Privacy notice

1. Controller

Ink Bloom Haven Pte. Ltd. ("we", "us") operates inkbloomhaven.life and processes personal data described here. Registered address: Blk 78 Moh Guan Terrace, #03-12, Singapore 162078.

Privacy enquiries: [email protected]. General desk: [email protected]. Telephone +65 6281 5934. Hours Mon–Thu 09:00–18:00, Fri 09:00–17:00 SGT.

2. Scope

This notice covers the website, email correspondence about studio services, Site Visit scheduling, and cookie consent storage. Client project folders may contain additional terms in scope letters.

We do not operate a public newsletter, user accounts or e-commerce on this site. Contact forms are not used — you initiate email or telephone contact voluntarily.

3. Data we collect

Identity and contact data you send voluntarily: name, job title, organisation, email, telephone, meeting preferences, and brief content you choose to share before an engagement.

Technical data: server logs with IP address, browser type, pages viewed, timestamps and referrer — retained briefly for security and capacity planning.

Cookie consent records: essential and optional functional flags stored in ibh_consent cookie and localStorage key cookie_consent_v1 as JSON with version field v=1.

Embedded Google Maps may process location and device data under Google's policies — we do not control that processing and do not receive map interaction analytics.

4. Purposes and bases

Respond to enquiries and schedule Site Visits — legitimate interest in operating a studio and pre-contract steps at your request.

Perform signed engagements — contract performance and steps prior to contract at your instruction.

Secure the website, prevent abuse and remember cookie choices — legitimate interest and consent where required by law.

Comply with legal obligations — such as responding to lawful requests from authorities.

We do not sell personal data. We do not use analytics cookies on this site. We do not profile visitors for advertising.

5. Retention

Enquiry emails without engagement: up to twenty-four months unless you ask deletion earlier and we have no legal reason to retain.

Project materials under contract: per scope letter, typically engagement duration plus seven years for business records unless you request earlier deletion where lawful.

Server logs: rolling thirty days unless needed for incident investigation.

Cookie consent JSON: six months (Max-Age 15552000 seconds) unless you clear browser storage.

Backups may retain deleted data until backup rotation completes — typically thirty days.

6. Recipients

Hosting provider in Singapore, email transport providers, and Google when you load Maps embeds. Processors act under instructions or their public terms.

Professional advisers under confidentiality when necessary — legal or accounting.

We may disclose data if required by Singapore law, court order or to protect rights, safety and integrity of persons and systems.

7. International transfers

Primary storage is in Singapore. Email and map providers may process data regionally or abroad under their safeguards.

For client work we assess necessity before sharing materials outside Singapore. Scope letters may name approved regions for file sharing.

8. Your rights

Subject to applicable law you may request access, correction, deletion, restriction, or portability of personal data we control.

Withdraw cookie consent anytime via the banner or Manage cookies control on the Cookies page.

Object to processing based on legitimate interest where applicable law provides that right.

Contact [email protected] with requests. We respond within reasonable timeframes prescribed by Singapore law.

You may complain to the Personal Data Protection Commission if we cannot resolve a concern — we prefer you contact us first.

9. Security

We use HTTPS, access controls on studio systems, and least-privilege handling for project folders.

Staff devices accessing client folders use disk encryption where supported.

No method is perfectly secure; we notify you of breaches affecting your data where legally required.

You are responsible for securing email accounts you use to correspond with us.

10. Children

Services and site are directed at business contacts, not children under sixteen.

We do not knowingly collect children's data. Contact [email protected] if you believe we have.

11. Automated decisions

We do not make solely automated decisions with legal or similarly significant effects about individuals using this site.

12. Marketing communications

We do not send bulk marketing email from this domain. Follow-up after enquiries is individual correspondence about studio fit, not newsletters.

13. Changes

We update this notice when practices change. Material changes appear with a new effective date on this page.

Continued use after posting constitutes acknowledgement where permitted. Signed engagements retain privacy terms from their scope letter if more specific.

14. Supervisory contact

Personal Data Protection Commission Singapore: www.pdpc.gov.sg

Direct contact preferred first: [email protected] with subject line Privacy request.

We document complaint handling in the same project folder as your enquiry when applicable, redacting third-party data from any shared summary.

15. Data breach notification

If a breach likely affects your rights, we notify you without undue delay where required by law, describing nature of data, likely consequences and measures taken.

We maintain an internal incident log for studio systems separate from client project folders.

16. Your responsibilities

Keep your email credentials secure when corresponding with us. Do not forward confidential attachments to personal inboxes without assessing risk.

Tell us promptly if a team member who received project folders should no longer have access on your side.

Notify [email protected] if you believe we hold inaccurate data about you so we can correct or delete where appropriate.

17. Legitimate interests

Where we rely on legitimate interests, we balance our needs against your rights. You may object where law provides that right by writing to [email protected] with your reasons.

Examples include securing the site, responding to unsolicited business enquiries and maintaining internal records of consent choices.

We document balancing tests internally for new processing activities that affect site visitors or enquiry contacts.

18. PDPA alignment

This notice is written to align with Singapore Personal Data Protection Act expectations as understood on 13 August 2026.

Capitalised terms not defined here carry meanings given in the Act where applicable.

We review this notice when PDPC guidance changes materially or when our processing changes.

19. Records of processing

We maintain an internal record of processing activities for studio operations separate from this public summary.

You may request a relevant excerpt pertaining to your enquiry by writing to [email protected] with reasonable specificity.

The internal record includes categories of data subjects, processing purposes and retention schedules at a high level.

We update the internal record when we add subprocessors or change retention for enquiry handling.

Effective 13 August 2026 · Contact [email protected] for data requests.