Privacy Policy

1. Personal Data We Collect

When you enquire about or book our services, we may collect:

We seek to collect only information reasonably necessary to respond to your enquiry, fulfil your booking, provide our services and operate our business.

2. How We Collect Personal Data

We may collect personal data when you:

• Submit an enquiry or order through our website
• Contact us via WhatsApp, telephone, email or social media
• Submit information through Facebook or Instagram advertisements or Meta Lead Forms
• Request a quotation or confirm a booking
• Make a payment
• Participate in a promotion or contest
• Provide information to our staff for the purpose of fulfilling your event requirements

3. How We Use Your Personal Data

We use your personal data to:

• Respond to enquiries and provide quotations
• Process and manage bookings and orders
• Design and customise event decorations, backdrop boards, balloons and other event materials
• Arrange delivery, setup, collection and teardown
• Process payments and maintain transaction records
• Communicate with you regarding your booking or event
• Provide customer support and resolve issues
• Send promotional information where permitted and appropriate (see Section 5)
• Maintain appropriate customer and business records
• Improve our website, products and services
• Meet legal, accounting and regulatory requirements

Where required, we will obtain appropriate consent before using your personal data for a materially different purpose.

4. Meta, Facebook and Instagram Leads

SGKeyEvents advertises and receives customer enquiries through Meta platforms, including Facebook and Instagram.

When you voluntarily provide information through a Meta Lead Ad, lead form, advertisement or messaging experience, the information you submit may be shared with SGKeyEvents so that we can respond to your enquiry and provide information about our services.

We will use Meta Lead Generation data in accordance with the purposes communicated when the information is collected and applicable requirements.

5. Marketing and Promotions

From time to time, SGKeyEvents may conduct promotions for balloons, event decorations, packages and related services.

Where permitted by applicable law and where any necessary consent has been obtained, we may use your contact information to communicate relevant promotions and offers through channels such as WhatsApp, SMS, email or other messaging platforms.

You may request to stop receiving promotional communications from us at any time by contacting us at sales@sgkeyevents.com.

Opting out of promotional communications will not prevent us from contacting you regarding an existing enquiry, booking, payment, delivery or event.

6. Sharing of Personal Data

We do not sell customer personal data. Where reasonably necessary to fulfil a booking or operate our business, we may share limited information with:

• Stripe — payment processing. Your card details are subject to Stripe's Privacy Policy.
• Supabase — secure cloud database hosting (data is stored in encrypted form).
• Netlify — website hosting and serverless functions. Subject to Netlify's Privacy Policy.
• Delivery and event crew — your name, contact number and event address, as necessary for delivery and setup.
• Printing and production partners — artwork or names provided for customised event materials.
• Legal authorities — where required or permitted by applicable law, court order, or to protect our legal rights.

We seek to limit such disclosures to information reasonably necessary for the relevant purpose.

7. Event Photography and Social Media

SGKeyEvents may photograph completed event setups — including backdrop boards, balloons, plinths and other decorations — for our portfolio, website, social media and marketing purposes.

Our general practice is to photograph and publish the event setup and decorations without identifiable individuals appearing in the photographs.

If we wish to publish photographs or videos in which customers, guests or other individuals are identifiable, we will seek appropriate agreement or consent before using such content for our marketing purposes.

Customers may contact us if they have concerns regarding a photograph or other content published by SGKeyEvents.

8. Protection of Personal Data

We take reasonable administrative, technical and organisational measures to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, loss or similar risks, including:

• All data is transmitted over HTTPS (SSL/TLS encryption).
• Passwords are hashed and never stored in plain text.
• Access to customer data is restricted to authorised personnel only.
• Regular reviews of our data security practices.

However, no electronic transmission or storage system can be guaranteed to be completely secure. Please contact us immediately if you suspect unauthorised access to your account.

9. Retention of Personal Data

We retain personal data for as long as reasonably necessary for the purposes for which it was collected:

• Order and transaction records — 5 years, for accounting, tax and legal compliance.
• Account data — until you request deletion of your account.
• Communication data — 2 years, or until the matter is resolved.

Where personal data is no longer required for a legitimate business or legal purpose, we will take reasonable steps to delete, anonymise or securely dispose of it.

10. Cookies and Website Technologies

Our website uses cookies and similar technologies to operate the website and provide our services:

• Authentication cookies — to keep you logged in during your session (managed by Supabase Auth).
• Cart data — to preserve your shopping cart between page visits (stored in your browser's localStorage).

Third-party services we use (such as Meta advertising, analytics and social media integrations) may also use cookies or similar technologies in accordance with their respective privacy policies.

You may clear cookies at any time via your browser settings, though this will log you out of your account.

11. Children's Personal Data

Our event services may be provided for children's birthdays and celebrations; however, bookings are generally made by adults (parents or guardians).

We do not intentionally target Meta Lead Generation advertisements at minors.

Where a parent, guardian or customer provides a child's name, photograph or other information for purposes such as customising a birthday backdrop, we will use that information only as reasonably necessary to provide the requested service and for other permitted purposes under this Policy.

12. Your Rights Under the PDPA

As a data subject under Singapore's PDPA, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct any inaccurate or incomplete data.
• Withdrawal of consent — withdraw consent for us to use your data for certain purposes. Note: this may affect our ability to provide services where that data is necessary.
• Opt out of marketing — stop receiving promotional communications at any time.
• Deletion — request deletion of your account and associated data, subject to legal retention requirements.

To exercise any of these rights, contact us at sales@sgkeyevents.com. We will respond within 30 days as required by the PDPA.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our services, business practices or applicable legal requirements. The latest version will be published on our website with the updated effective date.

Material changes will be communicated via a notice on our website or by email to registered account holders. Continued use of our website after changes take effect constitutes acceptance of the revised policy.

14. Contact Us

For questions about this Privacy Policy, our handling of personal data, withdrawal of consent, correction requests or other privacy-related matters, please contact us:

We will review and respond to privacy-related requests within a reasonable period and in any case within 30 days as required under the PDPA.