Privacy policy.
FlashLion takes its responsibilities under Singapore's Personal Data Protection Act (PDPA) and the EU and UK General Data Protection Regulation (GDPR) seriously. This policy explains what personal data we collect, what we do with it, who else handles it, and the rights you have over it.
Effective 13 June 2026
1. Who we are
FlashLion is a brand strategy, creative studio and AI marketing consultancy operated by Feltan Associates Pte Ltd (UEN 202225620G), a company incorporated in Singapore with its registered office at 1 Raffles Place, #03-21 One Raffles Place Mall, Singapore 048616. References to “FlashLion”, “we”, “our” or “us” mean Feltan Associates Pte Ltd acting under the FlashLion brand. We are the data controller for personal data processed through this website and through our consultancy work, except where this policy says otherwise.
2. Personal data we collect
2.1 Information you give us
You may provide personal data when you:
- Submit the “Book Consultation” or any contact form on this website (your name, company, email, phone, budget and the content of your message).
- Correspond with us by email, phone or in person about a potential or live engagement.
- Engage us as a client, where we process the information needed to deliver the work (including brand, marketing and campaign materials).
2.2 Information collected automatically
Our website sets only strictly necessary cookies required to operate the site, plus any analytics you consent to. See our cookie policy for detail.
3. How we use personal data
We use personal data only for the purposes for which it was collected and closely related purposes, including to:
- Respond to enquiries and arrange consultations.
- Deliver, manage and improve our consultancy services.
- Send relevant updates where you have asked to hear from us (you can opt out at any time).
- Comply with our legal obligations and protect our legitimate business interests, including fraud prevention and the defence of legal claims.
Where the GDPR applies, our lawful bases are your consent, the performance of a contract or pre-contractual steps at your request, compliance with legal obligations, and our legitimate interests in operating the business.
4. Who we share personal data with
We share personal data only where necessary, with:
- Service providers acting as our processors, including Vercel Inc. (website hosting), Supabase Inc. (database hosting), and Resend, Inc. (transactional email). Each is bound by a written agreement requiring appropriate safeguards.
- Authorities where we are required by law to disclose information.
- Professional advisers, such as auditors and lawyers, where reasonably required.
We do not sell personal data, and we do not share it with third-party advertising networks.
5. International transfers
Some providers process personal data outside Singapore (for example, the United States and the European Economic Area). Where personal data leaves Singapore, we take reasonable steps to ensure a comparable standard of protection, including Standard Contractual Clauses or equivalent safeguards.
6. How long we keep personal data
We retain personal data only for as long as needed for the purpose for which it was collected, or as required by law - typically the life of an engagement plus a reasonable period for audit and legal purposes, and until you withdraw consent for marketing correspondence.
7. Your rights
Subject to applicable law, you have the right to:
- Request access to the personal data we hold about you.
- Ask us to correct inaccurate or incomplete personal data.
- Withdraw any consent you have given us.
- Object to processing based on our legitimate interests, and to direct marketing.
- Request deletion where there is no overriding legal or business reason to retain it.
- Lodge a complaint with the Personal Data Protection Commission of Singapore, or your local data protection authority if the GDPR applies.
8. Security
We use reasonable administrative, technical and physical safeguards to protect personal data. No system is impenetrable; we will notify you and the appropriate authorities of a notifiable data breach as required by law.
9. Changes to this policy
We may update this policy from time to time. The current version and its effective date will always appear on this page.
10. How to contact us
The data protection contact for Feltan Associates Pte Ltd is reachable at hello@flashlion.com or by post at the registered office address above.
