Privacy notice

This notice explains how StoryBeam (storybeam.life), operated by Rina as a personal journal website, collects and uses personal data when you visit, contact the author, or interact with cookies. StoryBeam is not a company with a boardroom; it is a small publication with a contact address in Kim Keat, Singapore. The obligations under the Personal Data Protection Act 2012 (PDPA) still apply because the site processes personal data in Singapore.

Who is responsible

The data controller for this website is Rina, reachable at [email protected] or Blk 103 Kim Keat Avenue, #03-22, Singapore 310103. Operational email for form delivery may pass through a mailbox used to receive contact submissions. That mailbox is accessed only to respond to messages and maintain the site.

What data we collect

Browsing data. Like most websites, the server may automatically log technical information: IP address, browser type, referring URL, pages viewed, and timestamps. If you accept analytics cookies, a third-party analytics tool may collect similar usage statistics in aggregated form.

Contact form data. When you submit the contact form, we collect the name, email address, optional phone number, subject selection, and message text you provide, plus the fact that you ticked the PDPA consent box.

Cookies. Essential cookies may store your cookie preference choice. Optional cookies, if you accept them, may support analytics, preference memory, or marketing measurement as described in the cookie banner.

StoryBeam does not operate a comment section, newsletter signup, or e-commerce checkout. We do not knowingly collect data from children under thirteen. If you believe a child submitted personal data, contact us and we will delete it promptly.

Why we use your data

We process personal data for these purposes:

• To respond to messages you send through the contact form;
• To maintain security, diagnose technical faults, and prevent abuse (including spam);
• To understand aggregate readership patterns when you consent to analytics cookies;
• To comply with legal obligations if required by Singapore authorities.

We do not sell personal data. We do not buy mailing lists. StoryBeam is not monetised through reader profiling.

Legal basis and consent

Under the PDPA, we rely on consent for optional cookies and for contact form submissions where you tick the consent checkbox. Server logs and essential cookies necessary to operate the site and remember your cookie choice are processed on the basis of legitimate interests in running a secure website. You may withdraw consent for optional cookies at any time by clearing cookies in your browser or using the banner controls when shown.

How long we keep data

Contact form messages are kept in email archives for as long as needed to correspond with you and resolve the inquiry, typically no longer than twenty-four months unless a longer period is required for a ongoing correction dispute or legal matter. Server logs rotate on a schedule determined by the hosting provider, often thirty to ninety days. Analytics data retained by third parties follows their respective policies; we configure retention to the shortest practical window when settings allow.

Who receives your data

Data may be processed by:

• Web hosting and email routing providers that store the site and deliver form messages;
• Analytics providers, only if you accept analytics cookies;
• Email services used to read and reply to [email protected].

These processors act on instructions relevant to hosting and transmission. Some processors may store data outside Singapore. Where overseas transfer occurs, we take reasonable steps to ensure comparable protection consistent with PDPA requirements, including contractual safeguards where available.

Security

No website can guarantee absolute security. We use HTTPS where configured by the host, keep software reasonably updated, and limit mailbox access. Contact forms include a basic honeypot field to reduce automated spam. Do not send sensitive identifiers (NRIC, full bank details, medical records) through the contact form; email is not a secure channel for highly sensitive information.

Your rights

Under the PDPA you may request access to personal data we hold about you, correction of inaccurate data, and withdrawal of consent for optional processing. You may also ask us to stop sending marketing messages — though StoryBeam does not send marketing newsletters at present. To exercise rights, email [email protected] with enough detail for us to locate your record. We may need to verify identity before responding. We aim to reply within thirty days.

Third-party links

Journal posts describe real places but generally do not embed third-party trackers in article bodies. If external links appear, their sites operate under separate policies. Review those sites before submitting personal data to them.

Changes to this notice

We may update this notice when the site adds features or when law changes. The date at the top reflects the latest revision. Continued use after an update constitutes acknowledgement of the revised notice for non-essential processing where consent applies.

Complaints

If you believe we handled personal data improperly, contact us first at [email protected]. You may also lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore if the matter remains unresolved.

This notice was prepared for a personal blog with modest data flows. It is written in plain language on purpose — legal text should be readable without a decoder ring. If anything here is unclear, say so via the contact form and I will clarify.