Skip to content
KOL Digital Singapore

Legal

Privacy Policy

This policy explains what personal data KOL Digital collects through this site, why we collect it, how long we keep it, and the choices you have. It is written to meet our obligations under Singapore's Personal Data Protection Act 2012 (PDPA).

Effective 5 November 2026

Who we are

KOL Digital (SG) Pte. Ltd. ("KOL Digital", "we", "us") is an influencer marketing agency registered in Singapore, at 68 Circular Road #02-01, Singapore 049422. We are the organisation responsible for the personal data described in this policy.

What we collect

Almost everything we hold is what you type into one of our three forms. The rest is the ordinary technical record of a visit.

If you contact us

Your name, email address and phone number, your company if you give it, and your message.

If you ask for a quote

Your name, email address, phone number and company. You may also tell us the platforms and creator sizes you have in mind, your budget, a launch date, a description of the campaign, reference links and a preferred time for a call, and you may attach a brief.

If you apply as an influencer

This form asks for more, because it is an application to be represented: your name, home address, email address and phone number; your date of birth and IC or passport number; your gender and ethnicity; your usernames and profile links on the platforms you use, your follower count and a screenshot of your profile; the languages you speak and your skills; and a recent portfolio or a photograph of yourself.

Collected automatically

Our hosting provider keeps standard server logs, which include your IP address, your browser and the page you came from, for security and to keep the site running. When you send the quote form, the page you arrived from is sent with it, so we know how you found us.

We use Google Analytics and Google Ads to understand how visitors find and use this site and how well our advertising works. They record things such as the pages you view, roughly where you are, your device and browser, the site or ad that brought you here, and that a form was sent. They do not receive what you type into a form. We do not buy personal data or obtain it from data brokers or list vendors.

Whether you have to give it to us

Providing personal data to us is entirely voluntary. Nothing on this site obliges you to send us anything.

Each form marks the fields it needs: without a name and a way to reach you, we cannot reply, and an application cannot be assessed without the details it asks for. Everything marked optional can be left out. If you would rather not use a form at all, you can email us instead.

Why we use it

Enquiries and quote requests are used to reply to you, scope and price a campaign, arrange a call if you asked for one, and keep a record of our correspondence.

Applications are used to assess whether we can represent you and, if we work together, to put you forward to brands for campaigns. Your date of birth and IC or passport number confirm who you are and that you are old enough to contract. Your gender, ethnicity, languages and skills are used to match you with campaigns whose briefs ask for them.

Server logs are used to keep the site secure and working.

Google Analytics and Google Ads data is used to improve the site, to see which advertising brings enquiries, and to show our ads to people who have visited before. We do not sell personal data to anyone.

Consent

When you send us your details through a form, the PDPA treats that as consent for us to use them for the purposes above. This policy is the notification of purpose that goes with it.

You can withdraw consent at any time by writing to us at the address below. We will act on it within a reasonable time, though withdrawing while a campaign or an application is in progress may mean we cannot continue with it.

How long we keep it

We keep enquiries, quote requests and applications, and any file you attached, only for as long as we need them for the reason you sent them to us, or for as long as the law requires. When that ends, we delete them.

So that a message is not lost if an email fails to arrive, our hosting provider also keeps a backup copy of each form you send for 6 months, after which it is deleted automatically. The backup never includes files you attach, and for influencer applications it leaves out your identity number, date of birth, ethnicity and home address.

Server logs are kept by our hosting provider for the short period its own retention settings allow.

Who we share it with

We do not sell personal data. We share it only with the service providers that make this site and our work possible, and only to the extent they need it:

  • Hosting, security and form-protection providers: serving this site, keeping it available, and checking that a form was sent by a person rather than an automated program.
  • Email delivery providers: delivering each form to our team as an email, including any file you attach.
  • Analytics and advertising providers (Google): measuring visits to this site and the results of our advertising, as described above.
  • Our email and office software provider: holding that email in our mailbox.
  • Brands: for influencers we represent, the profile details a brand needs to consider you for a campaign.

Some of these providers process data outside Singapore. Where that happens, we rely on their contractual commitments to provide a standard of protection comparable to the PDPA, as the Transfer Limitation Obligation requires.

We may also disclose personal data where the law requires it, or to establish or defend a legal claim.

Cookies and similar technologies

This site sets no cookies of its own. Google Analytics and Google Ads set Google's cookies to tell visits apart and to measure our advertising, including showing our ads to people who have visited before. You can block or delete them in your browser's settings, use Google's opt-out add-on for Analytics, or manage ad personalisation in your Google account; the site works fully without them.

Two other things touch your browser. The forms use our hosting provider's verification to block automated spam, which checks your browser when a form loads. And if you type a reply into one of the case stories on our home page, that draft is held in your browser's session storage until the contact form opens and reads it, then removed.

Keeping it secure

We take reasonable steps to protect personal data against unauthorised access, disclosure or loss. The site is served only over encrypted connections. Files you upload are checked by their actual contents, not their names, and renamed before they reach us. Access to submissions is limited to the people who need it. No system is perfectly secure, and we do not claim otherwise.

Your rights

Under the PDPA you may:

  • Ask what personal data we hold about you and how it has been used or disclosed in the past year.
  • Ask us to correct anything inaccurate or incomplete.
  • Withdraw your consent to our continued use of it, or ask us to stop using it for a particular purpose.
  • Ask us to delete it once you no longer want us to hold it.

Write to us at the address below. We will respond as soon as we reasonably can, and within the timeframes the PDPA sets. There is no charge for a correction request; we may charge a reasonable fee for an access request, and will tell you before doing so.

How to reach us

For anything about your personal data, email clients@koldigital.sg with "Data Protection" in the subject line so it reaches the right person quickly, or write to us at 68 Circular Road #02-01, Singapore 049422.

If you are not satisfied with how we have handled your request, you may raise it with Singapore's Personal Data Protection Commission (PDPC).

Changes to this policy

We will update this page when our practices change, and the effective date at the top will change with it. Material changes will be noted here rather than made quietly.