Privacy Policy
How ContentRush Pte. Ltd. collects, uses, discloses and protects personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).
1. Introduction
ContentRush Pte. Ltd. (UEN 202971628M), a premium digital marketing agency registered in Singapore with its registered office at 100 Peck Seah Street, #10-18, Singapore 079333, is committed to protecting the personal data of our clients, prospective clients, website visitors, partners and other individuals whose data we process in the course of providing content marketing, editorial strategy, SEO, paid media, social amplification, branding, conversion optimisation, analytics and related digital marketing services.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and disclose it, how long we retain it, the security measures we apply, and the rights you have under the Personal Data Protection Act 2012 (PDPA) of Singapore. By using our website at contentrush.pro, submitting an enquiry, engaging our agency services or otherwise interacting with ContentRush, you acknowledge that you have read and understood this Privacy Policy.
ContentRush is a digital marketing agency — not an AI platform, SaaS vendor, IT outsourcing firm or standalone web studio. Our data processing activities relate to professional marketing services, client relationship management and legitimate business operations conducted from our Tanjong Pagar studio.
2. Data controller and contact
For the purposes of the PDPA, ContentRush Pte. Ltd. is the organisation responsible for the personal data described in this policy. Our Data Protection Officer (or privacy contact) can be reached at:
ContentRush Pte. Ltd.
100 Peck Seah Street, #10-18, Singapore 079333
Email: [email protected]
Phone: +65 6612 9348
Business hours: Monday to Friday, 09:00–18:00 SGT
We aim to respond to privacy enquiries and data access requests within thirty (30) calendar days, in line with PDPA requirements.
3. Scope and applicability
This Privacy Policy applies to personal data collected through:
- Our website contentrush.pro and associated subdomains;
- Contact forms, content brief submissions and enquiry channels;
- Email, telephone and in-person communications with our agency team;
- Client onboarding, service agreements, campaign delivery and account management;
- Marketing events, workshops, webinars and studio visits;
- Social media interactions where we direct individuals to our privacy practices;
- Recruitment and vendor onboarding processes, where applicable.
This policy does not apply to third-party websites, advertising platforms or social networks that may be linked from our site. Those services maintain their own privacy policies, and we encourage you to review them independently.
4. Personal data we collect
The types of personal data we may collect depend on your relationship with ContentRush and the services you request. Categories include:
4.1 Identity and contact data
Name, job title, company name, business email address, telephone number, postal address, billing address and other contact details you provide when enquiring about our programmes, requesting a proposal or engaging our agency services.
4.2 Professional and business data
Industry sector, company size, marketing objectives, budget range, brand guidelines, campaign briefs, content assets, competitor information and other business information necessary to scope, plan and deliver digital marketing engagements.
4.3 Technical and usage data
Internet protocol (IP) address, browser type and version, device identifiers, operating system, referring URLs, pages viewed, time spent on pages, click paths and similar analytics data collected through cookies and similar technologies when you visit our website. See our Cookie Policy for details.
4.4 Communication and correspondence data
Records of emails, meeting notes, call summaries, support tickets, feedback and other correspondence between you and ContentRush personnel.
4.5 Financial and transaction data
Invoice details, payment references, bank transfer confirmations and billing records. We do not store full credit card numbers on our systems; card payments are processed by authorised payment service providers.
4.6 Marketing preferences
Your preferences for receiving newsletters, programme updates, event invitations and other marketing communications, including opt-in and opt-out records maintained to comply with the PDPA and the Spam Control Act where applicable.
5. How we collect personal data
We collect personal data through the following means:
- Directly from you — when you complete contact forms, submit a content brief, sign a service agreement, attend a studio session, respond to surveys or communicate with our team;
- Automatically — through cookies, server logs and analytics tools when you browse our website;
- From third parties — such as referral partners, event organisers, publicly available business directories, LinkedIn or other professional networks, and advertising platforms where you have consented to data sharing;
- From your organisation — where a colleague or authorised representative provides your contact details as part of a corporate engagement.
Where personal data is provided by a third party, we expect that party to have obtained appropriate consent or have another lawful basis for disclosure. If you believe your data has been shared with us without your knowledge, please contact [email protected].
6. Purposes of collection, use and disclosure
Under the PDPA, organisations may collect, use and disclose personal data only for purposes that a reasonable person would consider appropriate in the circumstances, and not beyond what is necessary. ContentRush collects and processes personal data for the following purposes:
- Responding to enquiries, scheduling discovery calls and preparing tailored marketing proposals;
- Delivering contracted digital marketing services including content production, SEO, paid media management, social amplification, analytics reporting and strategic advisory;
- Managing client accounts, project workflows, editorial calendars and campaign operations;
- Processing invoices, collecting payments and maintaining financial records;
- Sending service-related notifications, contract updates and operational communications;
- Providing customer support, addressing complaints and resolving disputes;
- Improving our website, programmes and agency service quality through analytics and feedback;
- Conducting market research, case study development (with appropriate anonymisation or consent) and business development;
- Sending marketing communications about programmes, insights and events, where permitted by law and your preferences;
- Complying with legal obligations, regulatory requests, court orders and law enforcement requirements;
- Protecting the rights, property and safety of ContentRush, our clients, personnel and the public;
- Managing recruitment, vendor relationships and internal administration.
If we intend to use your personal data for a purpose not reasonably related to the original purpose of collection, we will notify you and obtain your consent before doing so, unless an exception under the PDPA applies.
7. Consent and other legal bases
ContentRush relies primarily on consent and contractual necessity as the bases for processing personal data. When you submit an enquiry form, tick a consent checkbox, sign a service agreement or opt in to marketing communications, you provide consent for the stated purposes.
You may withdraw consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and we may continue to process data where another legal basis applies — for example, to fulfil contractual obligations, comply with law or establish, exercise or defend legal claims.
For marketing messages sent to Singapore telephone numbers, we comply with the Do Not Call (DNC) Registry provisions under the PDPA. We will not send marketing messages to numbers on the DNC Registry unless we have obtained clear and unambiguous consent in writing or through our documented opt-in processes.
8. Disclosure to third parties
We do not sell personal data. We may disclose personal data to the following categories of recipients where necessary for the purposes described above:
- Service providers and processors — hosting providers, email delivery services, customer relationship management platforms, analytics vendors, payment processors, cloud storage providers and project management tools, bound by contractual data protection obligations;
- Advertising and analytics platforms — such as Google and Meta, where you have consented to marketing or analytics cookies and we manage campaigns on your behalf or analyse site performance;
- Professional advisers — lawyers, accountants and auditors bound by confidentiality duties;
- Corporate affiliates — if ContentRush forms part of a corporate group in future, subject to equivalent privacy safeguards;
- Regulators and authorities — ACRA, the Personal Data Protection Commission (PDPC), courts and law enforcement where required by Singapore law;
- Business transferees — in connection with a merger, acquisition or sale of assets, with notice to affected individuals where practicable.
When we engage third-party processors, we require them to protect personal data in a manner consistent with the PDPA and this Privacy Policy. A list of key sub-processors is available on request.
9. Cross-border transfers
ContentRush is based in Singapore and hosts primary website infrastructure on Singapore and Asia-Pacific servers. However, some service providers and advertising platforms may process data in the United States, European Union or other jurisdictions.
Where personal data is transferred outside Singapore, we take steps to ensure that the recipient provides a standard of protection comparable to that under the PDPA. This may include contractual clauses, adequacy assessments or your explicit consent where required. You may request further information about cross-border safeguards by emailing [email protected].
10. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting and reporting requirements. Retention periods vary by data category:
- Active client records — for the duration of the engagement plus seven (7) years for contractual and tax compliance;
- Prospective client enquiries — up to twenty-four (24) months unless converted to an active relationship or you request earlier deletion;
- Marketing opt-in records — until you withdraw consent plus a reasonable period to honour the withdrawal;
- Website analytics data — typically fourteen (14) to twenty-six (26) months, depending on the analytics platform configuration;
- Cookie preference records — six (6) months, as described in our Cookie Policy;
- Financial records — seven (7) years in accordance with Singapore accounting requirements.
When data is no longer required, we securely delete or anonymise it so that it can no longer be associated with an identifiable individual.
11. Security measures
ContentRush implements reasonable administrative, technical and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. Measures include:
- Access controls limiting personal data to authorised personnel on a need-to-know basis;
- Encrypted connections (HTTPS/TLS) for data transmitted via our website;
- Secure password policies and multi-factor authentication for internal systems where supported;
- Regular review of vendor security practices and contractual data protection terms;
- Physical security at our Peck Seah Street studio, including controlled access to workstations and confidential materials;
- Staff training on PDPA obligations, confidentiality and incident reporting procedures.
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify affected individuals and the PDPC of notifiable data breaches in accordance with the PDPA.
12. Your rights under the PDPA
Under Singapore's Personal Data Protection Act 2012, you have the following rights in relation to your personal data held by ContentRush:
- Right of access — to request information about the personal data we hold about you and how we have used or disclosed it in the past year;
- Right to correction — to request correction of inaccurate or incomplete personal data;
- Right to withdraw consent — to withdraw consent for collection, use or disclosure, subject to legal and contractual restrictions;
- Right to data portability — where applicable under future PDPA amendments or advisory guidelines, to receive your data in a commonly used machine-readable format;
- Right to complain — to lodge a complaint with the Personal Data Protection Commission if you believe we have not handled your data in accordance with the PDPA.
To exercise any of these rights, submit a written request to [email protected] with sufficient detail to verify your identity. We may charge a reasonable fee for access requests as permitted under the PDPA. We will respond within thirty (30) days unless an extension is required and communicated to you.
13. Cookies and similar technologies
Our website uses cookies and similar tracking technologies to enable essential functionality, remember your preferences and analyse site traffic. Non-essential cookies are placed only with your consent via our cookie banner. For a full description of cookie categories, durations, vendors and opt-out options, please read our Cookie Policy.
14. Marketing communications
With your consent, we may send you emails or messages about ContentRush programmes, editorial insights, event invitations and agency updates relevant to digital marketing professionals in Singapore and the Asia-Pacific region. Every marketing message includes an unsubscribe link or instructions to opt out.
You may also opt out at any time by emailing [email protected] with the subject line "Unsubscribe". We will process opt-out requests promptly and maintain a suppression list to prevent further marketing communications to that contact channel.
Transactional and service-related communications — such as contract confirmations, invoice notices and campaign operational updates — are not marketing messages and may continue even if you opt out of promotional communications.
15. Children's personal data
ContentRush provides professional digital marketing services to businesses and is not directed at individuals under eighteen (18) years of age. We do not knowingly collect personal data from children. If you believe a minor has provided personal data to us, please contact [email protected] and we will take steps to delete such data promptly.
16. Data breach notification
In the event of a data breach that is likely to result in significant harm to affected individuals or is of significant scale, ContentRush will notify the Personal Data Protection Commission and affected individuals as soon as practicable, in accordance with the PDPA's data breach notification obligations. Our internal incident response procedure includes containment, assessment, remediation and documentation of all suspected or confirmed breaches.
17. Third-party links and embedded content
Our website may contain links to third-party sites, embedded social media widgets, advertising platform dashboards and analytics tools. ContentRush is not responsible for the privacy practices of those third parties. We recommend reviewing the privacy policies of any external service before providing personal data.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology or legal requirements. The "Last updated" date at the top of this page indicates when the policy was most recently revised. Material changes will be communicated via a notice on our website or, where appropriate, by direct email to active clients. Continued use of our website or services after an update constitutes acknowledgement of the revised policy, subject to your rights under the PDPA.
19. Governing law
This Privacy Policy is governed by the laws of the Republic of Singapore. Any disputes relating to personal data handling shall be subject to the exclusive jurisdiction of the Singapore courts, without prejudice to your right to lodge a complaint with the Personal Data Protection Commission.
20. Contact us
If you have questions, concerns or requests regarding this Privacy Policy or our data protection practices, please contact:
Data Protection Contact
ContentRush Pte. Ltd.
100 Peck Seah Street, #10-18, Singapore 079333
Email: [email protected]
Phone: +65 6612 9348
Related policies: Cookie Policy · Terms of Service · Legal imprint