DWHQ Privacy Policy

DW HQ Pte. Ltd. ("DWHQ") collects only the personal data it needs to answer enquiries, deliver client work and recruit, and protects it in line with Singapore's Personal Data Protection Act 2012 ("PDPA").

1. About this policy

This policy explains how DWHQ collects, uses, discloses and protects personal data. It applies when you visit www.dwhq.com.sg, contact us, work with us as a client or supplier, or apply for a role with us.

"DWHQ", "we", "us" and "our" mean DW HQ Pte. Ltd., Marina Bay Financial Centre Tower 1, 8 Marina Boulevard, Level 11, Singapore 018981.

By giving us your personal data, you agree to it being handled as this policy describes.

2. Personal data we collect

We collect personal data in four situations:

  • Enquiries: when you complete the "Start Your Conversation" form on our website, email or call us, we collect your name, email address, phone number, company name and the project details you choose to share.

  • Clients and suppliers: the names, job titles and business contact details of the people we work with, and records of our correspondence and meetings.

  • Job applicants: when you apply to jobs@dwhq.com.sg, we collect your contact details, CV, portfolio and anything else you include in your application.

  • Website visitors: technical data such as your IP address, browser, device and the pages you visit, collected through cookies on our website (see section 8).

Please do not send us sensitive personal data, such as NRIC numbers, health or financial information, unless we specifically ask for it.

3. How we use your personal data

We use personal data only for these purposes:

  • responding to your enquiry and preparing proposals and quotations;

  • delivering and managing our services, including project communication, invoicing and payment;

  • assessing job applications and, if you agree, contacting you about future roles;

  • operating, securing and improving our website;

  • sending you news about DWHQ's work, but only if you have agreed to receive it; and

  • meeting our legal, accounting and regulatory obligations.

We do not sell personal data, and we do not use it for any purpose we have not told you about without first asking for your consent.

4. Who we share it with, and where it is stored

We share personal data only where it is needed for the purposes in section 3:

  • Service providers who help us run our business, such as our website platform (Squarespace) and our email, file storage and accounting providers. They may use the data only to provide their services to us.

  • Professional advisers, such as our accountants, auditors and lawyers, who are bound by confidentiality.

  • Authorities, where the law requires us to disclose it.

Our website is hosted by Squarespace, Inc., which stores and processes data in the United States and other countries. Some of our other service providers may also store data outside Singapore. When personal data is transferred outside Singapore, we make sure the recipient is bound by legally enforceable obligations, such as contractual terms, to protect it to a standard comparable to the PDPA.

5. Personal data we handle for clients

We design, host and maintain websites for our clients. When we handle personal data on a client's behalf, such as enquiries submitted through a client's website forms, we act as a data intermediary under the PDPA.

In that role, we process the data only on the client's instructions and under our written agreement with them. We protect it, keep it only as long as the agreement allows, and tell the client promptly if a data breach occurs.

The client's own privacy policy governs how that data is used. If you contact us about personal data we hold for a client, we will pass your request to that client and help them respond.

6. How we protect your personal data

We make reasonable security arrangements to protect personal data from unauthorised access, use, disclosure, copying, alteration or loss. These include:

  • limiting access to staff and contractors who need it for their work;

  • individual accounts with strong passwords and two-step verification;

  • encrypted (HTTPS) connections on our website;

  • written confidentiality obligations for our staff and contractors; and

  • removing access promptly when it is no longer needed.

No system is completely secure. If a data breach occurs, we will contain it and assess it promptly. Where the breach is likely to cause significant harm, or affects 500 or more people, we will notify the Personal Data Protection Commission within three calendar days of making that assessment, and notify affected individuals where the PDPA requires.

7. How long we keep your personal data

We keep personal data only as long as we need it for the purposes in section 3, or as the law requires:

  • Enquiries that do not lead to a project: 12 months after our last contact.

  • Client and supplier records: for the length of our relationship, then up to five years for accounting, tax and legal purposes.

  • Job applications: 12 months, so we can consider you for future roles, unless you ask us to delete them sooner.

  • Personal data we handle for clients: for the period set out in our agreement with each client.

When we no longer need personal data, we securely delete it or anonymise it.

8. Cookies and analytics

Our website uses cookies, which are small files stored on your device. Some are needed for the website to work. Others help us understand how visitors use the site, such as which pages are viewed most, so we can improve it.

These cookies are set by our website platform, Squarespace. You can block or delete cookies in your browser settings, although some parts of the website may then not work properly.

9. Your rights

You can contact our Data Protection Officer (section 10) to:

  • Access the personal data we hold about you, and find out how it has been used or disclosed in the past year. We may charge a reasonable fee for this, and will tell you the amount before we proceed.

  • Correct personal data that is inaccurate or incomplete, free of charge.

  • Withdraw your consent to our use of your personal data. We will explain any consequences, for example that we may no longer be able to provide a service, and will stop within a reasonable time.

  • Unsubscribe from any news we send you, using the link in the email or by contacting us.

  • Make a complaint about how we have handled your personal data.

We will verify your identity before acting on a request. We aim to respond within 30 days; if we need longer, we will tell you within that time when you can expect a reply. If you are not satisfied with our response, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.

10. Contact our Data Protection Officer

For any question, request or complaint about your personal data, please contact:

Data Protection Officer, DW HQ Pte. Ltd.

  • Email: hello@dwhq.com.sg (subject: "Attention: Data Protection Officer")

  • Phone: +65 6931 5016

  • Address: Marina Bay Financial Centre Tower 1, 8 Marina Boulevard, Level 11, Singapore 018981

We may update this policy from time to time. The latest version will always be on this page.