Privacy Policy

1. Introduction

BONGO HOLDINGS PTE. LTD. ("BONGO HOLDINGS", "we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who interact with our website, services, and platforms. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights under Singapore's Personal Data Protection Act 2012 (PDPA).

By accessing or using our website at bongoholdings.com or engaging with any of our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

This Policy applies to BONGO HOLDINGS PTE. LTD., a company registered in Singapore, with its registered address at 111 North Bridge Road #08-11, Peninsula Plaza, Singapore 179098.

2. Personal Data We Collect

We may collect the following categories of personal data from you:

• Identity Data: Full name, job title, company name.
• Contact Data: Email address, telephone number, mailing address.
• Communication Data: Messages, enquiries, or feedback submitted through our contact forms, email, or social media.
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and other technology on the devices you use to access our website.
• Usage Data: Information about how you use our website, products, and services (e.g., pages visited, links clicked, referring URLs).
• Marketing & Communications Data: Your preferences in receiving marketing materials from us and your communication preferences.

We do not knowingly collect sensitive personal data (such as NRIC numbers, financial account numbers, or health information) unless explicitly required for a specific service and with your prior consent.

3. How We Collect Personal Data

We collect personal data through the following means:

• Direct interactions: When you fill in forms on our website, contact us via email or phone, or request a consultation or quotation.
• Automated technologies: Through cookies, web beacons, and similar technologies placed on your device when you visit our website. Please refer to our Cookie Policy section below.
• Third parties: From analytics providers (e.g., Google Analytics), advertising networks, and social media platforms when you interact with our content or advertisements on those platforms.

4. How We Use Your Personal Data

We use your personal data for the following purposes:

• To respond to your enquiries, service requests, or consultation bookings.
• To provide, manage, and deliver our digital marketing, web design, video production, and content services to you.
• To send you information about our services, promotions, events, or industry insights that we believe may be of interest to you (where you have opted in or where permitted by law).
• To improve and personalise your experience on our website.
• To comply with applicable laws and regulations in Singapore.
• To administer and manage our contractual relationship with you.
• To detect, prevent, and investigate fraudulent activities or security incidents.

5. Disclosure of Personal Data

We do not sell, rent, or trade your personal data to third parties. We may share your personal data with:

• Service providers and sub-contractors: Third parties who perform services on our behalf (e.g., IT support, data analytics, payment processing, or postal services), who are contractually bound to handle your data securely and only as instructed by us.
• Professional advisors: Including lawyers, bankers, auditors, and insurers who provide professional services to us.
• Regulatory authorities: Government bodies, law enforcement agencies, or courts if required by applicable law, regulation, or legal process.
• Business transfers: In connection with any merger, acquisition, or sale of company assets, where personal data may be transferred as part of the transaction.

All third parties to whom we disclose personal data are required to respect the security of your personal data and treat it in accordance with the law.

6. International Data Transfers

Your personal data is primarily stored and processed in Singapore. Where we transfer personal data to a recipient outside Singapore, we ensure that such transfers comply with the PDPA’s transfer limitation obligations and that the recipient provides a standard of protection comparable to that under the PDPA.

7. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Once your personal data is no longer required, we will securely delete or anonymise it.

Typical retention periods are as follows:

• Client and project records: up to 7 years from the end of the engagement (for legal and tax compliance purposes).
• Marketing contact preferences: until you opt out or withdraw consent.
• Website analytics data: up to 26 months from collection.

8. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse website traffic, and support our marketing efforts. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the website to function properly (e.g., session management).
• Analytics & Performance Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). Data collected is aggregated and anonymous.
• Marketing & Targeting Cookies: Used to deliver relevant advertisements and track campaign effectiveness (e.g., Google Ads, Facebook Pixel).

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

9. Your Rights Under the PDPA

Under Singapore’s PDPA, you have the right to:

• Access: Request access to the personal data we hold about you and information about how it has been used or disclosed in the past year.
• Correction: Request that we correct any inaccurate or incomplete personal data we hold about you.
• Withdrawal of Consent: Withdraw your consent for the collection, use, or disclosure of your personal data at any time, subject to legal or contractual restrictions.
• Data Portability: Request a copy of your personal data in a commonly used machine-readable format (where applicable under the PDPA).

To exercise any of these rights, please submit a written request to our Data Protection Officer (DPO) using the contact details provided below. We will respond to verified requests within 30 calendar days.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmitted via our website.
• Access controls and authentication requirements for staff accessing personal data.
• Regular security assessments and software updates.
• Staff training on data protection obligations.

In the event of a data breach that is notifiable under the PDPA (i.e., one that results in or is likely to result in significant harm to affected individuals), we will notify the Personal Data Protection Commission (PDPC) and affected individuals as required by law.

11. Third-Party Websites

Our website may contain links to third-party websites, including our media platforms such as Beauty Insider SG, Beauty Insider MY, Glitz SG, and Glitz MY. These websites have their own privacy policies. We are not responsible for the privacy practices or content of third-party websites and encourage you to read their privacy policies before providing any personal data.

12. Children’s Privacy

Our services are not directed to persons under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data without parental consent, please contact us immediately and we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will post the updated Policy on this page with a revised effective date. We encourage you to review this Policy periodically. Where required by law, we will notify you of material changes.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer (DPO):