This Privacy Policy explains how Daniel ("I", "me", "my") operating the website MindPush at https://mindpush.life ("the Site") collects, uses, discloses, and protects personal data. I am committed to handling your information responsibly and in compliance with the Personal Data Protection Act 2012 of Singapore ("PDPA") and its subsidiary legislation.
1. Who is responsible for your data
The data controller for personal data collected through this Site is:
Daniel
MindPush
Blk 205 Choa Chu Kang Central, #02-14
Singapore 680205
Email: [email protected]
Phone: +65 6228 4274
If you have questions about this policy or wish to exercise your rights under the PDPA, contact me using the details above. I will respond within a reasonable timeframe, typically within thirty calendar days.
2. What personal data I collect
The Site is a personal blog. I collect only the data necessary to operate it and respond to enquiries. Depending on how you interact with the Site, I may collect:
- Contact form data: your name, email address, and the content of your message when you submit the contact form.
- Technical data: IP address, browser type, device type, operating system, referring URL, pages viewed, and approximate access times — typically collected automatically through server logs or analytics tools if you consent to them.
- Cookie data: preferences you save through the cookie banner, stored locally in your browser.
I do not operate user accounts, newsletters, or e-commerce on this Site. MindPush is aimed at adult readers. I do not ask for, and do not wish to receive, contact-form submissions from anyone below the age of thirteen. If you are a parent or guardian and think a young person sent me a message, write to me and I will remove it.
3. How I collect personal data
Personal data is collected in the following ways:
- Directly from you when you fill in and submit the contact form, including when you tick the PDPA consent checkbox.
- Automatically when you visit pages on the Site, through standard web server logs maintained by my hosting provider.
- Through cookies when you allow optional measurement cookies on the banner. Basic cookies needed to run the site may still be set without that choice.
The contact form includes a hidden honeypot field to deter automated spam. Bots that fill this field are silently redirected without processing their submission.
4. Purposes of collection, use, and disclosure
I collect and use personal data only for purposes that a reasonable person would consider appropriate in the circumstances, and only where I have a valid basis under the PDPA. These purposes include:
- Reading and responding to messages you send through the contact form.
- Maintaining the security and integrity of the Site, including detecting abuse and preventing spam.
- Understanding aggregate readership patterns if you consent to analytics cookies — for example, which pages are visited most often.
- Complying with applicable laws, regulations, or lawful requests from authorities.
I do not sell, rent, or trade your personal data to third parties for marketing purposes. I may disclose data to:
- My hosting and email service providers, who process data on my behalf to deliver the Site and relay contact form messages.
- Analytics providers, only if you have consented to analytics cookies.
- Law enforcement or regulatory bodies when required by law or to protect legal rights.
5. Consent and your choices
Under the PDPA, I rely on your consent for collecting personal data through the contact form. Submission of the form requires you to tick a checkbox confirming consent to collection and use as described in this policy. You may withdraw consent at any time by emailing me, though withdrawal may limit my ability to respond to prior enquiries.
For cookies, the Site displays a banner on first visit allowing you to accept all cookies, Reject all cookies, or customise preferences. Non-essential analytics cookies are not placed unless you opt in. You can also clear cookies through your browser settings at any time.
6. Retention of personal data
I retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. Contact form messages are typically retained for up to twenty-four months unless a longer period is needed to resolve an ongoing conversation or legal matter. Server logs may be retained according to my hosting provider's standard rotation schedule, generally between thirty and ninety days.
When data is no longer needed, I take reasonable steps to delete or anonymise it.
7. Protection of personal data
I implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include HTTPS encryption for data in transit, access controls on server environments, and limiting access to contact form submissions to myself.
No method of transmission over the Internet is completely secure. While I strive to protect your data, I cannot guarantee absolute security.
8. Transfer of data outside Singapore
My hosting or email providers may store or process data on servers located outside Singapore. Where personal data is transferred overseas, I take steps to ensure that the recipient provides a standard of protection comparable to that under the PDPA, either through contractual clauses or by transferring only to jurisdictions with adequate protection as recognised under applicable law.
9. Your rights under the PDPA
Subject to exceptions under the PDPA, you have the right to:
- Access personal data about you that is in my possession or under my control.
- Correct personal data that is inaccurate or incomplete.
- Withdraw consent for the collection, use, or disclosure of your personal data, with reasonable notice.
- Request information about how your data has been used or disclosed within the past year.
To make a PDPA request, send a note to [email protected] describing what you need. I may ask for a few details to confirm the message is really from you. Where the Act allows, a modest administrative charge could apply to access requests.
10. Third-party links
The Site may contain links to external websites. I am not responsible for the privacy practices or content of those sites. I encourage you to read the privacy policies of any third-party sites you visit.
11. Updates to this policy
I may update this Privacy Policy from time to time to reflect changes in law, technology, or Site practices. The "Last updated" date at the top of this page will indicate when revisions were made. Material changes will be noted on the Site where practicable. Continued use of the Site after an update constitutes acceptance of the revised policy, to the extent permitted by law.
12. Contact and complaints
For privacy questions or complaints, reach me first at [email protected]. I will look into the matter and reply in plain language. If we still cannot resolve it, Singapore's data regulator accepts complaints at pdpc.gov.sg.