation workflows may use generative AI and analytics tools to summarise market data, explore messaging territories or accelerate draft documentation. When client materials are processed through such tools, we apply human review before outputs are delivered or published. We do not upload sensitive personal data or confidential client information to public AI models without explicit consent. AI processing is disclosed in project proposals where relevant. AI outputs are starting points for human strategists and designers — not autonomous brand decisions.

5. Disclosure of personal data

We may disclose personal data to:

  • Cloud hosting and infrastructure providers that store website and project files.
  • Email and communication service providers used to respond to enquiries and deliver work.
  • Analytics providers, only where you have consented to analytics cookies.
  • Professional advisers including lawyers and accountants, bound by confidentiality.
  • Sub-processors supporting AI research, design collaboration or asset management — selected with reasonable care and subject to contractual safeguards where applicable.
  • Government authorities, regulators or law enforcement when required by Singapore law or valid legal process.

We do not sell personal data. We do not disclose data to fake-engagement services, bot networks or unrelated third-party marketers.

6. Privacy Officer and contact

Our Privacy Officer handles access requests, corrections, consent withdrawals and privacy questions:

Email: [email protected]
Postal: Privacy Officer, BrandFlare Co Pte. Ltd., 43 Jalan Merah Saga, #02-05, Singapore 278115
Phone: +65 6723 5914 (Mon–Fri 09:00–18:00 SGT)

7. Retention

We retain personal data only as long as necessary for the purposes described:

  • Website enquiries: up to twenty-four months from last contact unless a client relationship begins.
  • Client project files: duration of engagement plus up to seven years for legal, accounting and dispute-resolution purposes.
  • Cookie consent records: six months, aligned with our cookie banner storage period.
  • Analytics data: per vendor default periods or until consent is withdrawn, whichever is shorter.

When data is no longer required, we delete or anonymise it using reasonable technical measures.

8. Your rights under the PDPA

You may request access to personal data we hold about you and request correction of inaccurate data. You may withdraw consent for marketing or non-essential cookies at any time, though withdrawal may limit our ability to provide certain services. To exercise rights, contact the Privacy Officer. We respond within reasonable timeframes prescribed by the PDPA. If a concern remains unresolved, you may contact the Personal Data Protection Commission (PDPC) of Singapore.

9. Cross-border transfers

Some service providers may process personal data outside Singapore, including cloud hosting regions and AI tool infrastructure. Where cross-border transfer occurs, we take reasonable steps to ensure recipients provide a standard of protection comparable to the PDPA, including contractual clauses and vendor assessment. A list of major sub-processors is available on request to clients and enquiry contacts.

10. Cookies and similar technologies

We use strictly necessary cookies for site operation and, with consent, analytics and preference cookies. Details including categories, durations and vendors are in our Cookie Policy. You may change consent via the cookie banner or browser settings.

11. Security measures

We implement reasonable technical and organisational safeguards including HTTPS encryption, access controls limited to authorised personnel, secure cloud storage and staff confidentiality obligations. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we review practices periodically and address identified risks.

12. Marketing communications

We send marketing updates only with consent or where permitted under the PDPA for existing client relationships. Every marketing email includes an unsubscribe mechanism. We do not guarantee campaign performance, follower growth or sales outcomes in any communication.

13. Third-party links

Our website may link to third-party sites such as professional networks or tool vendors. Their privacy practices are governed by their own policies. We encourage you to read those policies before providing personal data.

14. Children

Our services are directed at business professionals. We do not knowingly collect personal data from individuals under eighteen without appropriate consent.

15. Changes to this policy

We may update this Privacy Policy to reflect legal, technical or business changes. Material updates will be posted on this page with a revised "Last updated" date. Continued use of the website after changes constitutes acknowledgement where permitted by law.

16. Data breach notification

In the event of a data breach likely to result in significant harm or scale, we will assess obligations under the PDPA and notify affected individuals and the PDPC where required. We maintain internal procedures for containment, investigation and remediation. Clients with active engagements will be informed of breaches affecting their project data without undue delay where legally required.

17. Automated decision-making

We do not use solely automated decision-making that produces legal or similarly significant effects on individuals. AI tools assist human strategists; final brand recommendations and client communications are reviewed by staff. If this practice changes, we will update this policy and provide notice where required.

18. Records and audit

We maintain records of processing activities relevant to client engagements and website operations. Records include purposes, categories of data, retention periods and disclosure recipients at a summary level. Clients may request further detail about processing related to their engagement by contacting the Privacy Officer.

19. Your responsibilities

When you provide personal data about colleagues or stakeholders, you confirm you have authority to do so and have informed them where required. Please provide accurate information and notify us of changes to contact details so we can respond and deliver services effectively.

20. Complaints to PDPC

If you believe we have not handled your personal data in accordance with the PDPA, contact our Privacy Officer first so we can investigate and respond. If the matter is not resolved to your satisfaction, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore in accordance with its published procedures. We cooperate with regulatory inquiries and implement corrective measures where appropriate.

21. Data protection by design

When scoping client engagements, we consider data minimisation — collecting only what is needed for brand research and identity work. Internal systems use role-based access. Staff receive orientation on confidentiality and PDPA obligations. Vendor selection includes privacy and security assessment for tools that may process personal or client-confidential information.

22. Change log

  • 21 July 2026 — Initial publication for brandflareco.pro launch.