Privacy Policy

Overview

This privacy policy explains how I, Jonah, operate Voice Craft Pro at voicecraftpro.pro as a personal blog based in Singapore. I am the data controller for personal data collected through this website. The site is not operated by a company, agency, or partnership. Correspondence address: 32 Kallang Pudding Road, #03-05, Singapore 349313. Email: [email protected]. I aim to handle personal data in line with the Personal Data Protection Act 2012 (PDPA) and good practice for a small, non-commercial publication.

By using this website or contacting me, you acknowledge this policy. If you disagree, please discontinue use and avoid submitting forms. I may update this policy when practices change; the revision date appears at the bottom. Material changes will be noted here rather than by unsolicited email, because this site does not operate a newsletter database.

This policy applies only to voicecraftpro.pro and not to external sites linked from journal entries or footers. Those sites maintain their own notices. When I link to a map provider, article, or public resource, their collection practices begin once you leave this domain.

What data I collect

Contact form: When you submit the contact form, I receive the fields you choose to provide—typically name, email address, optional company or subject line, message body, and your consent confirmation. I do not require accounts or profiles to read the journal.

Technical logs: The web server may automatically record standard information such as IP address, browser type, referring page, and timestamps in access logs. These logs help diagnose errors and understand aggregate traffic. I do not use them to build individual profiles.

Cookies and similar technologies: Essential cookies may store your cookie consent choice. Optional analytics cookies, if you accept them, collect aggregated usage data as described in the cookie policy. Google Maps embeds on contact and related pages may set third-party cookies according to Google's policies.

Correspondence: If you email [email protected] directly, I retain the content and your email address in my mailbox until the conversation concludes or you request deletion.

I do not collect NRIC numbers, passport numbers, payment card details, or precise geolocation through this site. Please do not include them in messages. If you voluntarily share more than necessary, I will delete extraneous sensitive fields when noticed, but prevention on your side remains the safest approach.

Purposes of collection

I collect personal data only for purposes a reasonable person would consider appropriate for a personal blog: responding to messages, correcting factual details readers submit, complying with law, maintaining site security, and—if you consent—understanding aggregated readership patterns to improve layout and navigation. I do not sell personal data. I do not purchase mailing lists. I do not use contact details for unrelated marketing.

Consent recorded on the contact form is explicit: you confirm you agree to this policy before submission. You may withdraw consent for optional analytics cookies through the cookie banner or by clearing site data in your browser. Withdrawal does not affect the lawfulness of processing before withdrawal.

Legal bases under the PDPA include consent for optional analytics, legitimate interests for security logging and responding to inquiries you initiate, and legal obligation where retention is required. Legitimate interests are applied narrowly—I do not use them as a blanket excuse to profile readers.

Disclosure and processors

Hosting and infrastructure providers process server logs and form submissions on my behalf under their standard terms. Email delivery may transit third-party mail servers. Google Maps receives interaction data when you load map embeds. I do not disclose personal data to advertisers because this site does not carry advertising networks.

I may disclose data if required by Singapore law, court order, or to protect rights and safety where disclosure is reasonable and proportionate. I will not share correspondence contents publicly without your permission except when anonymised illustrations are discussed with you first.

Processors I rely on may include web hosting providers, TLS certificate authorities, email transport services, and the analytics vendor if enabled. I select vendors with published security statements and limit shared data to what each service requires to function. A list of categories is available on request to [email protected].

Retention

Contact form submissions are emailed to me and retained in my inbox according to practical need—typically until answered and filed or deleted. Server access logs rotate on a schedule determined by the hosting provider, often between thirty and ninety days unless longer retention is required for security investigation.

Cookie consent preferences are stored locally in your browser for up to six months, after which the banner may ask again. Analytics data, if enabled, is retained according to the analytics provider's aggregation settings; I configure retention toward the shortest practical window.

Security

No internet transmission is perfectly secure. I use HTTPS, keep software reasonably updated, and limit administrative access to myself. Form submissions include basic rate limiting and bot deterrence. Despite these measures, you should avoid sending highly sensitive identifiers or financial details through the contact form because this channel is not designed for them.

If I become aware of a data incident affecting personal data I control, I will assess scope promptly, mitigate ongoing exposure, notify affected individuals where required by law, and document remedial steps. Given the small scale of this site, incidents are unlikely, but the procedure exists nonetheless.

Your rights under the PDPA

Subject to exceptions in the PDPA, you may request access to personal data I hold about you, ask how it has been used or disclosed in the past year, request correction of inaccurate data, and withdraw consent for optional processing such as analytics cookies. You may also request deletion of correspondence where I no longer require it for the purpose collected.

To exercise these rights, email [email protected] with subject "PDPA request", include enough detail for me to locate your data, and specify the right you wish to exercise. I will respond within a reasonable period, typically within thirty days. I may need to verify identity before releasing or changing records.

If you believe I have handled personal data contrary to the PDPA, you may contact the Personal Data Protection Commission of Singapore after giving me a reasonable opportunity to address your concern.

Access requests may result in redaction of other individuals' names or email addresses contained in the same thread. Correction requests should specify inaccurate fields. If I cannot verify your identity from the requesting email, I may ask for reasonable confirmation before releasing records.

International transfers

Hosting, email, analytics, and map services may process data on servers outside Singapore. Where providers transfer data internationally, they rely on contractual safeguards or frameworks described in their own policies. By using those features, you understand limited data may cross borders for technical operation.

You may decline optional services that involve cross-border processing by rejecting analytics cookies and avoiding interaction with embedded maps. Essential hosting will still involve some international routing because internet infrastructure is distributed by nature.

Children

This site is intended for general readers and is not directed at children under thirteen. I do not knowingly collect personal data from children. If you believe a child has submitted personal data through the contact form, notify me and I will delete it promptly.

Changes and contact

Last updated: 7 August 2026. Questions about this policy: [email protected] or postal mail to 32 Kallang Pudding Road, #03-05, Singapore 349313. This document replaces earlier informal notices if any existed.

Plain-language summary: I collect what you send me, basic server logs, and optional analytics if you agree. I use it to run a personal blog, reply, and keep the site secure. I do not sell data. Ask me anytime to access or delete correspondence. The full sections above govern if this summary and they differ.