Privacy Policy

This Privacy Policy describes how VigorMark Marketing Pte. Ltd. (UEN 202786143K), registered at 7500A Beach Road, #09-306 The Plaza, Singapore 199591 ("VigorMark", "we", "us", or "our"), collects, uses, discloses, and protects personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA") and its subsidiary legislation.

By accessing our website at vigormark.life, submitting an enquiry through our contact form, engaging our services, or otherwise providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

VigorMark Marketing Pte. Ltd. is the data controller responsible for personal data collected through this website and in the course of providing our marketing and demand generation services. For privacy-related enquiries, contact our Data Protection Officer at [email protected] or write to the registered address above.

2. Personal Data We Collect

We may collect the following categories of personal data depending on your interaction with us:

2.1 Information you provide directly

• Contact details: name, email address, telephone number, company name, job title
• Enquiry content: messages submitted through our contact form, campaign review requests, and service enquiries
• Consent records: your consent to data processing, including PDPA consent checkbox submissions with timestamps
• Contractual information: billing details, engagement scope, and correspondence related to service delivery
• Account credentials: where we require access to your advertising or analytics platforms, we may record account identifiers (not passwords) and access permissions granted

2.2 Information collected automatically

• Website usage data: pages visited, time spent, referral source, browser type, device type, operating system, and IP address
• Cookie data: as described in our Cookie Policy
• Log files: server logs recording access times, requested URLs, and error events for security and performance monitoring

2.3 Information from third parties

• Referral information: if you are referred to us by a partner or existing client, we may receive your name and contact details with the referrer's consent
• Platform data: when managing campaigns on your behalf, we access data from advertising platforms (Meta, Google, LinkedIn), analytics tools, and CRM systems as authorised by you

3. Purposes of Collection, Use, and Disclosure

We collect and use personal data for the following purposes:

• Responding to enquiries submitted through our website contact form or email
• Conducting campaign reviews and preparing service proposals
• Delivering marketing and demand generation services under engagement agreements
• Managing advertising accounts, creating and optimising campaigns, and producing reports
• Processing invoices and maintaining financial records
• Communicating with you about service delivery, performance updates, and account matters
• Improving our website, services, and user experience through analytics (where consented)
• Complying with legal obligations, including record-keeping requirements under Singapore law
• Protecting our rights, property, and safety, and that of our clients and users, including fraud prevention and security monitoring

We will not use your personal data for purposes incompatible with those described above without notifying you and, where required under the PDPA, obtaining your consent.

4. Legal Basis for Processing

Under the PDPA, we rely on the following bases for processing personal data:

• Consent: Where you have given clear consent, such as checking the PDPA consent box on our contact form (which is never pre-checked) or accepting cookies through our cookie banner
• Contractual necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legitimate interests: Where processing is necessary for our legitimate business interests, such as improving our services, provided these interests are not overridden by your data protection rights
• Legal obligation: Where processing is required to comply with applicable laws and regulations

5. Disclosure of Personal Data

We may disclose personal data to the following categories of recipients:

• Service providers who assist us in operating our website, processing enquiries, hosting data, or delivering services (e.g., email delivery, cloud hosting, analytics platforms)
• Advertising and analytics platforms where you have authorised us to manage campaigns on your behalf
• Professional advisers including lawyers and accountants, where necessary for legal or financial compliance
• Regulatory authorities, law enforcement, or other government bodies where required by law or to protect legal rights
• Successors in the event of a merger, acquisition, or sale of assets, subject to equivalent data protection obligations

We require all third-party recipients to handle personal data in accordance with applicable data protection laws and only for the purposes for which it was disclosed. We do not sell personal data to third parties.

6. Cross-Border Transfers

Some of our service providers and advertising platforms may process personal data outside Singapore. Where personal data is transferred overseas, we take reasonable steps to ensure that the recipient provides a standard of protection comparable to that under the PDPA. This may include contractual clauses, verifying the recipient's data protection certifications, or obtaining your consent where required.

Advertising platforms such as Meta, Google, and LinkedIn operate global infrastructure and may process data in the United States, European Union, and other jurisdictions. Their respective privacy policies govern platform-level data processing.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Enquiry data: up to 24 months from last contact, unless an engagement is entered into
• Client data: for the duration of the engagement plus 7 years thereafter for legal and financial record-keeping
• Cookie consent records: 6 months from the date of consent, in line with our cookie banner storage period
• Website analytics data: aggregated and anonymised after 26 months, or deleted upon withdrawal of analytics consent
• Server logs: up to 90 days for security monitoring purposes

When personal data is no longer required, we securely delete or anonymise it in accordance with our data retention schedule.

8. Your Rights Under the PDPA

Subject to exceptions under the PDPA, you have the following rights:

• Access: Request access to personal data we hold about you and information about how it has been used or disclosed within the past year
• Correction: Request correction of inaccurate or incomplete personal data
• Withdrawal of consent: Withdraw consent for processing where consent is the legal basis, subject to legal and contractual restrictions
• Data portability: Where technically feasible, request a copy of personal data you provided in a structured, commonly used format

To exercise these rights, contact us at [email protected]. We will respond within 30 days. We may charge a reasonable fee for access requests as permitted under the PDPA. We may refuse requests that are manifestly unfounded, excessive, or would adversely affect the rights of others.

9. Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encrypted transmission of data via HTTPS/TLS on our website
• Access controls limiting personal data access to authorised personnel on a need-to-know basis
• Secure storage of client credentials and platform access tokens
• Regular review of data handling practices and security configurations
• Honeypot fields and validation on contact forms to reduce automated submissions

While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of personal data.

10. Children's Data

Our website and services are directed at business professionals and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, contact us and we will promptly delete it.

11. Third-Party Links

Our website may contain links to third-party websites, including advertising platforms and partner sites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Material changes will be communicated via a notice on our website. Continued use of our website or services after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy enquiries, data access requests, or complaints about our handling of personal data:

VigorMark Marketing Pte. Ltd.
Data Protection Officer
7500A Beach Road, #09-306 The Plaza
Singapore 199591
Email: [email protected]
Phone: +65 6816 4372

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.