Last updated: 12 Oct 2026
This Privacy Policy explains how Brands Win Agency (“we”, “us”, “our”) collects, uses, discloses and protects your personal data when you visit brandswinagency.com (the “Website”), contact us, or work with us as a client, prospective client, supplier or partner. We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (the “PDPA”).
Brands Win Agency (UEN 202532547N)
60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051
Email: contact@brandswinagency.com
Phone and WhatsApp: +65 8076 8810
1. The personal data we collect
Information you give us
- Enquiry forms. Our “Send Inquiry” form asks for your name, phone number, email address, the service you are enquiring about, and an optional message. Our Contact Us form asks for your name, phone number, email address, your company name or website, and an optional message.
- Phone, email and WhatsApp. If you call us, email us or message us on WhatsApp, we receive your name, phone number or email address, and anything you choose to tell us.
- Clients and suppliers. Business contact details, billing details, and the information we need to deliver our services, such as access to your website, advertising and analytics accounts, and brand materials.
- Newsletter and marketing sign-ups. If you subscribe to our newsletter or agree to receive updates from us, your name, email address and/or phone number, and your marketing preferences.
- Influencers and content creators. Your name, social media handles, audience and performance statistics, rates, payment details, and the content you create for campaigns.
Information collected automatically
- Analytics. We use Google Analytics 4, set up through Google Site Kit, as our only analytics tool, to understand how visitors use the Website. It uses cookies to collect information such as your device and browser type, approximate location, the page that referred you, the pages you visit and how long you stay. See section 9.
- Server and security logs. Our web host, Exabytes, records technical details such as your IP address, browser type and the pages requested, to run the Website and protect it against abuse.
We do not ask for your NRIC number or other national identification numbers on the Website.
2. Why we collect it
We collect, use and disclose personal data to:
- Reply to your enquiries, arrange calls and prepare proposals.
- Deliver, manage and bill our services, and manage our relationships with clients, suppliers and creators.
- Plan and run marketing campaigns for our clients.
- Send you news, insights or offers about our services, but only where you have agreed to receive them (see section 5).
- Understand how the Website is used so we can improve it.
- Keep the Website, our systems and our business secure, and prevent spam and fraud.
- Meet our legal, tax and accounting obligations, and establish or defend legal claims.
We will not use your personal data for any other purpose without telling you and asking for your consent first, unless the PDPA or another law allows or requires it.
3. Your consent
When you submit a form, email us, call us or message us, you consent to our using your personal data to respond and for the related purposes above. If you give us personal data about someone else, such as a colleague, please make sure they have agreed to this.
4. Withdrawing your consent
You can withdraw your consent at any time by emailing our Data Protection Officer (section 14). We will act on your request within a reasonable time and tell you what it is likely to mean for you. For example, we may no longer be able to reply to an enquiry or deliver a service that depends on that data. Withdrawing consent does not affect data we must keep or use where the law requires or allows it.
5. Marketing emails, WhatsApp broadcasts and our newsletter
We send marketing emails, WhatsApp broadcasts and a newsletter about our services, insights and offers. We only send these to people who have agreed to receive them, and we comply with the Do Not Call provisions of the PDPA and with the Spam Control Act 2007.
You can stop receiving marketing messages at any time, at no cost:
- Emails and newsletter: click the “unsubscribe” link in any email.
- WhatsApp broadcasts: reply “STOP”, or block or remove our number.
- Any channel: email contact@brandswinagency.com and ask to be removed.
We will act on your request as soon as we can. You may still receive messages that are not marketing, such as replies to your enquiries or messages about a project you have with us.
6. Who we share it with
We do not sell your personal data. We share it only where needed, with:
- Service providers who work for us, such as our web host (Exabytes), our email, CRM and spreadsheet service providers, Google (analytics and maps), Meta (WhatsApp), and our professional advisers such as accountants and lawyers.
- Advertising and social media platforms, such as Google, Meta (Facebook and Instagram), TikTok and LinkedIn, and with creators and media outlets, when this is needed to run a campaign for a client.
- Government bodies, regulators or law enforcement, where the law requires or allows it.
- A buyer or successor, if our business is reorganised, merged or sold, under confidentiality obligations.
We require our service providers to protect personal data and to use it only for the purposes we give them.
7. When we act for our clients
When we run campaigns or build websites for clients, we sometimes handle personal data on the client’s behalf, for example a customer list uploaded to an ad platform, or leads collected through a landing page we built. In those cases the client decides how that data is used, and their own privacy policy applies. We handle that data only on the client’s instructions and protect it as the PDPA requires of a data intermediary.
8. Transfers outside Singapore
Some of our service providers may store or process personal data outside Singapore. When we transfer personal data overseas, we take reasonable steps to make sure it is protected to a standard comparable to the PDPA, for example through the provider’s contractual commitments or certifications.
9. Cookies
Cookies are small files saved on your device when you visit a website. The Website uses:
| Type | Provider | What it does |
|---|---|---|
| Essential | WordPress and our caching software (LiteSpeed Cache) | Delivers pages, remembers basic settings, keeps the site working and secure |
| Analytics | Google Analytics 4 via Google Site Kit | Counts visits and shows how people use the site, using cookies such as _ga and _ga_* |
| Embedded map | Google Maps (Contact Us page) | Shows our location; Google may set its own cookies when the map loads |
Google Analytics 4 is the only analytics tool on the Website, and we do not currently use advertising cookies or pixels. If we add other analytics, advertising or tracking tools, we will update this policy first.
Managing cookies. You can block or delete cookies in your browser settings. You can also opt out of Google Analytics with Google’s browser add-on at https://tools.google.com/dlpage/gaoptout. If you block cookies, some parts of the Website may not work properly.
10. Links to other websites
The Website links to other sites and apps, such as WhatsApp, Instagram, LinkedIn, X and Google Maps, and our articles link to outside sources. Those sites have their own privacy policies, and we are not responsible for how they handle your data.
11. How long we keep it
We keep personal data only for as long as we need it for the purposes above, or as long as the law requires. As a guide:
- Enquiries that do not lead to a project: up to 24 months after our last contact.
- Client, supplier and creator records: for the length of the engagement plus 5 years, for tax, accounting and contract purposes.
- Google Analytics data: 14 months, the retention period set in Google Analytics.
After that, we delete the data securely or make it anonymous.
12. How we protect it
We use reasonable security measures to protect personal data against unauthorised access, use, disclosure, copying, changes, loss and disposal. These include an encrypted (HTTPS) connection to the Website, password-protected accounts, and limiting access to the team members who need it. No method of sending or storing data online is completely secure, so we cannot guarantee absolute security.
13. Data breaches
If a data breach happens, we will act quickly to contain it and assess its impact. If it is likely to cause you significant harm, or affects 500 or more people, we will notify the Personal Data Protection Commission (PDPC) within 3 calendar days of confirming that. Where it is likely to cause you significant harm, we will also tell you, so you can take steps to protect yourself.
14. Accessing and correcting your data
You can ask us:
- for a copy of the personal data we hold about you, and how it has been used or disclosed in the past year; and
- to correct any mistake or gap in your personal data.
Please send your request to our Data Protection Officer. We may need to confirm your identity first. We will reply as soon as reasonably possible, usually within 30 days, and will tell you if we need longer. We may charge a reasonable fee for an access request, and will tell you the amount before we process it. Please also let us know if your details change, so we can keep them accurate.
Data Protection Officer
Vincent, Data Protection Officer
Email: contact@brandswinagency.com
Phone: +65 8076 8810
Address: 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051
If you are not satisfied with our response, you can contact the PDPC at https://www.pdpc.gov.sg.
15. Children
Our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you think a child has given us their personal data, please contact us and we will delete it.
16. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we may also let you know in other ways.