Privacy Policy
(Registered Sole Proprietorship, Singapore, UEN: 53519550L)
operating under the brand name Straits Talents (“we”, “us”, or “our”)
Personal Data We Collect
We collect full names, gender, age or date of birth, and nationality.
We collect contact information, including email addresses and phone/WhatsApp numbers.
We collect media assets, including photographs, casting videos, voice recordings, and portfolios.
We collect physical attributes, including height, weight, and other measurements relevant to casting.
We collect digital data, including IP addresses, cookies, and interaction data from our website or communication platforms.
We collect account credentials and, where you sign in via a third-party provider, OAuth identity data (such as your name and email address) from Google, Facebook, or LinkedIn.
For talent applicants, we collect additional profile data including ethnicity, citizenship, country of residence, right-to-work status in Singapore, clothing sizes, shoot experience, skills, languages spoken, and Instagram handle.
For client requests, we collect company name, contact person details, project type and description, budget range, shoot or event dates, location, and any files uploaded as a brief or mood board.
For support tickets, we collect the subject and content of your messages, as well as any files you attach to a ticket thread.
Legal Basis for Processing
We process data based on your explicit consent when you voluntarily submit your profile or inquiry.
We process data where it is necessary for the performance of a contract or service agreement.
We process data for legitimate business interests, including database management and fraud prevention.
Purpose of Collection
To match Individuals with specific Client requirements and facilitate casting.
To communicate regarding project updates, inquiries, and coordination via WhatsApp, Email, or Phone.
To verify the accuracy and currency of talent profiles.
To comply with legal and regulatory obligations under Singapore law.
To create and maintain user accounts with a TALENT or CLIENT role and to provide access to the personal dashboard and related features.
To send transactional email notifications, including application and request status updates, account confirmation emails, and password setup links, via our email delivery provider Resend.
To operate the support ticket system and respond to enquiries submitted by registered users.
Disclosure of Personal Data
We may disclose personal data to prospective Clients for the purpose of talent selection and project facilitation.
We use the following third-party infrastructure providers: Supabase (database and authentication), Cloudflare R2 (photo and document storage), Cloudflare Stream (video processing and hosting), and Resend (transactional email delivery). Each provider processes only the data necessary to perform their function.
We may use digital communication platforms (e.g., WhatsApp/Meta) for operational messaging.
We do not sell or rent personal data to third parties for marketing purposes.
We may disclose data to Singapore authorities (e.g., MOM or SPF) where required by law.
Our forms use Cloudflare Turnstile for spam and bot protection. When you submit a form, interaction data is sent to Cloudflare to verify that the submission is from a human. No personal data is sold or shared with Cloudflare beyond what is required for this verification.
Data Protection Officer (DPO)
In compliance with the PDPA, we have appointed a Data Protection Officer.
For any queries regarding your data, contact the DPO at: dpo@everydayinsingapore.com
Do Not Call (DNC) Provisions
We comply with the DNC Registry requirements of Singapore.
We will only send marketing or project-related messages to your registered Singapore telephone number if you have provided clear, unambiguous consent.
Operational messages regarding an ongoing engagement are exempt from DNC restrictions.
Data Retention and Security
We use encrypted communication and password-protected storage to protect data from unauthorized access.
We retain talent profiles in our active database for as long as the Individual wishes to be considered for projects.
Personal data will be deleted or anonymized when it is no longer required for legal or business purposes.
Support tickets are automatically closed 14 days after the last admin reply if no further messages are received. Closed ticket data is retained for the same period as other account data and is subject to the same deletion policy.
Application data entered before account creation is stored in your browser's local storage only and is not transmitted to our servers until you choose to submit or save your application.
Your Rights: Access, Correction, and Withdrawal
You have the right to request a copy of the personal data we hold about you.
You have the right to request the correction of inaccurate or incomplete personal data.
You have the right to withdraw your consent for data processing at any time.
Withdrawal of consent may result in our inability to provide further services or consider you for future projects.
Cookies and Third-Party Services
Our website uses cookies and similar technologies to enhance user experience and analyse traffic. We use Google Analytics 4 (GA4) via Google Tag Manager (GTM) to collect anonymised usage data, including pages visited, time on site, and key interactions such as form submissions and registrations.
We are not responsible for the privacy practices of third-party platforms linked in our communications.
In the future, additional third-party analytics or advertising pixels (such as Meta or TikTok) may be deployed via Google Tag Manager. If that occurs, this Privacy Policy will be updated to reflect those additions.
When you sign in using a third-party OAuth provider (Google, Facebook, or LinkedIn), that provider shares basic profile information with us. Their own privacy policies govern how they handle your data during and after that process.
Cookies and Session Data
We use essential cookies that are necessary for the website to function. Authentication session cookies are set by Supabase Auth to keep you signed in. Their duration depends on your sign-in choice: session only (if you do not select “Remember me” when signing in) or up to 7 days (if you select “Remember me”). We also use CSRF protection cookies for security purposes. These essential cookies do not require consent as they are strictly necessary to provide the service.
We use Google Analytics 4 (GA4), deployed via Google Tag Manager, to understand how visitors use this website, including pages visited, time on site, and key interactions such as form submissions and registrations. GA4 cookies may persist for up to 2 years. You may opt out of GA4 tracking at google.com/settings/ads.
You may disable cookies in your browser settings at any time. Disabling essential cookies will prevent you from signing in to your account. We do not use cookies for advertising or to track you across other websites.
When you first visit this website, a notice appears at the bottom of the page informing you of our cookie use. Dismissing this notice records your acknowledgement in your browser's local storage. This is a UI preference only and does not constitute a formal consent record.
International Transfers
If personal data is transferred outside Singapore, we ensure the recipient provides a standard of protection comparable to the PDPA.
Changes to This Policy
We reserve the right to update this Privacy Policy at any time.
Continued engagement with our services after updates constitutes acceptance of the revised Policy.
