This Privacy Policy describes how BrandRush Pte. Ltd. (UEN 202958417R), referred to as "BrandRush", "we", "us" or "our", collects, uses, discloses and protects personal data when you visit brandrush.pro, submit enquiries, engage our digital marketing services, or otherwise interact with us. We are committed to handling personal data responsibly in accordance with the Personal Data Protection Act 2012 of Singapore (PDPA) and applicable subsidiary legislation.
1. Data controller
BrandRush Pte. Ltd. is the organisation responsible for personal data collected through this website and our client engagements. Our registered office is 18 Howard Road, #07-05 Novelty BizCentre, Singapore 369585. Privacy enquiries may be directed to [email protected].
2. Personal data we collect
We may collect the following categories of personal data depending on how you interact with us:
- Identity and contact data: name, job title, company name, email address, telephone number, postal address.
- Enquiry and briefing data: information you provide through contact forms, including budget range, service interest and message content.
- Technical and usage data: IP address, browser type, device information, pages visited, referral source, session duration and similar analytics data collected via cookies and similar technologies.
- Client engagement data: for clients under retainer or project agreements, we may process additional business contact data, campaign briefs, brand assets, analytics access credentials (where granted), communication records and billing information necessary to deliver digital marketing services.
- Marketing preferences: your consent choices regarding cookies, email communications and data processing.
We do not intentionally collect sensitive personal data such as national identification numbers, financial account details through this website contact form, health information or data relating to children under 13 years of age. If you submit such data voluntarily, we will handle it only to the extent necessary and in compliance with applicable law.
3. How we collect personal data
Personal data is collected through: (a) information you provide directly via our contact form, email, telephone or in-person meetings; (b) automated technologies including cookies, server logs and analytics tools when you browse our website; (c) third-party sources such as business referrals, event registrations or publicly available professional profiles where permitted; and (d) client onboarding documentation for service engagements.
4. Purposes of collection, use and disclosure
We collect and use personal data for the following purposes:
- Responding to enquiries and scheduling brand-growth briefings;
- Delivering digital marketing services including brand strategy, paid media management, SEO, CRO, analytics and content marketing;
- Managing client relationships, account management and performance reporting;
- Processing invoices and fulfilling contractual obligations;
- Improving our website, services and user experience through analytics;
- Sending service-related communications and, where you have consented, marketing updates about BrandRush capabilities;
- Complying with legal obligations, regulatory requirements and dispute resolution;
- Protecting the security and integrity of our systems and preventing fraud.
We will not use your personal data for purposes incompatible with those described above without notifying you and, where required, obtaining your consent.
5. Legal basis and consent
Under the PDPA, we rely on your consent, contractual necessity, legitimate business interests or legal obligation as appropriate for each processing activity. When you submit our contact form, you must provide explicit consent via the PDPA consent checkbox before we process your enquiry data. You may withdraw consent at any time by contacting [email protected], subject to legal or contractual restrictions on withdrawal.
6. Disclosure to third parties
We may disclose personal data to:
- Service providers who assist with hosting, email delivery, analytics, CRM systems and payment processing, bound by confidentiality and data protection obligations;
- Advertising platforms (Google, Meta, LinkedIn) where you are a client and campaign delivery requires audience data, subject to platform terms and your campaign agreements;
- Professional advisers including lawyers and accountants where necessary;
- Government authorities when required by Singapore law or valid legal process.
We do not sell personal data to third parties. Cross-border transfers, if any, are conducted with appropriate safeguards consistent with PDPA requirements.
7. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting and reporting requirements. Enquiry data from website forms is typically retained for up to 24 months unless a business relationship develops. Client engagement data is retained for the duration of the engagement plus up to 7 years for legal and financial record-keeping. Analytics and cookie data retention periods are described in our Cookie Policy. When data is no longer required, we securely delete or anonymise it.
8. Data security
We implement reasonable administrative, technical and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. These measures include access controls, encrypted connections (HTTPS), secure hosting infrastructure and staff training on data protection. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but we continuously review our practices.
9. Your rights under the PDPA
Subject to exceptions under the PDPA, you have the right to:
- Request access to personal data we hold about you;
- Request correction of inaccurate or incomplete personal data;
- Withdraw consent to processing where consent is the legal basis;
- Request information about how your personal data has been used or disclosed within the past year.
To exercise these rights, contact [email protected] with sufficient detail to identify you and your request. We will respond within reasonable timeframes prescribed by the PDPA. A reasonable fee may apply for access requests as permitted by law.
10. Cookies and tracking
Our website uses cookies and similar technologies as described in our Cookie Policy. You may manage cookie preferences through our cookie banner or browser settings. Essential cookies are necessary for website functionality and cannot be disabled through our banner.
11. Third-party links
Our website may contain links to third-party websites including advertising platforms and social media. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing personal data.
12. Updates to this policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology or legal requirements. The "Last updated" date at the top indicates the most recent revision. Material changes will be communicated via website notice where appropriate.
13. Do Not Call Registry
Where applicable, BrandRush complies with Singapore's Do Not Call Registry requirements. If you have registered your Singapore telephone number with the DNC Registry, we will not send marketing messages to that number unless you have provided clear and unambiguous consent for such communications or an ongoing business relationship exemption applies under the PDPA.
14. Automated decision-making
BrandRush does not use automated decision-making or profiling that produces legal or similarly significant effects on individuals through this website. Analytics tools may aggregate behavioural data for website improvement, but no automated decisions about employment, credit or service eligibility are made based on website browsing activity.
15. Data breach notification
In the event of a data breach that is likely to result in significant harm or affect a significant number of individuals, BrandRush will assess the breach promptly and, where required under the PDPA, notify the Personal Data Protection Commission of Singapore and affected individuals without undue delay. We maintain internal incident response procedures to contain, investigate and remediate security events.
16. Marketing communications
With your consent, we may send you information about BrandRush services, Growth Lab insights and event invitations by email. You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or contacting [email protected]. Service-related communications necessary to fulfil an existing engagement are not marketing messages and may continue regardless of marketing opt-out, to the extent permitted by law.
We maintain a record of consent and opt-out requests to ensure compliance with the PDPA and applicable marketing regulations in Singapore.
17. Contact
For privacy enquiries, data access requests or complaints:
BrandRush Pte. Ltd.
Email: [email protected]
Address: 18 Howard Road, #07-05 Novelty BizCentre, Singapore 369585
Telephone: +65 6604 8173
If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore.
