.svg)
Contents
- Data Controller Contact
- Types of Data We Collect
- Legal Bases for Processing (GDPR, PDPA, PIPL)
- Use of Personal Information
- Cookies and Tracking Technologies
- Your Rights
- Children's Data
- Data Security
- Data Retention
- Data Transfers Outside Your Country
- Sharing of Personal Data
- Contact Us
1. Data Controller Contact
If you have any questions or requests regarding this Privacy Policy or your personal data, you may contact:
Spark & Burn
Email: contact@sparknburn.com
Address: 10 Anson Road,
#20-05 International Plaza,
Singapore 079903
Spark & Burn
Email: contact@sparknburn.com
Address: 10 Anson Road,
#20-05 International Plaza,
Singapore 079903
2. Types of Data We Collect
We may collect the following categories of personal information:
- Personal identifiers: Full name, email address, phone number, address, job title
- Account details: Login credentials, billing details, preferences
- Technical data: IP address, browser type, device information, operating system
- Usage data: Pages visited, time spent on site, links clicked
- Transaction data: Orders placed, payment method, invoice information
- Marketing data: Preferences for receiving communications
Sensitive personal data (PIPL-specific): Only where necessary, and with explicit consent (e.g., location, ID numbers)
3. Legal Bases for Processing (GDPR, PDPA, PIPL)
We process personal data only where we have a valid legal basis to do so, such as:
- Consent (opt-in mechanisms for marketing, cookies, and sensitive data)
- Performance of a contract (e.g., fulfilling purchases or service requests)
- Legal obligation (e.g., tax records, anti-fraud compliance)
- Legitimate interests (e.g., site improvement, customer support), unless overridden by your rights
- Explicit consent is required for sensitive data and international transfers under the PIPL
4. Use of Personal Information
Your data may be used to:
- Process orders and provide services
- Respond to inquiries or customer support requests
- Send marketing communications (if opted in)
- Improve our website, services, and user experience
- Fulfill legal or regulatory obligations
- Prevent fraud and ensure data security
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our websites.
- Cookies may collect non-personal data such as browser type, pages visited, and time spent
- You may adjust your browser settings to block or delete cookies at any time
Our use of third-party cookies (e.g., Google Analytics) is governed by GDPR-compliant contracts and PDPA/PIPL obligations
6. Your Rights
Depending on your jurisdiction, you may exercise the following rights:GDPR (EU):
- Right to access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
PDPA (Singapore):
- Right to access personal data
- Right to correct personal data
- Right to withdraw consent
- Right to know the purposes of collection and use
PIPL (China):
- Right to know and decide about processing
- Right to restrict or refuse processing
- Right to access and copy personal data
- Right to correct or delete personal data
- Right to request data portability (where technically feasible)
- Separate explicit consent is required for:
- Sensitive personal data
- Cross-border transfers
- Public disclosure of personal data
- Automated decision-making
To exercise your rights, contact us at: contact@sparknburn.com
7. Children's Data
Our services are not intended for children under the age of 14. If we discover that we have collected personal data from a minor without parental or legal guardian consent, we will delete it promptly.
8. Data Security
We implement appropriate technical and organizational security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction. These include:
- SSL encryption
- Access controls
- Regular security audits
- Data minimization practices
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal obligations. When no longer needed, we securely delete or anonymize the data.
10. Data Transfers Outside Your Country
If personal data is transferred outside the European Economic Area (EEA), Singapore, or China:
- We ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) under the GDPR
- For Chinese residents, cross-border transfers are made only after obtaining separate, explicit consent and fulfilling the conditions required under the PIPL (e.g., security assessments or certifications)
11. Sharing of Personal Data
We do not sell personal data. We may share your data with:
- Authorized service providers or contractors
- Payment processors
- Regulatory authorities (as required by law)
- Affiliate or partner companies (with consent, where required)
All third parties are required to protect your data in accordance with this policy and applicable data protection laws.
12. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. If material changes are made, we will provide prominent notice or request renewed consent if required by law.
13. Contact Us
For any questions, complaints, or to exercise your data rights, please contact:
Spark & Burn
Email: contact@sparknburn.com
Address: 10 Anson Road,
#20-05 International Plaza,
Singapore 079903
Spark & Burn
Email: contact@sparknburn.com
Address: 10 Anson Road,
#20-05 International Plaza,
Singapore 079903
.svg)
