PRIVACY POLICY (Last updated: 29 May 2026)

Zainal & Zainal LLP ("we", "us", "our") is a Singapore-based creative studio operating at 14 Robinson Road #08-01A, Far East Finance Building, Singapore 048545. We are committed to protecting the personal data you share with us, in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and its subsequent amendments.

This policy explains what personal data we collect, why we collect it, how we use and protect it, and what your rights are.

WHAT PERSONAL DATA WE COLLECT

We may collect the following:

  • Contact information: name, email address, telephone number, company name

  • Likeness: photographs and video footage taken during commissioned shoots, events, or pre-production visits

  • Website usage data: browser type, pages visited, time on site (collected via cookies)

  • Communications: enquiries, feedback, or correspondence you send us

HOW WE COLLECT YOUR DATA

We collect personal data when you:

  • Contact us via our website, email, WhatsApp, or phone

  • Commission us for photography, personal branding, or content services

  • Are photographed or filmed as part of a client assignment

  • Subscribe to receive updates from us

  • Browse our website (via cookies — see the Cookies section below)

We may also receive personal data indirectly through client briefings or pre-production coordination before an assignment.

WHY WE USE YOUR DATA

We use your personal data for the following purposes:

  • To deliver the services you have engaged us for, including photography, personal branding, and content production

  • To add relevant information to visual content (e.g. captions, credits, metadata)

  • To process invoices and manage our client relationships

  • To send you updates about our services, where you have given consent or where permitted under the PDPA

  • To respond to your enquiries and requests

We will not use your personal data for purposes other than those stated here without first obtaining your consent, except where required or permitted by law.

MARKETING AND THE DO NOT CALL REGISTRY

If you have opted in to receive marketing communications from us, we will keep you updated on our services and projects. You may withdraw this consent at any time by emailing hello@zainalandzainal.com with the subject line "Unsubscribe."

Where applicable, we comply with Singapore's Do Not Call (DNC) Registry. We will not send unsolicited marketing messages to Singapore telephone numbers registered with the DNC Registry.

HOW WE STORE AND PROTECT YOUR DATA

Your personal data is stored securely at our studio premises and on password-protected cloud services we use in the course of our work (including but not limited to Google Workspace and Squarespace). We apply reasonable security measures to protect personal data from unauthorised access, disclosure, or loss.

We retain your photographs, video footage, and related data for three years from the date of the assignment, unless a longer retention period is agreed in writing. After this period, data is either securely deleted or transferred to offline archival storage accessible only to our Data Protection Officer.

DATA BREACH NOTIFICATION

In the event of a data breach that is assessed to be notifiable under the PDPA, we will notify the Personal Data Protection Commission (PDPC) within three calendar days of completing our assessment, and inform affected individuals as required by law.

YOUR DATA PROTECTION RIGHTS

Under the PDPA, you have the right to:

Access — Request a copy of the personal data we hold about you, and information on how it has been used or disclosed in the past year. We may charge a reasonable administrative fee for this service.

Correction — Request that we correct any personal data that is inaccurate or incomplete. We will update the data as soon as practicable and notify any third parties who received the incorrect data in the past year, where relevant.

Withdrawal of consent — Withdraw consent for us to use your personal data for any specified purpose, with reasonable notice. Please note that this may affect our ability to continue delivering services to you.

Data portability — Where applicable, request that we transmit your personal data to another organisation in a structured, machine-readable format.

To exercise any of these rights, contact our Data Protection Officer:

Email:hello@zainalandzainal.comPhone: +65 96980518 Post: Zainal & Zainal LLP, 14 Robinson Road #08-01A, Far East Finance Building, Singapore 048545

We will respond to your request as soon as reasonably possible.

THIRD-PARTY WEBSITES

Our website may contain links to external sites. This privacy policy applies only to zainalandzainal.com. We encourage you to read the privacy policies of any third-party websites you visit.

DATA PROTECTION OFFICER

Our designated Data Protection Officer is responsible for overseeing compliance with this policy and the PDPA. You may contact the DPO directly using the contact details above.

CHANGES TO THIS POLICY

We review this policy periodically and update it when required. The current version is always published on this page with the date of last revision.

REPORTING A CONCERN TO THE PDPC

If you are not satisfied with how we have handled your personal data, you may escalate your concern to the Personal Data Protection Commission (PDPC):

Website: www.pdpc.gov.sg Complaints: https://www.pdpc.gov.sg/Individuals/Complaints-and-Reviews Address: 10 Pasir Panjang Road, #03-01 Mapletree Business City, Singapore 117438 Phone: +65 6377 3131