Privacy notice
Privacy
Last updated: 11 August 2026
This privacy notice explains how MarkForge Craft LLP ("we", "us", "MarkForge Craft") handles personal data when you use markforgecraft.life, email us or telephone the workshop. We comply with the Personal Data Protection Act 2012 (PDPA) of Singapore. The Personal Data Protection Commission (PDPC) is the supervisory authority for data protection in Singapore.
Who we are
MarkForge Craft LLP operates a communications workshop at 12 Gopeng Street, #09-04, Icon @ Tanjong Pagar, Singapore 078877. Contact: [email protected], +65 6483 7104. We provide marketing communications services to business clients. This notice covers the public website and enquiry channels listed here.
No contact form
This website does not include a contact form, newsletter sign-up, chat widget or any browser field that collects personal data. You choose what to send when you email or call us. That choice determines what we receive. We do not ask for payment card data on this site.
What data we collect
Email and telephone: When you write or call, we receive your name, email address, telephone number and whatever you include — project context, attachments, names of colleagues you mention, calendar availability. We use this to respond, scope work tracks and deliver services you request.
Server logs: Our hosting provider processes server logs that may include IP address, date and time of access, requested URL, referrer and browser user agent. These support security, troubleshooting and aggregate understanding of site use. Logs are not used to build advertising profiles.
Cookies and local storage: We use essential storage for consent records. Unless you reject embedded content, Google Maps iframes load and may set third-party cookies. See cookies.
Google Maps embed on every page
A Google Maps embed showing our workshop address appears on every content page when embedded content is allowed. When the embed loads, Google may process IP address, device data, approximate location and account state if you are signed in to Google. We do not control Google's processing. On this site, maps load by default; the cookie notice discloses this. You may reject embedded content to swap maps for static address panels of the same size. Google's privacy policy applies to their processing. We recommend reading it if you use the embed.
Purpose and lawful basis
We process personal data to respond to enquiries, perform contracts, manage work tracks, meet legal obligations and protect legitimate interests in operating a secure website and workshop. Consent applies where required for non-essential cookies and embeds under the PDPA. Contractual necessity applies once an engagement letter is signed.
Retention
Enquiry email is kept while a conversation is active and for a reasonable period afterward — typically up to twenty-four months unless a longer period is needed for legal, contractual or accounting reasons. Project files during an engagement follow contract terms. Server logs rotate per hosting policy, usually under ninety days. Cookie consent choices persist about six months unless you clear storage earlier.
Sharing and processors
We do not sell personal data. We share data only with processors who help us operate: hosting provider, email provider and, when you allow embeds, Google for Maps. Processors act under contract and only on our instructions where applicable. Employees with access are bound by confidentiality expectations. Access is limited to those who need it for the track.
International transfers
Email and hosting providers may process data outside Singapore. Where required, we rely on appropriate safeguards under the PDPA for cross-border transfers, including contractual clauses with providers.
Security
We use access controls, encrypted transport (HTTPS) and provider security measures. No method is perfect; we review practices periodically and respond to incidents as required by law.
Children
This site is aimed at business users. We do not knowingly collect data from children under thirteen. Contact us if you believe we have done so and we will delete it promptly where required.
Your rights under the PDPA
You may request access to, correction of, or withdrawal of consent for personal data we hold about you, subject to legal exceptions. To exercise rights, email [email protected] or write to our postal address. We respond within reasonable time required by law. You may complain to the PDPC if unsatisfied with our response.
Marketing
We do not send unsolicited marketing email from this website. Service-related messages to existing contacts may follow separate agreed terms.
Automated decision-making
We do not make solely automated decisions about individuals that produce legal or similarly significant effects via this website.
Data minimisation
We collect only what is needed for the stated purpose. Do not send sensitive personal data unless necessary for the work track. If you include personal data about third parties, confirm you have authority to share it.
Breach notification
If a personal data breach affecting you is likely to cause significant harm, we will notify you and the PDPC where required by law, and document the incident.
Work track files
During an engagement, project files may contain personal data you supply. Those files are handled under contract terms and this notice. After handover, retention follows the agreement and this policy.
Telephone calls
Calls may be noted in email follow-ups. We do not routinely record calls unless agreed in writing for a specific session.
Records of consent
Cookie consent records include timestamp and version in cookie mfc_consent and localStorage consent_prefs_v1. You may request information about consent you gave by emailing [email protected].
Detailed processing activities
Enquiry handling: we log your email address and message text in our mail system, assign an internal owner, and may create calendar events for working sessions. Project delivery: files you share may be stored in secure folders with access limited to assigned leads. Website operation: consent JSON is written locally in your browser; we do not receive the content of consent cookies on the server except in aggregated hosting diagnostics.
We do not profile visitors for advertising. When you reject embeds, no map request is made from your browser on subsequent loads, reducing third-party processing from Google for those views.
We review this notice at least annually and when practices change materially. If new embeds were added beyond Maps, we would update this section — none are planned.
Withdrawal of consent
Where processing is based on consent — for example non-essential embeds — you may withdraw consent via the cookie panel or by emailing us. Withdrawal does not affect lawfulness of processing before withdrawal. Essential operation of the site may still require minimal storage.
Access requests
Access requests should identify you clearly and describe the data you believe we hold. We may request verification before releasing information to protect against unauthorised disclosure. We respond within the timeframe required by the PDPA, typically within thirty days for straightforward requests.
Correction requests
If personal data we hold is inaccurate, you may request correction. We will update records promptly where appropriate and notify relevant processors if needed.
Complaints to the PDPC
If you remain dissatisfied after contacting us, you may lodge a complaint with the Personal Data Protection Commission of Singapore. We encourage you to contact us first so we can address concerns directly.
Links from email
Emails we send may contain links to this site or to documents. Clicking links may generate server logs as described above. Do not email passwords or payment card numbers.
Changes
We may update this notice. Material changes will be reflected here with a new "Last updated" date.
Change log
- 11 August 2026 — Initial publication for markforgecraft.life (no form, Maps on all pages, mfc_consent cookie, maps load by default until reject).
This notice is general information, not legal advice for your situation.