Privacy Policy

Our Commitment to Privacy

At Vintage Touch, we understand that the photographs you entrust to us hold deep personal and family significance. We are committed to protecting your privacy and handling your personal information with appropriate care and respect.

This privacy policy explains how we collect, use, protect, and manage your personal data when you use our website and restoration services.

By using our services, you agree to the practices described in this policy.

Information We Collect

Contact Information

When you contact us or request our services, we collect:

• Name and contact details (email address, phone number)
• Service address if physical photograph handling is required
• Communication preferences

Service Information

To provide restoration services, we collect:

• Photographs submitted for restoration (digital or physical)
• Historical context or family information you choose to provide
• Specific restoration requirements and preferences
• Project notes and communication history

Website Usage Data

When you visit our website, we may collect:

• IP address and browser information
• Pages visited and time spent on site
• Device type and operating system
• Referring website information

Payment Information

We collect payment details necessary to process your service payment. Payment processing is handled securely through third-party payment processors who maintain their own security standards.

How We Use Your Information

Service Delivery

• Performing photo restoration work as requested
• Communicating about project progress and completion
• Delivering restored photographs to you
• Maintaining quality records for service improvement

Business Operations

• Processing payments and maintaining financial records
• Responding to inquiries and providing customer support
• Improving our services and website functionality
• Complying with legal obligations and business requirements

Communications

• Sending project updates and service notifications
• Responding to your questions and requests
• Providing information about our services (with your consent)

Legal Basis for Processing

We process your personal data based on:

• Consent: When you provide explicit consent for marketing communications or optional services
• Contract: To fulfill our service agreement and deliver restoration services you've requested
• Legitimate Interest: For business operations, service improvement, and fraud prevention
• Legal Obligation: To comply with tax, accounting, and regulatory requirements

Protection of Your Photographs

We recognize the sensitive and personal nature of the photographs you entrust to us. We maintain strict protocols to protect your family memories:

• Physical photographs are stored in secure, locked facilities with climate control
• Digital files are maintained on secure, password-protected systems
• Access to client photographs is limited to restoration team members directly involved in your project
• Your photographs are never used for marketing, portfolio, or any other purpose without your explicit written permission
• Upon project completion, all working files are permanently deleted unless you've requested archival storage

Data Security Measures

We implement appropriate technical and organizational security measures:

• Encryption of sensitive data during transmission and storage
• Regular security audits and system updates
• Access controls and authentication requirements
• Secure backup procedures for active projects
• Staff training on data protection and privacy practices

While we take reasonable precautions, no internet transmission or electronic storage is completely secure. We cannot guarantee absolute security but maintain industry-standard practices to protect your information.

Data Retention

We retain your personal data for different periods depending on the purpose:

• Contact Information: Retained for 3 years after last contact to facilitate future service requests
• Service Records: Maintained for 5 years for quality assurance and potential follow-up work
• Financial Records: Kept for 7 years as required by Singapore tax regulations
• Working Files: Deleted immediately upon project completion unless archival service is purchased
• Marketing Data: Retained until you withdraw consent

Sharing Your Information

We do not sell or rent your personal information to third parties. We may share information only in these limited circumstances:

• Service Providers: Payment processors, cloud storage providers, and other service partners who assist in operations (all bound by confidentiality agreements)
• Legal Requirements: When required by law, court order, or government authority
• Business Transfers: In the event of merger, acquisition, or sale of business assets (with notification to affected parties)
• Protection of Rights: To protect our legal rights, prevent fraud, or ensure safety

Your Rights

Under Singapore's Personal Data Protection Act (PDPA) and other applicable laws, you have the right to:

• Access: Request copies of your personal data we hold
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request transfer of your data in a structured, commonly used format
• Object: Object to processing of your data for specific purposes
• Withdraw Consent: Withdraw previously given consent at any time
• Lodge Complaints: File complaints with the Personal Data Protection Commission or other supervisory authorities

To exercise these rights, please contact us using the information provided at the end of this policy.

Third-Party Services

Our website may use third-party services that collect information:

• Google Analytics for website usage statistics
• Payment processors for secure transaction handling
• Email service providers for communications

These services operate under their own privacy policies. We encourage you to review their policies to understand their data practices.

International Data Transfers

Your data is primarily stored and processed in Singapore. If we transfer data internationally, we ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions for countries with similar data protection standards
• Service providers with appropriate security certifications

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through:

• Notice on our website with updated "Last Updated" date
• Email notification to active clients
• Notice during your next service interaction

Continued use of our services after changes indicates acceptance of the updated policy.