Privacy Policy
Your privacy matters to us. This policy explains, in plain language, what personal data we collect when you use projectvival, why we collect it, how we protect it, and the choices you have. We handle your data in line with Singapore's Personal Data Protection Act 2012 (the PDPA).
Last updated: June 2026
Who we are projectvival is operated by Esmond Solutions Pte. Ltd. (UEN 202031216G), a company registered in Singapore. Our registered office is at 24 Sin Ming Lane, #01-100, Singapore 573970. For the purposes of the PDPA, we are the organisation responsible for the personal data we collect about you.
How to reach our Data Protection Officer We have appointed a Data Protection Officer (DPO). If you have any question about how your personal data is collected, used or disclosed, or you wish to make a request under this policy, you can contact our DPO at support@projectvival.com. This is also the person to contact with any data-handling question. We aim to respond promptly.
What we collect We only collect what we need to sell you a desk, deliver it, support it, and run our business properly. Depending on how you use projectvival, this may include: - Your name, delivery address, email address and phone number - Your order details and order history - Payment confirmation data from our payment provider (we never collect, see or store your full card number or CVV) - Messages you send us, such as support or warranty enquiries - Technical and usage information collected through cookies and analytics, such as your device type, browser, and how you move through our website
Why we collect it (the purposes) We collect, use and disclose your personal data only for these specific purposes: - To process and fulfil your order, including delivery - To handle warranty claims, returns and customer support - To send you order confirmations, delivery updates and other service messages - To keep proper transaction and accounting records as required by law - To understand how our website is used so we can improve it and our services - To send you marketing messages, but only where you have given consent - To detect, prevent and address fraud, misuse or security issues
How we rely on your consent We collect, use and disclose your personal data only with your consent, or where the PDPA otherwise permits or requires it. We will not, as a condition of selling you a desk, require you to consent to any use of your personal data beyond what is reasonable to provide that product or service. Optional uses, such as marketing, are kept separate from the data we need to fulfil your order.
Withdrawing your consent Where we rely on your consent, for example to send you marketing, you can withdraw that consent at any time on reasonable notice. To withdraw consent, email us at support@projectvival.com or use the unsubscribe link in any marketing message. When you ask to withdraw consent, we will inform you of the likely consequences of doing so, for example that we may no longer be able to fulfil an outstanding order or keep your account active. On withdrawal, we will stop collecting, using or disclosing the relevant personal data for that purpose, except where we are required or permitted by law to retain it (for example, transaction records we must keep for tax purposes). Withdrawing consent does not affect the lawfulness of anything we did before you withdrew it.
Marketing messages We will only send you marketing messages where the law allows and, where required, where you have given your explicit opt-in consent. Marketing consent is never a precondition of purchase, is not pre-ticked, and is not buried in our terms. - Our marketing emails comply with the Spam Control Act 2007. Each is clearly identifiable as an advertisement, carries accurate sender details, and includes a clear, working unsubscribe facility. We will stop sending marketing email to you within 10 business days of your unsubscribe request. - If we send marketing by SMS or make marketing calls to a Singapore telephone number, we comply with the PDPA's Do Not Call (DNC) provisions: we check the relevant DNC Registry within the required period before sending, unless you have given us clear opt-in consent, and we honour any opt-out (within 21 days for SMS or calls).
Who we share your data with We do not sell your personal data. We share it only with parties who help us run our business, and only as far as needed: - HitPay, our payment provider, to process your payment securely - Google (Analytics, and, when we advertise, Google Ads conversion measurement, including a hashed email for Enhanced Conversions), to measure and improve our website and advertising - Advertising platforms (Meta, TikTok), only when we are actively advertising on them, to measure those ads - An appointed delivery partner, to deliver your order - Government authorities, regulators or law enforcement, where we are legally required to do so
These parties are only permitted to use your data for the purposes we set, and are expected to protect it.
Cookies and analytics Our website uses cookies. We group them into: - Necessary cookies, which are required for the site to work, such as keeping items in your cart. - Analytics cookies, provided through Google Analytics 4 (GA4), which help us understand how visitors use the site so we can improve it and our services. Where this data can identify you, we treat it as personal data under the PDPA. Where possible we use it in an aggregated or anonymised form.
We do not treat simply continuing to browse as your consent to non-essential cookies. You can control or block cookies through your browser settings, and you may decline or remove analytics cookies at any time. If you block certain cookies, some parts of the site may not work as intended.
Advertising and conversion measurement When we run online advertising, we use measurement tools to understand which ads lead to visits and orders, so we advertise responsibly. Depending on where we advertise, these may include: - Google Ads conversion tracking and remarketing, to record when a visit or purchase follows one of our ads, and to show relevant ads to people who have visited us. - Enhanced Conversions, where you have accepted advertising cookies, we may send Google a securely hashed (irreversible) version of your email address so that a purchase can be matched to an ad click for measurement only. We never share your email in readable form for this purpose. - Meta (Facebook/Instagram) and TikTok advertising pixels, used only if and when we are advertising on those platforms, to measure those ads.
These advertising tools are controlled by your choice on our cookie consent banner. For Google services we use Google Consent Mode, so Google Ads and Analytics respect that choice; if you decline advertising cookies, advertising identifiers are not used. You can also opt out of personalised Google ads at myadcenter.google.com, and manage advertising cookies in your browser. As stated above, we never sell your personal data.
Accuracy We take reasonable steps to keep your personal data accurate and complete, especially where it may be used to make a decision affecting you or is disclosed to a third party such as HitPay or our delivery partner. Please help us by keeping your contact and delivery details current, and tell us at support@projectvival.com if anything changes.
How we protect your data We take reasonable administrative, physical and technical steps to protect your personal data against unauthorised access, use, disclosure, modification, loss or disposal, including the use of secure, reputable service providers. No method of storage or transmission is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to keep our safeguards under review. Payments are handled by HitPay, which is certified to PCI-DSS Level 1; card data is handled within HitPay's systems and encrypted in transit and at rest, so your full card details never reach us.
How long we keep your data We keep your personal data only for as long as the purpose for which it was collected is being served, or for as long as we have a legal or business need to retain it. In practice, this means for the life of your order, through the one-year warranty period, and for as long as we have a legal or tax obligation to retain it. Transaction and accounting records are kept for at least five years, as required by Singapore tax law (IRAS), after which we securely delete or anonymise them.
Your rights: access and correction Under the PDPA, you have the right to: - Ask for access to the personal data we hold about you, together with information on how that data has been used or disclosed by us in the year before your request. - Ask us to correct any data that is inaccurate or incomplete. Where we make a correction, we will, unless it is not appropriate to do so, send the corrected data to any third party to whom we disclosed it in the year before the correction. - Withdraw your consent to our use of your data, where consent is the basis we rely on.
To exercise any of these rights, contact our Data Protection Officer at support@projectvival.com. We may need to verify your identity before acting on a request.