Privacy Policy
Updated 7 Oct 2026
Effective 28 September 2026.
This policy explains how SimplyGJ Pte. Ltd. (“SimplyGJ”, “we”, “us”) collects and uses personal data when you visit simplygj.com, contact us, or work with us. We are a digital marketing agency based in Singapore and we work with businesses in Singapore, the United States, the United Kingdom, the European Union and Australia. We follow Singapore’s Personal Data Protection Act 2012 (PDPA), and where they apply to us, the UK GDPR, the EU GDPR and Australia’s Privacy Act 1988.
1. Who we are and how to contact us
SimplyGJ Pte. Ltd. is the organisation responsible for your personal data on this website. Our Data Protection Officer can be reached at glenteo@simplygj.com or through our contact page. You can also write to us in Singapore via the same email to request our postal address.
2. What we collect
When you send an enquiry. Your name, work email, phone number, company, the service you’re interested in, your budget range, your website, your message and your consent. We also record the page you sent it from and the page that referred you, so we know which content brings enquiries.
Technical data. Your IP address, used briefly to limit spam submissions. If you agree to analytics or advertising cookies, we also collect how you use the site, your device and browser type, and your approximate location.
When you talk to us. Emails, WhatsApp messages, call notes and meeting notes, including the business details you share.
When you are a client. Contact and billing details for your team, and the access you give us to your website, analytics and ad accounts to do the work.
We don’t ask for sensitive personal data, and this website isn’t intended for anyone under 18.
3. How we use it, and our legal basis
| Purpose | Legal basis (UK/EU GDPR) | Singapore (PDPA) |
|---|---|---|
| Replying to your enquiry and preparing a proposal | Steps before a contract, and our legitimate interest in answering business enquiries | Your consent, given when you submit the form |
| Delivering services to clients | Performance of a contract | Consent and contractual necessity |
| Keeping business and accounting records | Legal obligation | Legal and regulatory requirements |
| Protecting the site from spam and abuse | Legitimate interest in keeping our systems secure | Reasonable purpose, notified here |
| Analytics and advertising measurement | Your consent, where the law requires it | Consent, which you can withdraw |
| Occasional updates about our services | Your consent, or our legitimate interest for existing clients, with an easy opt-out | Your consent |
We don’t make decisions about you using only automated means.
4. Cookies and similar technologies
We use cookies that the site needs to work and to keep it secure. We may also use Google Analytics and advertising tags from Google and Meta to understand how the site is used and to measure our own ads. Where the law requires consent, including for visitors in the UK and the EU, we only set analytics and advertising cookies after you agree, and you can change your choice at any time with the Cookie settings link at the bottom of every page. Before you choose, or if you decline, Google’s tags still load in a mode that sets no cookies and sends Google limited, cookieless signals (such as that a page was viewed or an enquiry was sent) so we can measure our ads in aggregate. Meta’s tag only loads after you agree. We store that choice in a cookie called sgj_consent for 180 days. Google Analytics collects data about your visit and Google processes it under its own policies. You can read how Google uses this data at policies.google.com/technologies/partner-sites and opt out with Google’s browser add-on.
5. Who we share it with
We don’t sell your personal data. We share it only with:
- service providers who run our tools for us: Hostinger (website hosting), Google (Workspace email, Analytics), and Meta (WhatsApp and advertising)
- professional advisers such as accountants and lawyers, under confidentiality
- authorities, when the law requires it
- a buyer or successor, if our business is ever sold or restructured
Our service providers may only use your data to provide their service to us.
6. International transfers
We are based in Singapore and our providers may process data in other countries. When we transfer personal data out of Singapore, we make sure it’s protected to a standard comparable to the PDPA. When we receive personal data from the UK or the EU, we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses or the UK International Data Transfer Agreement or Addendum, where these are required. You can ask us for more detail.
7. How long we keep it
Enquiries that don’t lead to work are kept for up to 24 months, then deleted. Client records are kept for as long as we work together and then for as long as Singapore law requires for business and tax records, which is generally five years. We delete or anonymise data once we no longer need it.
8. How we protect it
We use access controls, strong passwords, two-step verification on our key accounts, encrypted connections (HTTPS), and we limit access to people who need it. If a data breach is likely to cause significant harm, we will notify the Personal Data Protection Commission and affected people as the PDPA requires, and other regulators where their laws apply.
9. Your rights
Everyone. You can ask to see the personal data we hold about you, ask us to correct it, and withdraw your consent at any time.
UK and EU. You also have the right to ask us to erase your data, restrict or object to how we use it, and receive it in a portable format. You can complain to the Information Commissioner’s Office (UK) or your local data protection authority (EU).
Australia. You can ask to access and correct your information and complain to us first. If you’re not satisfied, you can contact the Office of the Australian Information Commissioner.
United States. You can ask us to access or delete your data and to stop sending you marketing. Every marketing email we send includes an unsubscribe link.
To use any of these rights, email glenteo@simplygj.com. We’ll reply within 30 days and may need to confirm your identity first.
10. Marketing
We only send marketing messages if you’ve agreed to receive them or you’re an existing client, and you can opt out at any time. We check Singapore’s Do Not Call Registry before sending marketing calls or messages to Singapore phone numbers where the rules require it.
11. When we act for our clients
When we run websites, ads or analytics for a client, the client decides how their customers’ data is used and we process it on their instructions. Their privacy policy applies to that data.
12. Changes to this policy
We’ll update this page when our practices or the law change, and show the new effective date at the top.
13. Complaints
If you’re unhappy with how we’ve handled your data, contact our Data Protection Officer first at glenteo@simplygj.com. You can also contact the Personal Data Protection Commission in Singapore, the Information Commissioner’s Office in the UK, your local data protection authority in the EU, or the Office of the Australian Information Commissioner.