Introduction
REAPDIGITAL LIMITED (“ReapDigital”, “RD”, “we”, “our”, “us”) is committed to protecting the privacy of our Customers, Potential Customers, and their End Users (“you”, “your”). This Privacy Policy explains how we collect, use, store, protect, and share personal data when you use:
- Our digital marketing and analytics services (“Services”), and
- Our website: www.reapdigital.sg (“Website”).
This Privacy Policy complies with the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable privacy laws.
01. No Requirement to Provide Personal Data
You are not legally required to provide us with personal data. However, certain Services may not be usable without specific data (e.g., access to advertising accounts for campaign management).
02. Types of Data We Collect
We collect two categories of information:
2.1 Non-Personal Information
Non-identifiable, aggregated, or statistical information, such as:
- Device type, operating system, browser type
- IP derivative location (not precise location)
- Session duration, clickstream activity
- Ad campaign performance analytics
- Cookie and tracking metadata
This information does not identify you.
2.2 Personal Data
Data that identifies or can identify an individual, such as:
- Name, email address, telephone number
- Login credentials for advertising platforms provided by Customers
- IP address, device identifiers
- Payment and invoicing details
- Marketing preferences
- Behavioral data via tracking tools (e.g., Meta Pixel, GA4, MS Clarity)
Any Non-Personal Information linked to Personal Data is treated as Personal Data.
03. How We Collect Personal Data
We collect data in two ways:
3.1 Automatically
Through:
- Cookies and tracking technologies
- Analytics tools
- Advertising platforms
- Log files and session tracking
3.2 Provided by You
For example:
- Account credentials to access advertising platforms
- Information shared via contact forms
- Billing and invoicing data
- Communication with our support or sales teams
04. Legal Bases for Processing (GDPR Art. 6)
We process your data based on the following lawful bases:
- Contractual necessity — to provide and manage our Services
- Legitimate interests — improving services, preventing fraud, securing systems
- Consent — marketing communications, cookies, retargeting
- Legal obligations — compliance with laws, accounting, fraud prevention
05. How We Use Personal Data
We process Personal Data for:
- Delivering, managing, and optimizing the Services
- Personalizing advertising and marketing activities
- Providing technical support and customer service
- Sending service updates, announcements, or marketing communications
- Analytics and performance measurement
- Fraud detection and security monitoring
- Operating and improving our Website
06. Sharing Personal Data
We share Personal Data only in the following circumstances:
6.1 Third-Party Service Providers
We use trusted partners for hosting, analytics, data processing, advertising, email delivery, customer support, website performance, and marketing automation, including:
- Meta (Facebook & Instagram)
- Google Analytics / GA4
- Google Ads
- Lokker Studio
- Shopify / WooCommerce
- CRM platforms (HubSpot, Zoho)
- Email/SMS services (Mailchimp, Klaviyo)
- MS Clarity
- TikTok Ads
- Snapchat Ads
These providers may access Personal Data solely to perform services on our behalf, under strict confidentiality and GDPR-compliant agreements.
6.2 Legal Disclosure
We may disclose Personal Data where required by law, including:
- Court orders
- Subpoenas
- Regulatory authorities
- Law enforcement requests
6.3 Business Transfers
If ReapDigital undergoes a merger, acquisition, financing, or sale, your data may be transferred as part of the business.
07. International Data Transfers (GDPR Chapter V)
We transfer Personal Data outside the EU/EEA when using services such as Meta, Google, AWS, or Shopify.
To ensure compliance:
- We rely on Standard Contractual Clauses (SCCs) issued by the European Commission.
- We apply supplementary measures, including data pseudonymization, access controls, encryption, and limited-data transfer agreements.
Your data will only be transferred where adequate safeguards are in place.
08. Cookies and Tracking Technologies
We use:
- Cookies
- Pixel tags
- Meta Pixel, GA4 tracking
- Session recording (MS Clarity)
- Retargeting tools
You can manage cookie preferences via your browser or cookie banner.
Links to third-party cookie policies:
09. Data Retention
We retain Personal Data according to standard GDPR retention periods, including:
- Marketing data: up to 24 months
- Contractual & billing records: up to 7 years (legal requirement)
- Analytics data: up to 26 months
- Advertising data: according to the limits of each platform
- Technical logs: 12–24 months
Data is deleted or anonymized once no longer needed.
10. Data Subject Rights (GDPR Chapter III)
You have the right to:
- Access your personal data
- Rectify inaccurate information
- Erase your data (“right to be forgotten”)
- Restrict processing
- Object to certain processing
- Portability — request data in a structured, machine-readable format
- Withdraw consent at any time
- Lodge a complaint with an EU supervisory authority
Requests can be submitted to: hello@reapdigital.sg
11. Security
We use technical and organizational measures including:
- Encryption
- Access controls
- Anonymization and pseudonymization
- Secure hosting environments
- Internal data protection policies
However, no system is entirely risk-free.
12. Children’s Data
We do not knowingly process data belonging to individuals under 16 years old.
13. No Data Protection Officer (DPO)
ReapDigital is not required to appoint a DPO under GDPR Article 37. However, you may contact our privacy team at:
- E: hello@reapdigital.sg
- Add.: ReapDigital (Private) Ltd, #02-01 One Fullerton, 1 Fullerton Road, Singapore 049213
- M: +94 771708629
14. Updates to This Privacy Policy
We may update this Policy periodically. Material changes will be communicated on the Website or via email.
