Privacy Policy

HeyAda (“we”, “us”) is a web studio in Singapore. We take privacy seriously — it’s literally part of what we do for clients. This policy explains, in plain English, what personal data we collect, why, and your rights under Singapore’s Personal Data Protection Act (PDPA).

What we collect

• When you use our contact form or request a free site check: your name, email, phone number, website address, and anything you write in the message.
• When you visit the site: standard analytics data (pages viewed, approximate location, device and browser) via Google Analytics, using cookies.
• If you become a client: the information we need to deliver the work we agree on.

We don’t collect sensitive personal data, and we never ask for it.

Why we use it

• To reply to your enquiry and follow up.
• To prepare a quote or carry out work you’ve asked for.
• To understand how the site is used so we can improve it.

We only use your data for the reason you gave it to us.

On what basis

We rely on your consent (you chose to get in touch) and, for clients, on the need to carry out our agreement with you — both permitted under the PDPA.

Who we share it with

We never sell your data. We use a few trusted providers to run the business, and your data passes through them only so we can provide our service:

• Web3Forms — handles our contact / enquiry forms
• Google Analytics — website usage statistics
• Vercel — website hosting
• Resend — sending email

Some of these are based outside Singapore (for example, in the United States). Where personal data is transferred overseas, we take reasonable steps to ensure it’s given a standard of protection comparable to the PDPA.

Cookies & analytics

We use cookies for basic analytics (Google Analytics) to see which pages are useful. You can block cookies in your browser — the site still works.

How long we keep it

We keep enquiry details for up to 12 months after our last contact with you, unless you become a client — in which case we keep what’s needed for our working relationship and any legal obligations, and no longer.

Your rights

Under the PDPA you can:

• Access — ask what personal data we hold about you and how we’ve used it
• Correction — ask us to fix anything that’s wrong
• Withdraw consent — at any time

Just email our DPO (below) and we’ll sort it out, usually within 30 days.

How we protect it

We keep your data on secure, reputable platforms, limit who can access it, and apply sensible security practices including encryption in transit and access controls.

Our Data Protection Officer

We’ve appointed a DPO, as every Singapore organisation must. For any privacy question or request, get in touch:

Changes to this policy

If we update this policy, we’ll change the “last updated” date at the top.