Privacy Policy

Reach Narrative Pte. Ltd. ("Reach Narrative", "we", "us" or "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 ("PDPA") of Singapore. This Privacy Policy explains how we collect, use, disclose and safeguard personal data when you visit reachnarrative.pro, contact our marketing agency team or engage our professional marketing services.

1. Data controller

The data controller responsible for your personal data is:

Reach Narrative Pte. Ltd.
109 North Bridge Road, #08-15 Funan
Singapore 179097
UEN: 202918462K
Email: [email protected]
Phone: +65 6532 4461

2. Personal data we collect

We may collect the following categories of personal data depending on how you interact with us:

• Identity and contact data: name, email address, phone number, job title, company name and business address provided through contact forms, email correspondence or client brief documents.
• Enquiry and engagement data: messages, narrative brief requirements, campaign planning details, project scope information and marketing retainer preferences submitted via our website or during client engagement sessions.
• Technical and usage data: IP address, browser type, device information, pages visited, referral source and cookie identifiers collected through essential and analytics cookies as described in our Cookie Policy.
• Communication records: records of emails, meeting notes and correspondence related to our marketing agency services and deliverables.
• Billing data: invoicing details, payment references and tax identification information for contracted professional marketing services.

We do not intentionally collect sensitive personal data such as health information, religious beliefs or financial account credentials through this website. Please do not submit such data via our contact form.

3. How we collect personal data

We collect personal data through:

• Contact and enquiry forms on reachnarrative.pro (requiring explicit PDPA consent via an unchecked checkbox)
• Direct email to [email protected] or [email protected]
• Phone calls to +65 6532 4461
• In-person meetings at our North Bridge Road studio
• Client brief documents and campaign planning materials shared during agency engagements
• Cookies and similar technologies as set out in our Cookie Policy

4. Purposes of collection, use and disclosure

We collect and use personal data for the following purposes:

• Responding to narrative brief enquiries, reach programme requests and general marketing agency inquiries
• Delivering professional marketing services including brand narrative development, campaign planning, content marketing direction and performance marketing reviews
• Managing client engagement, project scope documentation and deliverables
• Processing invoices and administering marketing retainer or campaign sprint contracts
• Complying with legal obligations under Singapore law, including ACRA reporting requirements
• Improving our website through aggregated analytics (only with your cookie consent)
• Sending service-related communications about your engagement with Reach Narrative

We do not sell personal data to third parties. We do not use your data for follower-selling, bot engagement or unrelated marketing without your consent.

5. Legal basis and consent

Under the PDPA, we rely on consent, contractual necessity and legitimate business interests as appropriate. Contact form submissions require you to actively tick a consent checkbox — consent is never pre-checked. You may withdraw consent at any time by emailing [email protected], though withdrawal may affect our ability to continue providing services that require your data.

6. Disclosure to third parties

We may disclose personal data to:

• Hosting and infrastructure providers who store our website and email systems
• Analytics providers (only if you consent to analytics cookies)
• Professional advisers including lawyers and accountants bound by confidentiality
• Government authorities when required by Singapore law
• Subcontractors assisting with deliverables under agency engagements, subject to data protection agreements

All third-party processors are required to handle personal data in accordance with applicable data protection standards.

7. International transfers

Our primary data processing occurs in Singapore. Where personal data is transferred outside Singapore, we ensure appropriate safeguards are in place consistent with PDPA requirements, including contractual protections with overseas service providers.

8. Data retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Enquiry data from non-clients: up to 24 months from last contact
• Client engagement records: duration of contract plus 7 years for legal and accounting purposes
• Cookie consent preferences: 6 months as stated in our Cookie Policy
• Analytics data: up to 26 months if analytics cookies are accepted

After retention periods expire, data is securely deleted or anonymised.

9. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These include HTTPS encryption, access controls, secure hosting infrastructure and staff training on PDPA obligations. While we take reasonable precautions, no internet transmission is completely secure.

10. Your rights under the PDPA

Subject to exceptions under the PDPA, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing based on consent
• Request information about how your data has been used or disclosed within the past year

To exercise these rights, email [email protected] with sufficient detail to identify you and your request. We will respond within 30 days or inform you if an extension is required.

11. Do Not Call Registry

If you provide a Singapore telephone number, we will check the Do Not Call Registry before sending marketing messages unless you have provided clear and unambiguous consent for such communications in connection with an ongoing agency engagement.

12. Children's data

Our marketing agency services and website are directed at business professionals. We do not knowingly collect personal data from individuals under 18 years of age.

13. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top will be revised accordingly. Material changes will be communicated via our website.

14. Contact and complaints

For privacy enquiries or to exercise your PDPA rights:

Data Protection Officer
Reach Narrative Pte. Ltd.
[email protected]
109 North Bridge Road, #08-15 Funan, Singapore 179097

If you are not satisfied with our response, you may contact the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.

15. Marketing communications

We may send service-related emails about your active engagement, invoice notifications and project scope updates. These communications are necessary for delivering our professional marketing services and do not require separate marketing consent. If you subscribe to our newsletter or request programme updates, we will only send such communications with your explicit opt-in consent, and you may unsubscribe at any time via the link in each email or by contacting [email protected].

16. Automated decision-making

Reach Narrative does not use automated decision-making or profiling that produces legal or similarly significant effects on individuals. Analytics data, where collected with consent, is used in aggregated form to improve website content and understand general visitor patterns — not to make automated decisions about individual visitors or potential clients.

17. Third-party links

Our website may contain links to third-party websites such as social media platforms, advertising policy documentation or industry resources. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party website you visit through links on reachnarrative.pro.

18. Data breach notification

In the event of a data breach that is likely to result in significant harm or affect a significant number of individuals, we will notify the Personal Data Protection Commission and affected individuals as required under the PDPA. Our internal incident response procedures include containment, assessment, notification and remediation steps designed to minimise impact and prevent recurrence.

19. Records of processing

We maintain internal records of processing activities documenting the categories of personal data collected, purposes of processing, retention periods and third-party disclosures. These records are reviewed annually and updated when our data handling practices change. You may request a summary of how your specific data is processed by contacting our Data Protection Officer.

20. Definitions

In this Privacy Policy, "personal data" has the meaning given in the PDPA — data about an individual who can be identified from that data or from that data and other information to which we have or are likely to have access. "Processing" includes collecting, using, disclosing and storing personal data. "Consent" means voluntary agreement given in circumstances where the individual understands the purpose for which their data will be used.

21. Access request procedure

To submit a data access request under the PDPA, email [email protected] with your full name, contact details and a description of the personal data you wish to access. We may request additional verification to confirm your identity before releasing data. Access requests are processed within thirty days unless an extension is required, in which case we will notify you promptly with reasons for the delay and the expected completion date.

22. Correction request procedure

If you believe personal data we hold about you is inaccurate or incomplete, email [email protected] with details of the correction required. We will review your request and update records where appropriate within a reasonable timeframe. If we disagree with a correction request, we will explain our reasoning and inform you of your options under the PDPA, including the ability to append a statement of disagreement to your record where applicable.