Privacy Policy

Beacon Lift ("we", "us", or "our") operates the website beaconlift.life and provides marketing agency services to clients in Singapore and the wider region. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit our website, submit an enquiry, or engage our services.

We are committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore and other applicable data protection laws. By using our website or providing personal data to us, you acknowledge the practices described in this policy.

1. Data controller

The data controller responsible for your personal data is Beacon Lift, located at 224 Telok Ayer Street, #03-01, Singapore 068493. For privacy-related enquiries, contact us at [email protected] or +65 6229 3175 during business hours (Mon–Fri 09:00–18:00 SGT).

2. Personal data we collect

We may collect the following categories of personal data depending on how you interact with us:

2.1 Information you provide directly

• Contact details such as your name, email address, phone number, and company name when you complete our enquiry form or communicate with us by email or phone.
• Project-related information including marketing objectives, budget ranges, timelines, and other details you choose to share in messages or consultation meetings.
• Billing and contractual information when you become a client, including business address, invoicing contacts, and payment-related details processed through secure third-party providers.

2.2 Information collected automatically

• Technical data such as IP address, browser type, device type, operating system, and referring URL when you visit our website.
• Usage data including pages viewed, time spent on pages, and navigation paths, collected through server logs necessary for security and site operation.
• Cookie data as described in our Cookie Policy. Essential cookies support core site functionality; functional cookies load only with your consent.

2.3 Information from third parties

We may receive limited information from referral partners, event registrations, or publicly available business directories when you have indicated interest in marketing services. We verify the lawful basis for such data before adding it to our records.

3. How we use personal data

We process personal data for the following purposes, each supported by an appropriate legal basis under the PDPA:

• Responding to enquiries: To review your message, contact you about marketing services, and schedule consultations. Legal basis: legitimate interests and, where applicable, steps prior to entering a contract.
• Delivering services: To perform contractual obligations when you engage Beacon Lift, including campaign management, reporting, and account communication. Legal basis: contract performance.
• Website operation and security: To maintain site functionality, diagnose technical issues, prevent fraud, and protect against unauthorised access. Legal basis: legitimate interests.
• Legal compliance: To comply with applicable laws, respond to lawful requests from authorities, and enforce our Terms of Service. Legal basis: legal obligation.
• Business improvement: To analyse aggregated, anonymised usage patterns that help us improve website content and service offerings without identifying individuals. Legal basis: legitimate interests.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects. We do not sell personal data to third parties.

4. Marketing communications

If you have engaged our services or explicitly opted in, we may send you updates about Beacon Lift services, industry insights, or event invitations. Every marketing email includes an unsubscribe link. You may also opt out at any time by emailing [email protected].

We do not send unsolicited bulk marketing to individuals who have not consented or established a relevant business relationship with us. Enquiry responses and service-related communications are not marketing messages.

5. Disclosure of personal data

We share personal data only when necessary and with appropriate safeguards:

• Service providers: Trusted vendors who assist with hosting, email delivery, analytics (where consented), and payment processing. These providers process data on our instructions and under contractual confidentiality obligations.
• Professional advisers: Lawyers, accountants, or insurers when required for compliance, dispute resolution, or risk management.
• Business transfers: In connection with a merger, acquisition, or sale of assets, personal data may transfer to the successor entity subject to equivalent privacy protections.
• Legal requirements: When disclosure is required by law, court order, or to protect the rights, property, or safety of Beacon Lift, our clients, or others.

We do not disclose personal data to unrelated third parties for their independent marketing purposes.

6. International transfers

Our primary systems and team are based in Singapore. Where service providers process data outside Singapore, we ensure appropriate safeguards are in place — such as standard contractual clauses, adequacy decisions, or binding corporate rules — consistent with PDPA requirements for cross-border data transfers.

7. Data retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Enquiry records: up to twenty-four months after last contact, unless a business relationship continues.
• Client project data: duration of the engagement plus seven years for contractual, accounting, and legal purposes.
• Server logs: typically ninety days, unless extended for security investigations.
• Cookie preferences: stored locally in your browser until cleared or updated.

When data is no longer required, we securely delete or anonymise it in accordance with our retention schedule.

8. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Measures include access controls, encrypted connections (HTTPS), secure hosting environments, and staff training on data handling practices.

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for keeping any account credentials confidential.

9. Your rights

Under the PDPA and applicable law, you may have the following rights regarding your personal data:

• Access: Request a copy of personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Withdrawal of consent: Where processing is based on consent, withdraw consent at any time without affecting prior lawful processing.
• Limitation: Request restriction of processing in certain circumstances.
• Complaint: Lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe your rights have been infringed.

To exercise these rights, contact [email protected]. We respond within thirty days unless an extension is permitted by law. We may request verification of identity before processing requests.

10. Children's privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under eighteen years of age. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

11. Third-party links

Our website may contain links to external sites, including Google Maps when you consent to functional cookies. We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing personal data.

12. Changes to this policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top indicates when revisions were made. Material changes will be communicated through a notice on our website. Continued use of the site after changes constitutes acceptance of the updated policy.

13. Contact us

For questions, requests, or complaints regarding this Privacy Policy or our data practices, contact:

Beacon Lift
224 Telok Ayer Street, #03-01, Singapore 068493
Email: [email protected]
Phone: +65 6229 3175

14. Data protection officer

Although Beacon Lift is not currently required to appoint a Data Protection Officer under the PDPA, privacy enquiries are handled by our operations team with direct escalation to senior management. We treat every privacy request seriously and document our responses for accountability.

15. Breach notification

In the unlikely event of a personal data breach that poses a significant risk to affected individuals, we will assess the situation promptly, take steps to contain and remediate the breach, and notify the PDPC and affected individuals where required by law. Our incident response procedures include internal reporting channels, forensic review, and client notification when client data is involved.

16. Client data processed on behalf of others

When providing marketing services, we may process personal data on behalf of clients (for example, customer lists for email campaigns or CRM audiences for advertising). In such cases, we act as a data intermediary under client instructions. Processing terms, security obligations, and sub-processor arrangements are defined in our service agreements and data processing addenda.

17. Your responsibilities

When you provide personal data to us — whether about yourself or others on whose behalf you act — you confirm that you have the authority and lawful basis to share that information. Clients who supply customer data for campaign execution must ensure appropriate consent or legitimate interest documentation is in place under applicable law. We may request evidence of lawful basis before activating certain campaign types.

18. Language

This Privacy Policy is published in English. If translated versions are made available for convenience, the English version prevails in case of inconsistency. For enquiries in other languages, contact us and we will endeavour to assist where practicable. We aim to respond to all privacy-related correspondence promptly and professionally.