Privacy Policy

Last updated: 14 May 2026

1. Who we are

VBCreation Pte. Ltd. (UEN 202620906D), registered at 160 Robinson Road #14-04, Singapore 068914, is the Data Controller for the personal data we collect and process through this site.

2. What data we collect

  • Identification data: name, email, phone, company name (contact form)
  • Technical data: IP address, browser type, device information
  • Usage data: pages visited, interactions, preferences (analytics)
  • Communication data: emails, chatbot exchanges, feedback

3. Why we collect data (legal basis)

  • Performance of a contract (responding to commercial inquiries)
  • Legitimate interest (analytics, security, fraud prevention)
  • Legal obligation (accounting, tax records)
  • Consent (advanced analytics, non-essential cookies)

4. Who we share data with

  • Hosting: Cloudflare, Inc.
  • Advanced analytics: Microsoft Clarity (heatmaps, sessions, user journeys) — Microsoft Corporation, subject to consent via the cookie banner
  • Basic analytics: Cloudflare Web Analytics (cookie-less, aggregated)
  • Email: Proton Mail (Proton AG, Switzerland)

5. International data transfers

Your data may be transferred outside Singapore, notably to the EU, US, and Switzerland. We rely on Standard Contractual Clauses (SCC), adequacy decisions, and equivalent safeguards.

6. Data retention

  • Client data: 7 years after end of business relationship (IRAS Singapore requirement)
  • Marketing data: until consent withdrawal
  • Technical logs: 12 months maximum
  • Inactive accounts: anonymized or deleted after 24 months

7. Your rights

Under PDPA (Singapore) and GDPR (EU), you have the following rights:

  • Right of access to your personal data
  • Right to correction of inaccurate data
  • Right to deletion (right to be forgotten)
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with the regulator

To exercise your rights, contact: dpo@vbcreation.io

8. Security

We implement appropriate technical and organizational measures: HTTPS/TLS encryption, access controls, regular backups, and incident response procedures.

9. Cookies

  • Essential cookies: language preference, theme, consent (no tracking)
  • Analytics cookies (with consent): Microsoft Clarity for heatmaps and sessions

You can manage your preferences via the cookie banner or your browser settings.

10. Children's data

We do not knowingly collect data from individuals under 16 years old. Any data collected by mistake will be deleted promptly.

11. Data breach notification

In the event of a personal data breach likely to result in significant harm, we will notify the PDPC (Singapore) and affected individuals within 72 hours, in accordance with PDPA requirements.

12. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new date. Continued use of the site constitutes acceptance.

13. Contact

DPO email: dpo@vbcreation.io

Postal: VBCreation Pte. Ltd., 160 Robinson Road #14-04, Singapore 068914

14. Regulatory complaints