AudienceRipple Marketing Pte. Ltd. (“AudienceRipple”, “we”, “us” or “our”) is committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”) and applicable subsidiary legislation. This Privacy Policy applies to personal data we process as a data organisation in relation to our website at audienceripple.pro, our studio at Tanjong Pagar Distripark, and the performance marketing services we deliver to clients and prospective clients.
By using our website, submitting an enquiry, or entering into a contract with us, you acknowledge that you have read this policy. Where consent is required under the PDPA, we will obtain it separately and clearly — for example, through our contact form checkbox or cookie consent banner. If you do not agree with this policy, please do not use our website or provide personal data to us.
-
Who we are and how to contact us
AudienceRipple Marketing Pte. Ltd. is a private company limited by shares incorporated in Singapore (UEN 202806473K). Our registered address is 39 Keppel Road, #03-08 Tanjong Pagar Distripark, Singapore 089065. General enquiries: +65 6276 4318 or [email protected]. Privacy-specific enquiries and data subject requests: [email protected]. Further company details appear on our Legal / Imprint page.
-
What personal data we collect
Personal data means data, whether true or not, about an individual who can be identified from that data or from that data and other information to which we have or are likely to have access. Depending on how you interact with us, we may collect the following categories:
- Identity and contact data — name, job title, company name, business email address, telephone number, and postal address when you complete our contact form, email us, visit our studio by appointment, or sign a scope of work.
- Enquiry and communication data — the content of messages you send, enquiry type, meeting notes, call summaries, and correspondence records.
- Contract and billing data — billing contact details, purchase order references, invoicing records, and payment status (we do not store full payment card numbers on our servers; card processing is handled by third-party payment providers where applicable).
- Client campaign data — where you engage us, we may process analytics exports, CRM segments, ad account identifiers, conversion data, creative assets, and audience definitions you provide or authorise us to access. This may include personal data about your customers or leads where you instruct us to use it for lawful marketing purposes.
- Technical and usage data — IP address, browser type and version, device type, operating system, referring URL, pages viewed, time and date of visits, and approximate location derived from IP address when you browse our website.
- Cookie and consent data — records of cookie preferences and similar choices stored in your browser or local storage. See our Cookie Policy for detail.
We do not intentionally collect sensitive personal data such as NRIC numbers, financial account credentials, health records, or biometric data through our public website. If a client engagement requires processing of sensitive data, we address that separately in contract and with appropriate safeguards.
-
How we collect personal data
We collect personal data directly from you when you fill in forms, email or call us, meet with us, or sign agreements. We collect data automatically through cookies and similar technologies when you use our website, subject to your consent where required. We may receive data from third parties you authorise — for example, when you grant us access to your Google Analytics, Google Ads, Meta Business, LinkedIn Campaign Manager or CRM accounts as part of a client engagement. We do not purchase personal-data lists from brokers, data marketplaces or list vendors.
-
How we use personal data
We use personal data only for purposes that a reasonable person would consider appropriate in the circumstances, and in line with the PDPA. Our primary purposes include:
- responding to enquiries and scheduling discovery calls or studio visits;
- preparing proposals, scopes of work, and delivering audience research, message testing, paid media management, landing page work, conversion tracking, SEO, email / CRM support and reporting;
- administering contracts, invoicing, and account management;
- operating, maintaining, and improving audienceripple.pro, including troubleshooting, analytics (where consented), and security monitoring;
- complying with legal and regulatory obligations, including record-keeping and responding to lawful requests;
- protecting our rights, property, and safety, and that of our clients, staff and the public;
- sending service-related communications about an active engagement (not unsolicited mass marketing without consent).
Where we process personal data on behalf of a client in connection with a campaign — for example, audience segments in an ad platform — we act as a data intermediary to the extent permitted under the PDPA and in accordance with our contract with that client. The client remains responsible for ensuring it has a lawful basis to provide that data to us and to use it for marketing.
-
Legal bases and PDPA compliance
Under the PDPA, organisations must not collect, use or disclose personal data unless the individual has given consent, or an exception applies. We rely on consent where you tick our contact form PDPA checkbox, accept non-essential cookies, or explicitly agree in writing. We may also process personal data without consent where permitted — for example, to respond to your enquiry before a contract exists (reasonable use related to your request), to perform a contract with you, to comply with law, or for legitimate interests that are not overridden by your interests (such as website security and fraud prevention). We will notify you of the purpose of collection at or before the point of collection where practicable.
-
Cookies and similar technologies
Our website uses cookies, local storage and similar technologies to remember cookie consent, maintain security, and — with your consent — measure traffic and remember preferences. Strictly necessary technologies operate without consent because the site cannot function otherwise. Analytics, preference and marketing technologies are disabled until you accept them via our cookie banner or save custom preferences. Full details of each named cookie, vendor, purpose and duration are set out in our Cookie Policy. You may withdraw consent at any time by clearing site data, adjusting browser settings, or using the cookie banner when it reappears after your stored choice expires (six months).
-
Disclosure of personal data
We do not sell, rent or trade personal data. We may disclose personal data to:
- service providers who assist us under contract — hosting, email delivery, analytics (where consented), accounting, and IT support — subject to confidentiality and data protection terms;
- advertising and analytics platforms where you or we configure campaigns and you have authorised access;
- professional advisers such as lawyers or auditors where necessary;
- public authorities when required by applicable law, court order, or to protect legal rights.
Where data is transferred outside Singapore, we take steps reasonably required under the PDPA to ensure the recipient provides a standard of protection comparable to that under the PDPA, such as contractual clauses or using providers with appropriate certifications.
-
Storage and international transfers
Personal data is stored on servers operated by our hosting provider and, where applicable, on cloud services we use for email, document management, and client reporting. Data may be processed in Singapore and in other countries where our subprocessors operate. We maintain an inventory of key systems and review cross-border transfers periodically. Client campaign data in third-party ad platforms is stored according to each platform’s terms and data residency options you select in those accounts.
-
Security measures
We implement administrative, technical and physical safeguards appropriate to the nature of the personal data we hold. These include access controls limited to staff who need data for their role, encrypted connections (HTTPS) on our website, secure handling of credentials for client ad accounts, regular software updates, and staff awareness of confidentiality obligations. No method of transmission or storage is completely secure; we cannot guarantee absolute security, but we review incidents promptly and will notify affected individuals and the Personal Data Protection Commission where required by law.
-
Retention of personal data
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Indicative retention periods:
- Website enquiries — up to twenty-four months from last contact unless an engagement follows;
- Client contract records — duration of engagement plus seven years for accounting and legal purposes;
- Cookie consent records — six months, after which the banner is shown again;
- Server logs — typically up to ninety days unless needed for security investigation.
When data is no longer needed, we delete or anonymise it in a manner that prevents re-identification where feasible.
-
Your rights under the PDPA
Subject to exceptions in the PDPA, you have the right to:
- ask whether we hold personal data about you and obtain access to it;
- request correction of inaccurate or incomplete personal data;
- withdraw consent for processing that relies on consent (without affecting the lawfulness of processing before withdrawal);
- request information about how your personal data has been used or disclosed within the past year.
To exercise these rights, email [email protected] with sufficient detail for us to verify your identity and locate your records. We respond within thirty days in most cases, or inform you if an extension is needed. If you are dissatisfied with our response, you may contact the Personal Data Protection Commission (PDPC) in Singapore.
-
Data Protection Officer
We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the PDPA and handling privacy enquiries. Contact the DPO at [email protected] or write to the DPO, AudienceRipple Marketing Pte. Ltd., 39 Keppel Road, #03-08 Tanjong Pagar Distripark, Singapore 089065. The DPO role is fulfilled by a senior member of our leadership team; we do not publish personal names on this website for security reasons. Role-based contact details are listed on our Legal / Imprint page.
-
We do not broker or sell audience data
AudienceRipple is a performance marketing agency, not a data broker. We do not buy, sell, scrape, rent, or license personal-data lists. We do not trade in “audiences” as a commodity separate from contracted client work. When we define audiences for campaigns, we do so from a client’s own data, platform tools, and lawful research — always within platform policies and applicable law. The word “Audience” in our name refers to the people a client seeks to reach, not a dataset we monetise.
-
Children
Our website and services are directed at businesses and adults. We do not knowingly collect personal data from individuals under eighteen years of age. If you believe a child has provided personal data to us, please contact [email protected] and we will take steps to delete it promptly.
-
Third-party websites and links
Our website may contain links to third-party sites — for example, advertising platforms, analytics documentation, or partner resources. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal data. Embedded content or social widgets, if added in future, will be disclosed in our Cookie Policy and managed according to consent where required.
-
Changes to this policy
We may update this Privacy Policy to reflect changes in law, our services, or our data practices. The “Last updated” date at the top of this page will change when we publish a revision. Material changes may be highlighted on our website or communicated to active clients where appropriate. Continued use of the website after an update constitutes acknowledgement of the revised policy, subject to any additional consent required by law.
-
Related documents
This policy should be read together with our Terms of Use, Cookie Policy, and Legal / Imprint. Client engagements are also governed by signed scopes of work or retainers that may contain additional data processing terms.