Privacy Policy

This Privacy Policy explains how AdBloom Media Pte. Ltd. ("AdBloom", "we", "us", "our") handles personal data under the Personal Data Protection Act 2012 of Singapore ("PDPA"). Unlike a single checklist, this document is organised by who you are and how you interact with us. Read the summary table first, then the part that applies to you.

Policy at a glance

Your role	Main data we hold	Primary legal basis	Typical retention
Website visitor	Technical logs, cookie IDs (if consented)	Legitimate interests / consent	90 days – 6 months
Enquiry contact	Name, email, phone, message	Consent + pre-contract steps	Up to 24 months
Active client	Campaign data, account access, billing	Contractual necessity	Engagement + up to 7 years
Former client	Archived reports, correspondence	Legal obligation / legitimate interests	Per retention schedule (Appendix A)

Part A — Controller, scope and DPO

Data controller: AdBloom Media Pte. Ltd. · UEN 202784728M · 15 Enggor Street, #08-05 Realty Centre, Singapore 079716

General contact: [email protected] · +65 6795 4207
Data Protection Officer: [email protected]

AdBloom is a media planning and performance marketing agency in Tanjong Pagar. We are not a florist, wellness business, self-serve ad platform or ad network. This policy covers adbloom.pro, enquiry channels, client engagements and related business processing. It does not govern third-party advertising platforms you pay directly — those operate under their own privacy terms.

We apply data minimisation: we collect only what is needed for the purpose stated at collection. We do not sell personal data. We do not buy contact lists for unrelated marketing.

Part B — Website visitors

If you browse adbloom.pro without submitting a form, we may process:

• Server and security logs (IP address, timestamp, user agent, requested URL) to keep the site secure and diagnose errors;
• Cookie and local-storage identifiers if you interact with our cookie banner — see Cookie Policy;
• Aggregated analytics (pages viewed, session duration, referral source) only when you consent to analytics cookies.

We do not require account registration to read public pages. Non-essential cookies are blocked until you choose Accept all or enable categories in Customise. Reject all stores your preference and limits processing to strictly necessary cookies only.

Third-party links (Google, Meta, PDPC, social networks) have their own privacy practices. We are not responsible for data you submit on external sites.

Part C — Enquiry contacts

When you submit our contact form or email [email protected], we collect identity and contact data (name, email, optional phone, company if provided), your message content, enquiry subject type and a PDPA consent record. The consent checkbox is never pre-ticked.

We use enquiry data to:

• Respond within two business days during office hours;
• Schedule discovery calls or studio visits;
• Prepare non-binding proposals if there is a fit;
• Maintain a record of consent and correspondence for compliance.

Submitting an enquiry does not create a client relationship. We may retain enquiry records up to 24 months from last contact. If an engagement proceeds, relevant data rolls into the active client record per Part D. We do not add you to marketing lists without separate opt-in.

Part D — Active and former clients

Under a signed scope of work, we may process additional categories:

• Account and access data: advertising platform IDs, analytics property access, CRM logins (stored with least-privilege controls);
• Campaign data: audience definitions, spend reports, conversion metrics, creative assets, landing page URLs, A/B test results;
• Commercial data: billing contacts, invoices, payment status (agency fees only — platform media spend is paid by you directly to vendors);
• Communications: meeting notes, email threads, shared dashboards and signed documents.

Access is limited to personnel and bound contractors who need it for your deliverables. We follow platform terms and any internal data policies you communicate. Campaign data is stored in secured cloud and agency tools with role-based access.

AI-assisted workflows may draft report commentary or summarise query data; human team members review outputs before client delivery. We do not use client campaign data to train public AI models without explicit written consent.

When an engagement ends, we revoke platform access promptly, deliver agreed final reports, and archive records per Appendix A. You may request return or deletion of certain materials subject to legal retention requirements.

Part E — Disclosure to third parties

We disclose personal data only where necessary:

• Processors: hosting, email, accounting, project management — under confidentiality and PDPA-aligned terms;
• Advertising/analytics platforms: when delivering your campaigns or measuring site traffic you consented to;
• Professional advisers: lawyers, auditors, when required;
• Authorities: when required by Singapore law or court order.

Some processors may be located outside Singapore. We ensure comparable protection through contractual clauses, vendor assessment or consent as required under the PDPA. Sub-processor categories are listed in Appendix B; detail available on request to [email protected].

Part F — Your PDPA rights

Regardless of which part above applies, you may:

• Request access to personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Withdraw consent for optional processing (may limit services);
• Request information on how your data was used or disclosed in the past year.

Email [email protected] with enough detail for us to verify your identity. We aim to respond within thirty days. A reasonable fee may apply to manifestly unfounded or excessive requests as permitted by law.

If we cannot resolve your concern, you may contact the Personal Data Protection Commission (PDPC): 10 Pasir Panjang Road, #03-01 Mapletree Business City, Singapore 117438 · pdpc.gov.sg

Part G — Security, breaches and children

Safeguards include HTTPS, access controls, password policies, secure hosting and staff confidentiality training. You are responsible for credentials you share for platform access. No internet transmission is completely secure.

If a breach is likely to cause significant harm, we will notify the PDPC and affected individuals as required and take steps to contain and remediate the incident.

Our services target businesses and marketing professionals. We do not knowingly collect data from individuals under eighteen without parental consent.

Part H — Marketing communications and policy updates

We do not send unsolicited bulk marketing to enquiry contacts without separate opt-in. Service-related messages about an active engagement (report delivery, meeting scheduling, invoice notices) are sent on the basis of our contractual relationship. Optional newsletters, if introduced, will always include an unsubscribe mechanism.

We may update this Privacy Policy when law, technology or our services change. The date at the top of this page will reflect revisions. Material changes will be posted here; where new processing purposes require fresh consent, we will obtain it before applying them. Continued use of adbloom.pro after non-material updates constitutes acknowledgement where permitted by law.

This policy should be read with our Cookie Policy and Terms of Service. Cookie consent is independent of PDPA contact-form consent — each is recorded separately.

Appendix A — Retention schedule

• Enquiry records: up to 24 months from last contact;
• Active client project files: duration of engagement;
• Post-engagement archives: up to seven years for tax, accounting and dispute purposes;
• Cookie consent (adbloom_consent): six months;
• Server logs: typically 90 days unless needed for security investigation.

Expired data is deleted or anonymised securely.

Appendix B — Sub-processor categories

Cloud hosting · Email delivery · Analytics (consent-gated on website) · Advertising platforms (client campaigns) · Accounting and invoicing · Project management · AI tooling (human-reviewed outputs only). Vendor names available on request.

Appendix C — Document history

• 27 July 2026 — Initial publication for adbloom.pro (audience-based structure).

Questions

[email protected] · AdBloom Media Pte. Ltd., 15 Enggor Street, #08-05 Realty Centre, Singapore 079716