Privacy Policy

Our Commitment to Privacy

Time Craft is committed to protecting your privacy and personal data. This policy explains how we collect, use, store, and protect your information when you use our photo restoration services or visit our website. We recognize that family photographs often contain sensitive personal information and we treat all client data with appropriate care and confidentiality.

This privacy policy applies to all services provided by Time Craft and governs our data collection and usage practices in accordance with Singapore's Personal Data Protection Act 2012 and applicable international privacy regulations.

Information We Collect

Personal Information You Provide

When you contact us or use our services, we collect:

• Contact Information: Name, email address, phone number, mailing address
• Service Information: Details about your restoration project, photograph condition assessments
• Payment Information: Billing address and payment details (processed securely through third-party providers)
• Communication Records: Correspondence with our team, consultation notes, project specifications

Information Collected Automatically

When you visit our website, we automatically collect:

• Usage Data: IP address, browser type, device information, pages visited
• Analytics Data: Website interaction patterns, navigation paths, time on pages
• Cookie Data: Preferences and session information (see our Cookie Policy)

How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: Processing restoration projects, communicating about service status, delivering completed work
• Quality Assurance: Maintaining restoration records, documenting treatment decisions, ensuring service quality
• Communication: Responding to inquiries, providing project updates, sending service-related information
• Business Operations: Processing payments, maintaining records for tax and legal compliance, managing appointments
• Website Improvement: Analyzing usage patterns, improving user experience, optimizing website performance
• Marketing: Sending promotional communications (only with your consent, and you may opt out at any time)

Legal Basis for Processing

We process your personal data based on:

• Consent: For marketing communications and optional data processing activities
• Contract Performance: To provide requested restoration services and fulfill our contractual obligations
• Legitimate Interest: For business operations, fraud prevention, and service improvement
• Legal Obligation: For tax compliance, regulatory requirements, and legal record-keeping

Data Retention

We retain your personal data for the following periods:

• Contact Form Submissions: 3 years from last contact
• Service Records: 5 years after project completion for quality assurance and reference
• Financial Records: 7 years as required by Singapore tax regulations
• Marketing Data: Until consent is withdrawn or data is no longer relevant
• Digital Photograph Files: Retained as specified in service agreement, with secure deletion upon request

After retention periods expire, we securely delete or anonymize personal data unless longer retention is required by law.

Data Security

We implement comprehensive security measures to protect your personal data:

• Encryption: SSL/TLS encryption for data transmission, encrypted storage for sensitive information
• Access Controls: Limited access to personal data based on job requirements and responsibilities
• Physical Security: Secure storage facilities with environmental controls and monitoring systems
• Digital Security: Firewalls, antivirus protection, regular security updates, secure backup systems
• Staff Training: Regular privacy and security training for all team members
• Breach Response: Procedures for detecting, responding to, and reporting security incidents

While we implement strong security measures, no internet transmission or electronic storage method is completely secure. We cannot guarantee absolute security but maintain industry-standard protections for your data.

Data Sharing and Third Parties

We may share your personal data with:

• Service Providers: Payment processors, cloud storage providers, website hosting services
• Professional Advisors: Legal, accounting, and insurance professionals as needed
• Legal Authorities: When required by law, court order, or government regulation
• Business Transfers: In the event of merger, acquisition, or sale of business assets

We do not sell, rent, or trade your personal data to third parties for marketing purposes. All third-party service providers are required to maintain appropriate security and confidentiality standards.

Note: We never share your family photographs with third parties except as necessary to provide restoration services, and all such sharing is conducted under strict confidentiality agreements.

Your Privacy Rights

Under Singapore's Personal Data Protection Act and applicable privacy laws, you have the following rights:

• Right to Access: Request copies of personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Data Portability: Receive your personal data in a structured, commonly used format
• Right to Object: Object to processing of your personal data for certain purposes
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Lodge Complaints: File complaints with Singapore's Personal Data Protection Commission

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days.

Photograph-Specific Privacy

We recognize that family photographs contain sensitive personal information requiring special protection:

• All photographs are treated as strictly confidential throughout the restoration process
• Digital files are stored on encrypted systems with controlled access
• We never display, share, or use client photographs for marketing without explicit written permission
• Physical photographs are tracked carefully and stored securely during restoration work
• Project files and digital photographs are permanently deleted upon request after project completion
• Backup copies maintained for service records are subject to the same security and confidentiality standards

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete such information promptly.

International Data Transfers

We primarily store and process data within Singapore. If we need to transfer data internationally (such as to cloud storage providers), we ensure appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, or other legally approved transfer mechanisms.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated through our website or directly to active clients. The "Last Updated" date at the top of this policy indicates the most recent revision. Continued use of our services after policy changes constitutes acceptance of the updated terms.

Contact Information

For privacy-related questions, concerns, or to exercise your privacy rights, please contact us:

For complaints or concerns about our privacy practices, you may also contact Singapore's Personal Data Protection Commission at www.pdpc.gov.sg