Calm Desk Co (“Calm Desk Co”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit https://www.calmdeskco.com/ (the “Website”), contact us, engage our services, or otherwise interact with us. This Privacy Policy is intended to comply with the Singapore Personal Data Protection Act 2012 (“PDPA”).

What Do We Do With Your Information?

When you submit an enquiry, request a quotation, book a consultation, subscribe to updates, or engage Calm Desk Co for digital marketing services, we may collect personal data that you provide such as your name, business name, job title, email address, phone number, and the contents of your message. If you become a client, we may also collect information necessary to deliver our services, such as your marketing requirements, campaign objectives, brand assets you share with us, your social media handles, website URL(s), and any other details you choose to provide so we can plan, execute, and manage the agreed work.

When you browse our Website, we may automatically receive technical information such as your device and browser type, your computer’s internet protocol (IP) address, the pages you visit, the time spent on pages, you're referring webpages, and interactions you take on the Website. We use this information to operate the Website, maintain security, understand usage trends, and improve performance and user experience.

Email marketing (if applicable): If you choose to receive updates from us, or where permitted under applicable law, we may send you emails or messages about our services, insights, announcements, and other updates. You can opt out at any time by using the unsubscribe option (if provided) or by contacting us directly.

Consent

Under the PDPA, we generally collect, use, or disclose personal data with your knowledge and consent, and for purposes that a reasonable person would consider appropriate in the circumstances. In some cases, the PDPA allows organizations to collect, use, or disclose personal data without consent (for example, where required or authorized by law). Where applicable, we will rely on those lawful bases and apply appropriate safeguards.

How Do You Get My Consent?

When you provide personal data to us for a primary purpose such as requesting a quote, asking a question, scheduling a meeting, or engaging us for services, you consent to our collection, use, and disclosure of that data for that purpose. Where we need your personal data for a secondary purpose (such as marketing communications), we will seek your consent where required, or provide you with a clear opportunity to opt out.

If you provide us access to your business systems or platforms (for example, advertising accounts, analytics tools, or social media pages) as part of a project, you confirm that you are authorized to grant that access and that any personal data we may process through those systems is provided in accordance with applicable laws and permissions

How Do I Withdraw My Consent?

If you change your mind after providing consent, you may withdraw your consent for us to contact you or for the continued collection, use, or disclosure of your personal data, at any time, by contacting us at hello@calmdeskco.com. Withdrawal of consent will not affect our right to continue collecting, using, or disclosing personal data where required or authorized by law. Please note that withdrawing consent may affect our ability to provide certain services to you, especially where the personal data is necessary for project delivery, support, security, or billing.

Disclosure

We do not sell personal data. We may disclose personal data only where necessary to provide our services, operate our business, comply with legal obligations, or protect our rights. This can include disclosures to professional advisers (such as accountants or legal advisers), and disclosures required by law, regulation, court order, or lawful requests from authorities.

If you violate our Terms & Conditions or misuse our Website, we may disclose information where reasonably necessary to investigate, prevent harm, or enforce our rights, subject to applicable law.

Data Intermediary (When We Process Data for Clients)

In some engagements, Calm Desk Co acts as a “data intermediary” under the PDPA, meaning we process personal data on behalf of our clients as part of providing services such as campaign management, lead handling, reporting, website tracking setup, or content/community management. In these cases, the client is typically responsible for obtaining the necessary consents and providing appropriate notifications to individuals, while we process personal data in accordance with the client’s documented instructions and contractual obligations, and we implement reasonable security arrangements to protect that personal data.

If you are an individual whose personal data is being handled in a campaign or system controlled by one of our clients, and you would like to make an access or correction request, your request may need to be directed to the relevant client. Where appropriate, we may assist by directing you to the correct contact point or by supporting the client in handling the request in line with our contractual obligations.

Third-Party Services

In general, third-party providers engaged by Calm Desk Co will only collect, use, and disclose your personal data to the extent necessary to allow them to perform the services they provide to us. This may include website hosting, domain providers, email and communication tools, cloud storage, project management tools, analytics providers, and advertising platforms.

Certain third-party service providers (such as analytics and advertising platforms) have their own privacy policies respecting the information we are required to provide to them or that they collect via their technologies. We encourage you to read their privacy policies so you can understand how your personal data will be handled by those providers.

Some third-party providers may be located outside Singapore or may store data on servers outside Singapore. If you proceed to interact with us in ways that involve such third-party services, your personal data may be transferred to, stored in, or accessed from jurisdictions outside Singapore. In such cases, we take reasonable steps to ensure that the transferred personal data is afforded a standard of protection comparable to that under the PDPA, such as through contractual safeguards and vendor selection practices.

Once you leave our Website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy.

Links

Our Website may contain links to websites or services owned or operated by other parties (for example, social platforms). We are not responsible for the privacy practices of those third-party websites. You should review the privacy policies of those websites before providing any personal data.

Security

To protect your personal data, we take reasonable precautions and follow generally accepted industry practices to ensure it is not improperly lost, misused, accessed, disclosed, altered, or destroyed. We may use security measures such as access controls, role-based permissions, password protection, and encryption in transit (where supported), and we limit access to personal data to personnel and service providers who need it for legitimate business purposes.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

Cookies

A cookie is a small piece of text that is stored on your device and can be retrieved by websites to support functionality, remember preferences, and understand how visitors use a site. We may use cookies and similar technologies to enhance your experience, analyse Website traffic, and measure marketing effectiveness. Depending on the tools in use, cookies may collect information such as your IP address, device identifiers, browser type, pages visited, actions taken, and approximate location derived from IP address.

You can control and manage cookies through your browser settings, including blocking or deleting cookies. If you disable cookies, parts of the Website may not function properly or may not provide the full experience.

Access and Correction (PDPA)

You may request access to your personal data that we hold and information about how it has been used or disclosed within a reasonable period, and you may request correction of inaccurate or incomplete personal data. We may need to verify your identity before fulfilling a request. In certain situations, we may be permitted or required by law to refuse a request, and if so, we will explain the reason where required. To submit a request, please email hello@calmdeskco.com with sufficient details for us to process it.

Retention

We retain personal data only for as long as it is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable laws and legitimate business needs such as accounting, audit, dispute resolution, and enforcement of agreements. When personal data is no longer needed, we will take reasonable steps to delete it, anonymize it, or otherwise prevent it from being associated with an identifiable individual, where practicable.

Age of Consent

By using this Website, you represent that you are at least the age of majority in your country of residence. If you are providing personal data of another individual (for example, a colleague or your client), you represent that you have the authority to do so and have obtained the necessary consent for Calm Desk Co to collect, use, and disclose that personal data for the purposes described in this Privacy Policy.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes and clarifications will take effect immediately upon posting on the Website, unless otherwise stated. If we make material changes, we will update the effective date at the top of this page so that you are aware of what information we collect, how we use it, and under what circumstances we may disclose it.

Questions and Contact Information

If you would like to access, correct, withdraw consent, or ask questions about our privacy practices, please contact us at hello@calmdeskco.com, or reach us via our Website at https://www.calmdeskco.com/.