Privacy policy

1. Data controller

PitchNexus Pte. Ltd. (UEN 202931845K) is the organisation responsible for personal data collected through pitchnexus.pro and in connection with our marketing agency services. Our registered address is 12 Marina Boulevard, #23-05 Marina Bay Financial Centre Tower 3, Singapore 018982. Privacy enquiries: [email protected].

2. Scope

This Privacy Policy applies to personal data we collect when you visit our website, submit contact forms, engage our services, communicate with us by email or phone, or interact with our marketing materials. It does not apply to third-party websites linked from pitchnexus.pro. We encourage you to review the privacy policies of any external sites you visit.

3. Personal data we collect

Depending on your interaction with us, we may collect the following categories of personal data:

• Identity and contact data: name, job title, company name, email address, telephone number, postal address
• Enquiry and communication data: messages submitted via contact forms, email correspondence, meeting notes, marketing briefs
• Technical data: IP address, browser type, device information, pages visited, referral URLs, cookie identifiers (see our Cookie Policy)
• Service-related data: campaign preferences, budget ranges, project scope details provided during agency engagements
• Consent records: timestamps and content of PDPA consent given via forms or agreements

We do not intentionally collect sensitive personal data (such as health information or national identification numbers) through our website. Please do not submit such data via contact forms.

4. Purposes of collection and use

We collect and use personal data for the following purposes:

• Responding to enquiries and providing information about our marketing agency services
• Delivering contracted services including campaign planning, creative production and account management
• Processing invoices, payments and contractual administration
• Improving our website, content and user experience through aggregated analytics
• Complying with legal obligations under Singapore law
• Protecting our legitimate business interests, including fraud prevention and dispute resolution
• Sending service-related communications where you are an existing client (you may opt out of non-essential marketing emails)

5. Legal bases under PDPA 2012

Under Singapore's Personal Data Protection Act 2012, we rely on the following bases for processing personal data:

• Consent: Contact form submissions require explicit consent via the consent_pdpa checkbox. Cookie preferences are managed through our cookie banner with choices stored for six months.
• Contractual necessity: Processing required to perform services you have engaged us to deliver.
• Legal obligation: Retention of records required by tax, accounting or regulatory requirements.
• Legitimate interests: Website security, service improvement and business administration, balanced against your privacy rights.

Where consent is the basis, you may withdraw consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing before withdrawal, and may limit our ability to continue providing services.

6. Disclosure to third parties

We do not sell personal data. We may share data with:

• Service providers who assist with hosting, email delivery, analytics, payment processing and project management tools — bound by confidentiality obligations
• Professional advisers (lawyers, accountants) when necessary
• Regulatory or law enforcement authorities when required by law
• Advertising platforms (Google, Meta) only in anonymised or aggregated form for campaign measurement, where consent permits

Where data is transferred outside Singapore, we ensure recipients provide a standard of protection comparable to that under the PDPA, through contractual clauses or verified certification schemes.

7. Retention

We retain personal data only as long as necessary for the purposes collected:

• Contact form enquiries not converting to clients: up to 24 months
• Client project records and contracts: duration of engagement plus 7 years for legal and accounting requirements
• Marketing consent records: duration of consent plus 3 years
• Website analytics data: aggregated after 26 months; raw logs deleted earlier where possible
• Cookie consent preferences: 6 months (stored locally on your device)

When data is no longer needed, we securely delete or anonymise it.

8. Your rights under PDPA

Under the Personal Data Protection Act 2012, you have the right to:

• Access: Request confirmation of whether we hold your personal data and obtain a copy
• Correction: Request correction of inaccurate or incomplete data
• Withdraw consent: Withdraw consent for processing where consent is the legal basis
• Data portability: Request transfer of data you provided in a structured format, where technically feasible

To exercise these rights, email [email protected] with sufficient detail to identify your records. We respond within 30 days unless an extension is permitted under PDPA. We may charge a reasonable fee for manifestly unfounded or excessive requests.

9. Personal Data Protection Commission (PDPC)

If you believe we have not handled your personal data in accordance with the PDPA, you may contact us first at [email protected]. You also have the right to lodge a complaint with the Personal Data Protection Commission:

Personal Data Protection Commission
10 Pasir Panjang Road, #03-01 Mapletree Business City, Singapore 117438
Website: www.pdpc.gov.sg
Telephone: +65 6377 3131

10. Cookies and tracking

Our website uses cookies as described in our Cookie Policy. You may manage preferences through the cookie banner (Accept all / Reject all / Customise). Analytics cookies are optional and off unless you consent.

11. Security measures

We implement appropriate technical and organisational measures to protect personal data, including HTTPS encryption for data in transit, access controls limiting staff access to client data on a need-to-know basis, secure password policies and regular review of third-party vendor security practices. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we take reasonable steps to protect your data.

12. Children's data

Our services and website are directed at business professionals. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have collected data from a minor, contact [email protected] and we will delete it promptly.

13. Marketing communications

Existing clients may receive service updates and relevant agency news by email. You may unsubscribe using the link in any marketing email or by contacting [email protected]. Unsubscribing from marketing does not affect transactional communications related to active engagements.

14. Changes to this policy

We may update this Privacy Policy to reflect changes in law, technology or our practices. The "Last updated" date indicates the current version. Material changes will be communicated via website notice or email where appropriate. We maintain a change log of significant revisions:

• 1 July 2026 — Initial publication of Privacy Policy for pitchnexus.pro

15. Automated decision-making

PitchNexus does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on individuals. Analytics data is reviewed by humans for aggregate website improvement purposes only.

16. Data breach notification

In the event of a data breach likely to result in significant harm or affect a significant number of individuals, we will notify the Personal Data Protection Commission and affected individuals as required under the PDPA and related guidance issued by the PDPC. We maintain internal incident response procedures and review them periodically.

17. Third-party links

Our website may contain links to external sites such as social media profiles or partner resources. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal data.

18. Business transfers

If PitchNexus undergoes a merger, acquisition or sale of assets, personal data may be transferred to the successor entity subject to comparable privacy protections. We will notify affected clients and website users where required by law.

20. Records of processing

PitchNexus maintains internal records of processing activities as required under PDPA accountability obligations. These records document categories of data processed, purposes, retention periods, recipients and cross-border transfer safeguards. Records are reviewed annually and updated when processing activities change materially.

21. Your responsibilities

You are responsible for ensuring personal data you provide is accurate, complete and lawfully obtained. Do not submit sensitive personal data or third-party personal data without proper authority. If you provide contact details of colleagues for project communications, confirm you have their permission to share that information with PitchNexus for the stated purpose.

22. International clients

PitchNexus serves clients in Singapore and across the region. Where you access our website or services from outside Singapore, you acknowledge that personal data may be processed in Singapore and other jurisdictions where our service providers operate. We apply PDPA standards as our baseline regardless of your location, and implement additional safeguards for cross-border transfers as described in Section 6.

If you are subject to data protection laws in other countries, contact [email protected] to discuss how we can accommodate reasonable requests compatible with our PDPA obligations and operational requirements. We respond to cross-border enquiries within our standard 30-day timeframe where applicable.

23. Contact

Data Protection Contact: [email protected]
PitchNexus Pte. Ltd., 12 Marina Boulevard, #23-05 Marina Bay Financial Centre Tower 3, Singapore 018982
Telephone: +65 6714 9820