Privacy · PDPA notice
How we handle personal data
Last updated: 13 August 2026. AdBloom Haven Pte. Ltd. ("AdBloom Haven", "we", "us") respects your privacy in accordance with the Personal Data Protection Act 2012 of Singapore.
Who we are
Data controller: AdBloom Haven Pte. Ltd., 31 Kelantan Road, #03-01, Singapore 208706. Privacy contact: [email protected].
What data we collect
When you email us, we process your email address, name if provided, and message content to respond to your enquiry. We do not operate a contact form on this website. If you telephone the studio, we do not record calls unless you explicitly agree to a recorded briefing — which is rare and always noted in writing beforehand.
When you visit this site, our hosting provider processes server logs that may include IP address, browser type, requested URL and timestamp. These logs are used for security and operational troubleshooting and are retained for a limited period consistent with hosting policy.
When you set cookie preferences, we store your choices in a first-party cookie named abh_consent and, as backup, in localStorage under cookie_consent_v1. The stored JSON includes essential, functional, analytics and maps flags plus a timestamp. Analytics cookies are not deployed today; the analytics flag records preference only.
Google Maps
Every page embeds or prepares a Google Maps iframe showing our studio location. When you consent to Maps cookies, Google may set cookies and collect usage data according to Google's policies. You can reject Maps cookies and still read the site; map tiles will not load until you change your choice via on this page or the banner.
Why we use data
We use contact data to respond to enquiries, schedule visits, and document engagement scopes when you choose to work with us. We use server logs to maintain site security. We use consent records to honour your cookie choices across sessions.
Legal bases
We rely on consent for non-essential cookies, legitimate interests for site security and responding to business enquiries, and contractual necessity when processing data required to deliver agreed studio services.
Retention
Enquiry emails are retained while a conversation is active and for up to twenty-four months afterward unless a longer period is required for legal or contractual reasons. Server logs are rotated according to hosting provider schedules, typically within ninety days. Cookie consent choices persist for one hundred eighty days unless you clear cookies sooner.
Sharing
We do not sell personal data. We share data with hosting providers and, when Maps are enabled, with Google as described above. Professional advisers may receive data when required by law.
Transfers
Email and hosting providers may process data outside Singapore. We require appropriate safeguards consistent with PDPA requirements before engaging such providers for client-related processing.
Your rights
You may request access, correction, or withdrawal of consent by writing to [email protected]. You may complain to the Personal Data Protection Commission if you believe we have handled data improperly.
Children
This site is directed at business readers, not children. We do not knowingly collect data from anyone under eighteen.
Changes
We update this notice when practices change. The last updated date at the top reflects the latest revision.
We are an independent marketing agency on Kelantan Road. This page describes our craft, our working methods and the shapes an engagement can take. Outcomes depend on market, product, timing and decisions outside our control — nothing here promises a particular commercial result.
Processors and subprocessors
Hosting providers process server logs and deliver site files over HTTPS. Email providers process messages you send to [email protected] and [email protected]. We select providers with data protection commitments appropriate to studio correspondence and site operation.
Client engagement data processed under contract is stored in access-controlled folders with named administrators. Retention follows the engagement letter and applicable law. Deletion requests after project completion are handled through [email protected] with identity verification.
We do not build advertising profiles from site visitors. We do not sell mailing lists. We do not purchase third-party contact databases for outreach.
Security measures
Access to client folios uses individual credentials and device policies appropriate to a small studio. Paper folios remain in locked storage overnight on Kelantan Road. Digital folios use encrypted storage with backup rotation.
Data breach notification
If a breach likely affects your personal data, we notify affected individuals and relevant authorities as required by PDPA, with plain description of facts known, steps taken, and recommended actions.
Cookies and similar technologies
Aside from abh_consent and optional functional storage, this site does not set marketing cookies. Third-party fonts may log IP addresses according to Google Fonts policies; maps load only after consent.
Updates and archives
Prior versions of this notice are available on request. Material changes are reflected in the last updated date and summarised in the cookies notice when storage practices change.
Collection limits
We collect only what is needed to respond to enquiries, operate the site, honour cookie choices, and deliver contracted studio services. We do not ask for NRIC or passport numbers through this website. We do not request payment card numbers on any page.
Marketing communications
We do not send unsolicited marketing email. Replies to your enquiries may include links to public pages on this site. You may ask us to stop correspondence at any time by writing to [email protected].
Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals visiting this site.
Access procedure
Submit access requests in writing with enough detail for us to locate records. We may request reasonable identity verification. We respond within one month unless complexity requires extension under PDPA.
Correction and withdrawal
You may request correction of inaccurate personal data or withdraw consent for optional processing. Withdrawal does not affect prior processing that was lawful when collected.
Children and minors
This site addresses business readers. We do not knowingly collect personal data from persons under eighteen without appropriate guardian involvement.
Cross-border transfers
Where providers process data outside Singapore, we assess protection standards and contractual safeguards before engagement. Client folios may specify additional transfer constraints in engagement letters.
Complaints
Contact [email protected] first so we can investigate. You may escalate unresolved concerns to the Personal Data Protection Commission in Singapore.
Record keeping
Privacy-related correspondence is logged with date, request type, and resolution summary. Logs are accessible to designated privacy contacts and retained according to this notice.
Location
31 Kelantan Road