Privacy Policy

Echo Brief Pro ("we", "us", or "our") respects your privacy and is committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA") and applicable subsidiary legislation. This Privacy Policy explains what information we collect, why we collect it, how we use and safeguard it, and the choices available to you.

1. Data controller

The data controller responsible for personal data processed through this website and our client services is Echo Brief Pro, located at 138 Market Street, #06-01, CapitaGreen, Singapore 048946. For privacy-related enquiries, contact us at hello@echobriefpro.life or +65 6234 7701.

2. Scope of this policy

This policy applies to personal data collected when you visit echobriefpro.life, submit an enquiry through our contact form, communicate with us by email or telephone, attend meetings at our office, or engage our public relations services. It does not apply to third-party websites linked from our pages, which maintain their own privacy practices.

3. Personal data we collect

3.1 Information you provide directly

When you complete our contact form, we may collect your full name, email address, telephone number, company name, job title, and the content of your message. If you become a client, we may additionally collect billing details, authorised signatory information, and communications records related to your engagement.

For client work we may process executive biographies for press materials, with your approval.

3.2 Information collected automatically

Our website hosting infrastructure may log standard server data including IP address, browser type, referring URL, pages viewed, and timestamps. We do not deploy advertising trackers or third-party analytics pixels on this website. Essential cookies required for site functionality are described in our Cookie Policy.

3.3 Information from third parties

We may receive contact details from referral partners or event registrations where you have consented to sharing your information with us. We verify the lawful basis for such transfers before adding data to our records.

4. Purposes of collection and use

We collect and use personal data for the following purposes:

• Responding to enquiries and scheduling consultations
• Delivering public relations and communications services under contract
• Issuing proposals, invoices, and account correspondence
• Maintaining client relationship records and service history
• Complying with legal obligations, including record-keeping requirements
• Protecting our legitimate interests in operating a professional services business, such as fraud prevention and dispute resolution
• Improving our website security and performance through server logs

We do not sell personal data. We do not use enquiry details for unrelated marketing without consent.

5. Legal basis for processing

Under the PDPA, we rely on one or more of the following bases: your consent (for example, when submitting a contact form), contractual necessity (when delivering services you have requested), compliance with legal obligations, and legitimate interests that are not overridden by your rights (such as maintaining accurate business records).

6. Disclosure to third parties

We may share personal data with:

• Service providers who assist with email delivery, document storage, or hosting, bound by confidentiality obligations
• Professional advisers including lawyers and accountants when required
• Regulatory or law enforcement authorities when legally compelled
• Media contacts only with your explicit approval as part of agreed PR activities (for example, providing journalist briefing materials that include spokesperson details)

Processors act on our instructions and may not use your data for their own marketing. Transfers outside Singapore are covered by contractual safeguards comparable to the PDPA.

7. International transfers

Primary systems are in Singapore. If data is transferred abroad — for regional media outreach or cloud hosting — recipients must provide protection comparable to the PDPA.

8. Data retention

Enquiries: up to 24 months unless a client relationship starts. Client files: duration of work plus seven years. Server logs: about 90 days. Expired data is deleted or anonymised. Approved press copy may be kept as a record of what was authorised for publication.

9. Security measures

We use access controls, HTTPS, and restricted storage for form submissions. Staff with access to personal data are bound by confidentiality. No internet transmission is completely secure.

10. Your rights under the PDPA

Subject to exceptions under Singapore law, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing that relies on consent, where applicable
• Request information about how your data has been used or disclosed within the past year

To exercise these rights, email hello@echobriefpro.life with sufficient detail to identify your request. We respond within thirty days unless an extension is permitted by law. We may charge a reasonable fee for manifestly unfounded or excessive requests.

11. Consent and withdrawal

By submitting our contact form, you consent to our processing of the information provided for the purpose of responding to your enquiry. You may withdraw consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing conducted before withdrawal, and we may retain certain records where required by law or legitimate business needs.

Separate consent may be requested before including your organisation in public case studies or testimonial materials on our website.

12. Children

Our services are directed at business professionals. We do not knowingly collect personal data from individuals under eighteen years of age. If you believe we have inadvertently collected such data, please contact us for prompt deletion.

13. Data breach notification

In the event of a data breach likely to result in significant harm or affect a significant number of individuals, we will assess the incident promptly and notify the Personal Data Protection Commission and affected individuals as required under the PDPA and related guidelines.

14. Links to other websites

Links to media outlets or other sites are not covered by this policy. Review those sites’ privacy terms before sharing personal data.

15. Changes to this policy

We may update this Privacy Policy to reflect changes in law, technology, or our business practices. The "Last updated" date at the top of this page indicates the most recent revision. Material changes will be communicated through a notice on our website or direct communication to active clients where appropriate.

16. Marketing

Optional service updates, if sent, include an unsubscribe path. Opting out does not stop messages about an active enquiry or engagement.

17. Automated decisions

We do not use automated decision-making with legal or similarly significant effects. Staff read contact form submissions.

18. PDPC

If we cannot resolve a privacy concern, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.

19. Contact us

For questions, access requests, or complaints regarding this Privacy Policy, contact:

Echo Brief Pro — Privacy Enquiries

138 Market Street, #06-01, CapitaGreen, Singapore 048946

Email: hello@echobriefpro.life

Phone: +65 6234 7701

Unresolved complaints may also be raised with the Personal Data Protection Commission of Singapore.