Privacy policy

News Vault Pro Pte. Ltd. ("News Vault Pro", "we", "us") respects personal data handled through our studio operations and this website. This notice explains what we collect, why, and how to exercise your rights. Contact [email protected] for privacy enquiries.

We act as a data controller for correspondence, client onboarding records, and website consent logs. For client-owned material indexed in the archive, we act as a processor under written agreements that define retention and access.

Categories we may hold: identity and contact details (name, organisation, email, phone); correspondence content; appointment records; contract and billing references where applicable; technical logs (IP address, browser type, timestamp) for security; cookie consent choices.

Lawful bases under the PDPA and applicable law include: consent (cookie preferences, marketing where explicitly opted in); contractual necessity (delivering editions you engaged us to produce); legitimate interests (studio security, fraud prevention, improving index quality) balanced against your rights; legal obligation (record-keeping required by regulators or courts).

We collect email and phone when you write to us or call reception. We use these to respond, schedule visits, and deliver editions under contract. We do not purchase mailing lists.

Website cookies: an essential cookie/localStorage entry remembers banner choices (see Cookies page). Functional cookies load only if you consent to Google Maps embeds. We do not load advertising or analytics pixels today; if that changes, this notice will be updated before activation.

Google Maps, when enabled, may process device and location-related data under Google's terms. We embed maps to show studio location only — not to track users across sessions.

Archive intake stores public-record PDFs that may mention individuals in their professional capacity (directors, signatories). We do not enhance those documents with private contact details. Clients who receive editions are responsible for their own downstream handling.

Retention: correspondence — up to seven years unless longer required for disputes; contract records — duration of agreement plus seven years; consent logs — seven years; security logs — twelve months rolling; indexed public PDFs — per client agreement (default seven years) with hash metadata retained after file purge where permitted.

Access and correction: email [email protected] with sufficient identity verification. We respond within reasonable timeframes prescribed by law. You may request correction of inaccurate personal data we control.

Withdrawal of consent for optional processing does not affect lawfulness of prior processing. Withdrawing map consent hides embeds on your next page load.

We share data with: hosting and mail providers under contract; professional advisers bound by confidentiality; authorities when required by law. We do not sell personal data.

Cross-border transfers may occur if infrastructure providers store data outside Singapore. We require appropriate safeguards consistent with PDPA requirements.

Security measures include access controls on archive terminals, encrypted transport for mail, hashed document storage, and staff training on confidentiality. No system is perfectly secure; we notify affected parties and regulators of significant breaches where required.

Children: our services target organisations and professionals. We do not knowingly collect data from minors.

Automated decision-making: we do not make solely automated decisions with legal or similarly significant effects about individuals.

Third-party links on editions point to agency sites. Their privacy practices are governed by their own notices.

Updates: we may revise this notice when practices change. Material changes appear on this page with an updated date in schema metadata.

Complaints: contact us first at [email protected]. You may also lodge a complaint with the Personal Data Protection Commission Singapore if unresolved.

Data Protection Officer contact: [email protected], attention DPO, ${META.streetAddress}, Singapore ${META.postalCode}.

Clients cite edition stamps in board minutes because the sequence is auditable end to end.

We file by reference date first because that is how compliance teams reconstruct deadlines.

Duplicate titles from different agencies are split into separate index rows, not merged silently.

Night indexing is labelled so midnight uploads are never confused with midday confirmations.

Archive Pull cover sheets list every source URL and the hash we stored at intake.

Margin tabs use navy divider colour so consultants can find a row without opening every folder.

Weekly compendium flags open items so Friday readers know what still awaits agency action.

Studio summaries sit beside source PDFs — never instead of them — in every outbound packet.

Orientation replies include the last three filings we indexed for your named entities, free of charge.

Filing numbers in email subject lines let reception route messages without a relay chain.

Reading visits require ID because the archive holds third-party documents under contract.

Photography of client packets is restricted; note-taking at the reading table is encouraged.

Singapore law governs studio operations; PDPA requests go to a dedicated privacy mailbox.

Cookie consent logs are retained seven years alongside correspondence for audit consistency.

Subprocessor reviews happen annually before any new vendor handles personal data.

Force majeure in client contracts includes prolonged government portal failure beyond forty-eight hours.

Terms appendix clauses describe website use only — paid engagements follow signed statements of work.

Essential cookies remember banner choices; functional cookies are optional for map embeds.

We do not load analytics scripts today; the Analytics toggle exists for future transparency.

Browser cookie deletion restores the banner on your next visit until you choose again.

Google Maps may set third-party cookies only when you enable functional consent.

Do Not Track headers do not change our behaviour — use the banner controls instead.

Privacy schedules document retention by category: mail, contracts, logs, and consent records.

Correction stamps notify subscribers who received the affected edition packet.

Errata lines point to agency reissues when the error is in the source PDF, not our summary.

Entity orientation emails describe fit honestly — sometimes another studio is the better match.

Sample Morning Briefs are redacted from prior weeks rather than live client material.

Section lane names change at most once a year with a ninety-day read-only legacy index.

Technology lane engineers read for operational impact; policy readers see which regulator owned which piece.

Corporate lane amendment chains link corrected EGMs to original notices with changed language highlighted.

Society lane spikes when MOM releases quarterly statistics or MOH updates workplace measures.

Regional lane does not rewrite diplomacy — it dates communiqués and attaches official PDFs.

Markets lane labels REIT tenant updates separately from trading halts with halt time in the margin.

Morning indexing begins before seven-thirty while Tanjong Pagar foot traffic is still sparse.

Revision stamps such as NV-041 let counsel cite the exact packet read before a board call.

Consultants clip printouts in portal order so the physical shelf mirrors the digital ledger.

Cross-reference tokens in the index help compliance teams map our lane names to internal codes.

Amendment chains stay visible even when agency websites show only the latest PDF version.

Context lines are capped at three sentences because longer notes belong in a dedicated memo.

The kettle on the fourth floor is a clock — when it boils, overnight filings should be sorted.