LeadStudio by creativo™
Privacy Statement
In accordance with the Singapore Personal Data Protection Act 2012 (PDPA)
LeadStudio by creativo™ is committed to protecting the personal data of our clients, prospects, and contacts. This Privacy Statement explains what data we collect, why we collect it, how we use and protect it, and your rights under the Singapore PDPA.
Contents
1. Who We Are
2. What Personal Data We Collect
4. Legal Basis for Collection & Use
3. Why We Collect Personal Data (Purposes)
5. How We Handle Prospect & Third-Party Data
6. Disclosure to Third Parties
8. Data Retention
7. Overseas Transfers
9. Protection of Personal Data
10. Cookies & Website Tracking
12. Your Rights Under the PDPA
11. Do Not Call (DNC) Registry
13. Updates to This Statement
14. Contact & Data Protection Officer
-
Who We Are
LeadStudio by creativo™ is a lead generation consultancy operating in Singapore. We provide outbound and inbound lead generation services, sales consulting, and social media content to business clients.
For the purposes of the PDPA, LeadStudio by creativo™ is the data controller responsible for the personal data we collect and process. Our designated Data Protection Officer (DPO) can be reached at the contact details in Section 14.
What Personal Data We Collect
We may collect the following types of personal data, depending on the nature of your relationship with us:
Contents
Identity Data
Contact Data
Business Data
Transaction Data
Communications Data
Technical Data
Campaign Data
We do not knowingly collect sensitive personal data (e.g. NRIC numbers, health data, or financial account details) unless specifically required and consented to in writing.
Why We Collect Personal Data (Purposes)
We collect and use personal data for the following purposes:
-
Service Delivery: To fulfil our contractual obligations, including generating leads, running campaigns, and delivering reports to clients;
-
Client Relationship Management: To communicate with clients about their projects, invoices, and account status;
-
Business Development: To reach out to potential clients who may benefit from our services, through email, LinkedIn, or other channels;
-
Campaign Operations: To conduct outbound prospecting campaigns on behalf of our clients, using prospect data agreed upon in the service scope;
-
Marketing & Content: To share insights, case studies, or service updates via email newsletters or social media (where consent is given or implied);
-
Legal & Compliance: To comply with applicable laws, regulations, or legal proceedings;
-
Website Analytics: To understand how visitors use our website and improve the user experience.
Legal Basis for Collection & Use
Under the PDPA, we collect and use personal data on one or more of the following bases:
-
Consent: You have given us clear, informed consent to process your data for a specific purpose (e.g. opting in to receive our newsletter);
-
Contractual Necessity: Processing is necessary to perform a contract with you or to take steps at your request before entering a contract;
-
Legitimate Interests: We have a legitimate business interest in contacting relevant professionals (e.g. business-to-business outreach to decision-makers) where this is proportionate and does not override your rights;
-
Legal Obligation: Processing is required for us to comply with a legal or regulatory obligation.
Where we rely on consent, you have the right to withdraw it at any time (see Section 12).
How We Handle Prospect & Third-Party Data
A core part of LeadStudio by creativo™'s business involves sourcing and processing data about third-party prospects on behalf of clients. This section explains how we do this responsibly.
Data Sources: Prospect data is sourced from:
-
Publicly available business directories and professional networks (e.g. LinkedIn);
-
Reputable third-party data providers who warrant their data is lawfully obtained;
-
Publicly accessible websites and company information.
Business Contact Exemption: Under the PDPA, business contact information (name, job title, business email, business phone) used for business-to-business communication is generally exempt from the consent requirement. Our outreach is directed at business professionals in their professional capacity and relates to services that are relevant to their business role.
Opt-Out Compliance: All outbound emails and outreach messages include a clear and easy opt-out mechanism. We honour opt-out and unsubscribe requests promptly and maintain suppression lists to ensure contacts are not re-contacted.
Client Responsibility: When we deliver lead data to clients, clients become responsible for how they use, store, and process that data. Clients must comply with the PDPA and any other applicable laws in their use of the data.
Disclosure to Third Parties
We do not sell personal data. We may share personal data with:
-
Our clients — as part of service delivery (e.g. prospect lists, campaign results);
-
Service providers & subcontractors — including email delivery platforms, CRM tools, data verification services, and freelancers working under our direction, bound by appropriate data protection obligations;
-
Professional advisors — including lawyers, accountants, or auditors, under confidentiality obligations;
-
Regulatory or government authorities — where required by law or legal process.
Any third parties with whom we share data are required to use it only for the purpose for which it was shared and to maintain appropriate security measures.
Overseas Transfers
In the course of providing services, personal data may be transferred to or processed in countries outside Singapore — for example, when using internationally hosted software platforms (e.g. email tools, CRMs, cloud storage).
In accordance with the PDPA's Transfer Limitation Obligation, we take steps to ensure that any overseas transfer of personal data is made only to organizations that provide a standard of protection comparable to the PDPA. This may include contractual data protection clauses or confirmation that the recipient country has adequate data protection laws.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
Data Type
Client contracts & invoices
Client communications
Prospect / lead data
Website analytics data
Marketing contact lists
When data is no longer required, we securely delete or anonymise it.
Protection of Personal Data
We implement reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:
-
Access controls limiting data to authorised personnel on a need-to-know basis;
-
Password-protected systems and two-factor authentication for key platforms;
-
Encrypted file storage and secure data transfer protocols;
-
Regular review of data handling practices and third-party vendor agreements.
In the event of a data breach that is notifiable under the PDPA (i.e. likely to result in significant harm or affect 500 or more individuals), we will notify the Personal Data Protection Commission (PDPC) and affected individuals within the prescribed timeframes.
Cookies & Website Tracking
Our website uses cookies and similar tracking technologies to enhance user experience and gather analytics. Cookies we use include:
-
Essential cookies: Necessary for the website to function properly;
-
Analytics cookies: To understand visitor behaviour and improve our website (e.g. Google Analytics);
-
Marketing cookies: To track campaign effectiveness (only where consent is obtained).
You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. For more information, refer to our Cookie Policy [link if separate policy exists].
Do Not Call (DNC) Registry
Singapore's Do Not Call (DNC) Registry provisions under the PDPA apply to voice calls, text messages (SMS/MMS), and fax sent to Singapore telephone numbers for marketing purposes.
Before conducting any telephone or SMS-based marketing outreach to Singapore numbers, LeadStudio by creativo™ checks numbers against the DNC Registry where required. We do not conduct unsolicited marketing calls to individuals who have registered on the DNC Registry, unless an exemption applies (e.g. an existing business relationship with clear consent).
Where we conduct outreach on behalf of clients, clients are responsible for ensuring their instructions comply with DNC obligations.
Your Rights Under the PDPA
As an individual whose personal data we hold, you have the following rights under the PDPA:
-
Right of Access: You may request access to the personal data we hold about you and information on how it has been used;
-
Right of Correction: You may request correction of any inaccurate, incomplete, or misleading personal data we hold about you;
-
Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal;
-
Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the unsubscribe link in any email or by contacting us directly;
-
Right to Data Portability: You may request that we provide your data in a commonly used, machine-readable format where applicable under the PDPA's data portability provisions.
To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request.
If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.
Updates to This Statement
We may update this Privacy Statement from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will notify clients and contacts by email or by posting an updated statement on our website with a revised effective date.
We encourage you to review this statement periodically.
Contact & Data Protection Officer
For any queries, requests, or complaints regarding the handling of your personal data, please contact:
-
Organisation: LeadStudio by creativo™
-
Email: admin@leadstudio.com.sg
-
Address: 60 Paya Lebar Road, #05-74 Paya Lebar Square,Singapore 409501
We take data protection seriously and will aim to resolve your query promptly and fairly.
Examples
Full name, job title, company name
Email address, phone number, LinkedIn URL, business address
Industry, company size, revenue range, geographic market
Invoice details, payment records, service agreements
Emails, call notes, meeting records, campaign responses
IP address, browser type, pages visited (via cookies)
Open rates, reply rates, engagement metrics
Retention Period
7 years (for legal and tax compliance)
3 years after engagement ends
Until campaign ends or opt-out received, whichever is sooner
Up to 26 months
Until consent withdrawn or 2 years of inactivity
Who It Relates To
Clients, prospects, contacts
Clients, prospects, contacts
Clients, target prospects
Clients
Clients, prospects
Website visitors
Prospects in client campaigns
A proprietary service division of
LS Creativo Marketing (S) Pte Ltd
UEN: 200919207C · Est. 2008 · Singapore
All official consultations, service agreements and financial transactions are administered through LS Creativo Marketing (S) Pte Ltd.
© 2026 by LeadStudio by creativo™.