Privacy Policy

This Privacy Policy explains how Drift Journal Pro ("we", "us", or "our") handles personal data when you visit driftjournalpro.pro, subscribe to correspondence, register interest in writing workshops, or otherwise interact with this personal journal website operated from Singapore. We aim to be plain-spoken: this is a small, independent writing project — not a data brokerage — and we collect only what we need to respond to you and keep the site secure.

1. Who is responsible for your data

The data controller for personal information processed through this website is:

Drift Journal Pro
12 Yong Siak Street, #01-03, Singapore 168641
Email: hello@driftjournalpro.pro
Phone: +65 6221 9182

Privacy-related questions may be sent to the email address above. We respond within a reasonable period, typically within thirty days.

2. Scope of this policy

This policy applies to personal data collected through:

• Pages hosted at driftjournalpro.pro and its subpaths;
• Contact and correspondence forms on the site;
• Email communication initiated via the site or sent directly to our studio address;
• Optional functional features such as embedded Google Maps on the contact page, loaded only after cookie consent.

It does not apply to third-party websites linked from journal entries, bookshop sites, or external platforms where we maintain no control over their privacy practices. When you leave this site, review the destination site's policy separately.

3. Personal data we collect

3.1 Information you provide voluntarily

When you use the contact form or email us, we may collect:

• Your name;
• Email address;
• Phone number, if you choose to supply it;
• Message content, including any personal story or workshop enquiry details you include;
• Correspondence history if you continue the thread by email.

Workshop enquiries may include preferred dates or accessibility requirements. We do not request payment card numbers, government identification numbers, or account passwords through this website.

3.2 Technical data collected automatically

Like most websites, our hosting infrastructure may process server logs that include IP address, browser type, referring URL, timestamps, and requested pages. These logs help diagnose errors and protect against abuse. We do not use them to build advertising profiles.

3.3 Cookies and similar technologies

We use a minimal cookie approach. Essential storage may record your cookie consent choice in your browser's local storage. Optional functional loading of Google Maps occurs only after you accept functional cookies. Details appear in our Cookie Policy. We do not deploy advertising pixels or cross-site tracking cookies on this journal.

4. How we use personal data

We process personal data for the following purposes, relying on legitimate interests, consent, or contractual necessity as appropriate under the Personal Data Protection Act 2012 (PDPA) of Singapore:

• Responding to messages: Reading, answering, and archiving enquiries about essays, workshops, or reader correspondence;
• Workshop administration: If you register interest in a writing circle, we use your details to confirm availability, share venue information, and communicate schedule changes;
• Correspondence publication: Only with your explicit written permission, we may edit and publish letters on the Correspondence page. Default is non-publication;
• Site security and integrity: Detecting spam, malicious submissions, and technical faults;
• Legal compliance: Retaining records where required by applicable law or to establish, exercise, or defend legal claims.

We do not sell personal data. We do not use your contact details for unrelated marketing lists. Occasional notes about new journal series or workshop openings are sent only if you have asked to hear about them or already participate in an event.

5. Legal bases under Singapore law

Under the PDPA, we rely on:

• Consent — for optional cookies (Google Maps) and for publishing correspondence;
• Legitimate interests — operating a personal journal, responding to readers, maintaining website security, and improving content based on aggregated, non-identifying feedback;
• Contractual necessity — where you agree to attend a paid or reserved workshop seat and we must confirm your booking;
• Legal obligation — where retention or disclosure is required by law enforcement or court order.

Legitimate interests are balanced against your rights: because we collect minimal categories and avoid profiling, impact on privacy is limited. You may object to processing based on legitimate interests where you provide grounds relating to your particular situation; we will assess and respond accordingly.

You may withdraw consent for optional processing without affecting essential communication about an active enquiry. Withdrawal does not retroactively invalidate processing that was lawful when collected.

6. Sharing and disclosure

We share personal data only in limited circumstances:

• Service providers: Hosting companies, email delivery systems, and map providers (Google) that process data on our instructions to deliver the site;
• Professional advisers: Lawyers or accountants bound by confidentiality, if needed for compliance;
• Legal requirements: When disclosure is necessary to comply with law or protect rights, safety, and property.

We require processors to implement appropriate safeguards and process data only for specified purposes. We do not authorize them to use your data for their independent marketing.

7. International transfers

Our hosting and email infrastructure may store or route data outside Singapore. Where transfers occur, we take steps reasonably necessary to ensure a comparable standard of protection consistent with PDPA requirements, including contractual clauses with vendors where applicable.

8. Retention

We retain personal data only as long as needed for the purposes described:

• Contact form submissions and email threads: typically up to twenty-four months after the last message, unless an ongoing workshop relationship continues;
• Workshop attendance records: up to seven years for financial and dispute-resolution purposes where applicable;
• Server logs: usually rotated or deleted within ninety days unless required for security investigation;
• Published correspondence: remains public until you request removal of your identifying details, subject to editorial notes already integrated into essays.

When data is no longer required, we delete or anonymize it using reasonable technical measures. Anonymized analytics derived from aggregate visit patterns — if ever used — cannot identify individuals and may be retained indefinitely for editorial planning.

9. Your rights

Subject to exceptions under the PDPA, you may:

• Request access to personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Withdraw consent for optional processing such as map cookies or marketing updates;
• Request deletion where we have no overriding legal basis to retain;
• lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore if you believe processing violates applicable law.

To exercise rights, email us with enough detail to verify your identity and locate relevant records. We may request additional confirmation to prevent unauthorized disclosure. We do not charge a fee for reasonable requests but may refuse manifestly excessive or repetitive ones.

10. Security measures

We implement administrative and technical measures appropriate to a small independent site: HTTPS encryption, access-controlled server directories, form validation, honeypot spam filtering, and restricted access to submission logs stored outside public web roots. No online transmission is completely secure; please avoid sending highly sensitive medical or financial identifiers through the contact form.

Staff access to submission logs is limited to Maya Tan and designated technical support engaged under confidentiality obligations. Logs are not used for marketing analytics.

11. Children

This journal addresses a general adult readership. We do not knowingly collect personal data from children under thirteen without parental consent. If you believe a child submitted data without permission, contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or operational changes. Material updates will be posted on this page with a revised "Last updated" date. Continued use of the site after changes constitutes acknowledgment of the updated policy for non-material adjustments; where consent is required for new processing, we will seek it explicitly.

13. Children's privacy

See section 11 above. We encourage parents and educators to guide minors who wish to participate in workshops or send correspondence.

14. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals. Spam filtering on contact forms uses simple technical rules (including honeypot fields) but does not classify users for marketing scoring.

15. Data breach notification

If a personal data breach likely to result in significant harm occurs, we will notify affected individuals and the PDPC where required by Singapore law, describing the nature of the breach, likely consequences, and measures taken or proposed. Notifications will be issued without undue delay after we become aware of the breach, subject to any law enforcement request to delay disclosure for investigative purposes.

16. Records of consent

Where we rely on consent — for map cookies or publishing correspondence — we retain a record of what you agreed to and when, typically through email confirmation or server logs tied to your consent action. You may request a copy of that record.

If consent is withdrawn, we stop the relevant processing promptly and confirm cessation by email where practicable. Historical server logs may still contain technical evidence of the earlier consent event for audit purposes until those logs rotate off according to our retention schedule.

17. Contact

For privacy enquiries or data subject requests, include the email address you used to contact us so we can verify identity. We may ask a reasonable follow-up question if multiple people share a household inbox.

Drift Journal Pro
12 Yong Siak Street, #01-03, Singapore 168641
Email: hello@driftjournalpro.pro
Phone: +65 6221 9182