Last Updated: October 2026
Hiboom Media Pte. Ltd. (“Hiboom Media”, “we”, “us”, or “our”) respects your privacy and is committed to handling personal data responsibly.
This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise handle personal data when you:
- visit our website;
- contact us;
- request information about our Services;
- submit an enquiry or contact form;
- communicate with our team;
- engage us for digital marketing Services;
- interact with our website, advertisements, or digital content; or
- otherwise provide personal data to us.
This Privacy Policy should be read together with our Terms and Conditions and any other privacy or data-processing terms that apply to a particular engagement.
We may update this Privacy Policy from time to time. The latest version will be published on this page.
1. About Hiboom Media
Hiboom Media Pte. Ltd. is a Singapore-based digital marketing company providing services including:
- Digital Campaign Management;
- Search Marketing;
- Performance Advertising;
- Geotargeted Advertising;
- Audience Insights; and
- Conversion Analytics.
Hiboom Media Pte. Ltd.
Registered Address: 114 LAVENDER STREET, #07-80, CT HUB 2, Singapore 338729
Email: info@hiboommedia.com
Website: hiboommedia.com
2. What Is Personal Data?
For this Privacy Policy, “personal data” generally means information about an identifiable individual, whether the individual can be identified from that information alone or together with other information that we have or are likely to have access to.
Depending on how you interact with us, this may include:
- name;
- email address;
- telephone number;
- company name;
- job title;
- business address;
- correspondence and enquiry details;
- information you provide through forms;
- account or service information;
- billing and transaction information;
- IP address;
- browser and device information;
- website interaction information;
- marketing preferences;
- campaign and conversion information; and
- other information you voluntarily provide.
We do not intend to collect sensitive personal information unless it is reasonably necessary for a specific purpose and can be lawfully handled.
3. How We Collect Personal Data
We may collect personal data:
Directly from you
For example, when you:
- complete a contact form;
- request a consultation;
- email us;
- call us;
- communicate with our team;
- request a quotation;
- subscribe to communications;
- agree with us; or
- provide information during an engagement.
Automatically
When you use our website, we may collect certain technical and usage information through cookies, analytics tools, server logs, and similar technologies.
This may include:
- IP address;
- browser type;
- device type;
- operating system;
- pages visited;
- approximate location derived from technical information;
- referring website;
- time spent on pages;
- interaction with website elements; and
- other website usage information.
From third parties
Where appropriate and lawful, we may receive information from:
- Advertising Platforms;
- analytics providers;
- business partners;
- referral sources;
- publicly available business information;
- service providers;
- Client organisations; and
- other sources that are permitted to provide the information.
4. Information You Provide Through Our Website
If you contact us through a website form, we may collect information such as:
- name;
- work email;
- telephone number;
- company;
- information about your business;
- information about your marketing needs; and
- any other information included in your message.
We use this information to understand your enquiry, respond to you, assess whether our Services are appropriate, and communicate with you about your request.
5. Why We Collect and Use Personal Data
We may collect, use, and disclose personal data for purposes including:
Responding to enquiries
To respond to requests, questions, consultation enquiries, and service requests.
Providing Services
To plan, manage, monitor, report on, and improve Services provided to Clients.
Campaign management
To manage advertising accounts, campaigns, audiences, targeting, reporting, and related marketing activities.
Analytics and measurement
To understand website activity, campaign performance, conversions, and customer journeys where analytics and tracking are part of the agreed Services.
Client communication
To communicate about campaigns, projects, approvals, reports, invoices, account access, and other matters relating to an engagement.
Business administration
To manage contracts, payments, records, internal operations, security, and other legitimate business activities.
Improving our Services
To understand how our website and Services are used and identify opportunities to improve them.
Marketing
Where permitted by law and subject to applicable consent or opt-out requirements, we may use contact information to send information about our Services, articles, updates, events, or other relevant communications.
Legal and regulatory purposes
To comply with applicable laws, regulations, legal processes, requests from authorities, and our legal obligations.
The PDPA requires organisations to notify individuals of the purposes for which personal data is collected, used, or disclosed and generally limits handling to appropriate purposes under the applicable PDPA framework.
6. Consent
Where consent is required, we will obtain consent in accordance with applicable law.
Depending on the circumstances, consent may be provided through:
- a website form;
- an explicit request;
- a written agreement;
- an electronic communication;
- a service engagement; or
- another permitted method.
You may withdraw consent where applicable by contacting us using the details in this Privacy Policy.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Please note that withdrawing consent may affect our ability to provide certain Services or respond to certain requests where the relevant information is necessary for that purpose.
7. Marketing Communications
We may send marketing communications about our Services, insights, articles, or other business-related information where permitted by applicable law.
You may opt out of marketing emails by using the unsubscribe mechanism provided in the communication or by contacting us.
Where marketing involves Singapore telephone numbers, we will comply with applicable Do Not Call requirements and other applicable marketing rules.
Singapore’s PDPA includes Do Not Call provisions relating to certain marketing messages sent to Singapore telephone numbers, including requirements concerning checking the relevant DNC Registry unless an applicable exception or consent applies.
Opting out of marketing communications does not necessarily stop service-related or transactional communications, such as campaign updates, invoices, account notices, or security messages.
8. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Cookies may help us:
- keep the website functioning;
- remember preferences;
- understand website usage;
- measure traffic;
- understand which pages are useful;
- improve website performance; and
- support advertising or campaign measurement where applicable.
Some cookies may be provided by third-party services.
You can adjust cookie settings through your browser or any cookie-management tool we make available.
Disabling certain cookies may affect website functionality.
9. Analytics
We may use analytics services to understand how visitors interact with our website.
Depending on the tools actually installed on the website, analytics information may include:
- pages visited;
- traffic sources;
- device information;
- browser information;
- approximate location;
- interactions;
- session information;
- events; and
- conversion activity.
The exact information collected depends on the analytics tools we use.
Important: The company should update this section before publication to name the actual analytics providers used on the website, such as Google Analytics or another provider, if applicable.
10. Advertising and Tracking Technologies
Because our business provides digital advertising services, our website and campaigns may use technologies such as:
- advertising pixels;
- conversion tags;
- cookies;
- event tracking;
- remarketing technologies;
- campaign parameters;
- audience measurement tools; and
- similar technologies.
These technologies may help us or our Clients understand:
- whether an advertisement was viewed or clicked;
- which campaigns generated visits;
- whether visitors completed a particular action;
- which audiences respond to campaigns; and
- how advertising activity relates to conversions.
The specific technologies used depend on the campaign and platforms involved.
11. Third-Party Advertising Platforms
Our Services may involve Advertising Platforms operated by third parties.
These may include, depending on the Client’s campaign:
- Google;
- Microsoft;
- Meta;
- LinkedIn;
- TikTok;
- other social media platforms;
- search engines;
- advertising networks; and
- other media providers.
These platforms may collect and process personal data according to their own privacy policies and terms.
We do not control the privacy practices of third-party platforms.
Clients and website visitors should review the privacy notices of the relevant platforms where appropriate.
12. Geotargeting
Our Services may involve location-based advertising.
Geotargeting may use information such as:
- selected geographic areas;
- city or regional targeting;
- postcodes;
- radius targeting;
- device or network information;
- location signals made available by an Advertising Platform; and
- other permitted location-related information.
Geotargeting is generally configured through third-party Advertising Platforms.
We do not necessarily receive or retain precise physical location information simply because a campaign uses geographic targeting.
The actual information available to us depends on the platform, campaign configuration, permissions, and reporting provided by the relevant provider.
13. Client Campaign Data
When providing Services to Clients, we may receive or have access to information supplied by the Client.
This may include:
- customer or prospect information;
- lead information;
- contact details;
- audience information;
- website analytics;
- conversion information;
- campaign data;
- CRM information;
- customer lists; and
- other business information.
Where a Client provides personal data to us for processing as part of the Services, the Client remains responsible for ensuring that the data has been collected, disclosed, and used lawfully.
14. Our Role When Processing Client Data
Depending on the Services and circumstances, Hiboom Media may process personal data:
- on its own behalf;
- on behalf of a Client;
- as part of providing marketing and analytics Services; or
- in connection with third-party Advertising Platforms.
The parties may enter into additional data-processing terms where required.
Where we act on behalf of a Client, we will process personal data according to the Client’s lawful instructions and applicable data-protection requirements.
15. Data Shared With Service Providers
We may disclose personal data to service providers where reasonably necessary to operate our business or provide the Services.
These providers may include:
- hosting providers;
- cloud-storage providers;
- analytics providers;
- advertising platforms;
- CRM providers;
- email platforms;
- project-management systems;
- payment processors;
- IT and security providers;
- professional advisers;
- contractors; and
- other service providers supporting our operations.
We take reasonable steps to ensure that third parties handling personal data on our behalf provide appropriate safeguards consistent with applicable requirements.
16. Legal and Regulatory Disclosures
We may disclose personal data where reasonably necessary to:
- comply with applicable law;
- respond to lawful requests from public authorities;
- comply with court orders or legal processes;
- investigate suspected fraud or unlawful activity;
- protect our rights or property;
- protect the safety of individuals; or
- establish, exercise, or defend legal claims.
17. Business Transfers
If Hiboom Media is involved in a merger, acquisition, restructuring, sale of assets, financing, or similar transaction, personal data may be transferred as part of that transaction where permitted by law.
Where required, appropriate safeguards and notifications will be considered.
18. Overseas Transfers
Some of our service providers, Advertising Platforms, analytics providers, cloud services, or other technology providers may operate outside Singapore.
This means personal data may be transferred to or processed in other countries.
Where we transfer personal data outside Singapore, we will take steps required under applicable Singapore data-protection law to ensure that the transferred personal data receives a standard of protection comparable to that required under the PDPA.
The PDPA includes specific requirements for overseas transfers of personal data.
19. Data Security
We take reasonable measures to protect personal data against:
- unauthorised access;
- collection;
- use;
- disclosure;
- alteration;
- loss; and
- other similar risks.
Security measures may include appropriate:
- access controls;
- authentication;
- account permissions;
- secure systems;
- confidentiality requirements;
- monitoring;
- backups; and
- organisational safeguards.
No internet-based system can be guaranteed to be completely secure.
You should therefore avoid sending sensitive information through unsecured channels unless specifically requested.
20. Data Breach Management
If we become aware of a suspected or confirmed personal-data breach, we will assess the incident and take reasonable steps to contain, investigate, and remediate it.
Where notification is required under applicable law, we will notify the relevant authority and affected individuals within the required timeframe.
Under Singapore’s PDPA, certain data breaches that are likely to result in significant harm to affected individuals or are of significant scale may trigger notification obligations.
21. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or for related business, legal, accounting, security, or regulatory purposes.
Retention periods may vary depending on:
- the type of information;
- the nature of the relationship;
- whether you remain a Client;
- contractual requirements;
- legal obligations;
- dispute requirements;
- security requirements; and
- legitimate business needs.
When personal data is no longer required, we will take reasonable steps to delete, anonymise, or dispose of it appropriately.
The PDPA includes a retention limitation obligation requiring organisations to stop retaining personal data, or remove the means by which it can be associated with individuals, when retention is no longer necessary for a legal or business purpose.
22. Accuracy of Personal Data
We take reasonable steps to ensure that personal data in our possession or control is accurate and complete where it is likely to be used to make a decision affecting an individual or disclosed to another organisation.
You should tell us if your personal information changes.
23. Access to Personal Data
Subject to applicable law, you may request access to personal data that we hold about you.
You may also request information about how your personal data has been used or disclosed within the applicable period under the PDPA.
We may need to verify your identity before processing an access request.
Certain exceptions may apply, and we may charge a reasonable fee where permitted by law and where we have informed you of the applicable fee.
24. Correction of Personal Data
If you believe that personal data we hold about you is inaccurate or incomplete, you may request that it be corrected.
We may need to verify your identity before processing a correction request.
Where required, we will take reasonable steps to correct the relevant information and, where appropriate, communicate the correction to organisations to which the information was disclosed.
The PDPA provides individuals with rights relating to access and correction, subject to applicable exceptions.
25. Withdrawal of Consent
Where we rely on your consent to collect, use, or disclose personal data, you may withdraw that consent by contacting us.
Before withdrawing consent, we may explain the likely consequences of doing so.
Withdrawal does not affect processing that occurred before the withdrawal.
We will generally respond to consent-withdrawal requests within a reasonable period.
26. Complaints and Privacy Concerns
If you believe that we have not handled your personal data appropriately, please contact us first.
We will review the concern and take reasonable steps to investigate and address it.
You may contact our Data Protection Officer using the details below.
Hiboom Media Pte. Ltd.
Registered Address: 114 LAVENDER STREET, #07-80, CT HUB 2, Singapore 338729
Email: info@hiboommedia.com
Website: hiboommedia.com
27. Children
Our website and Services are primarily intended for businesses and working professionals.
We do not knowingly seek to collect personal data from children for marketing purposes.
If you believe a child has provided personal data to us without appropriate consent or authority, please contact us so that we can review the matter.
28. Third-Party Websites
Our website may contain links to websites, platforms, or services operated by third parties.
We are not responsible for the privacy practices, content, security, or policies of those third parties.
When you leave our website, you should review the privacy policy of the destination website.
29. Social Media
We may maintain profiles or pages on social media platforms.
If you interact with us through social media, the relevant platform may collect and process information according to its own privacy policy.
We may receive information that the platform makes available to us, depending on your settings and the platform’s functionality.
30. Recruitment and Job Applications
If you apply for a position with us, we may collect information such as:
- name;
- contact information;
- CV or résumé;
- employment history;
- education;
- qualifications;
- references; and
- other information relevant to recruitment.
We use this information to assess applications, communicate with candidates, conduct recruitment processes, and manage employment-related matters where applicable.
A separate employee or recruitment privacy notice may apply.
31. Cookies and Browser Controls
Most browsers allow you to control or block cookies.
You can typically change these settings through your browser’s privacy or security controls.
If we introduce a cookie-consent mechanism on the website, you may also manage applicable preferences through that mechanism.
Blocking certain cookies may affect how some website functions operate.
32. Do Not Track Signals
Some browsers provide “Do Not Track” or similar settings.
Because there is no single technical standard for interpreting all such signals, our website may not respond to every browser-based Do Not Track signal.
Where applicable, we will respect legally required privacy choices and controls.
33. Changes to This Privacy Policy
We may update this Privacy Policy when our Services, technology, legal requirements, or data-handling practices change.
When we make changes, we will publish the updated version on our website and update the “Last Updated” date.
Where required by law, we will provide additional notice or obtain consent for material changes.
34. Governing Law
This Privacy Policy is governed by the laws of Singapore, unless applicable mandatory law requires otherwise.
35. Contact Us
If you have questions about this Privacy Policy, wish to exercise applicable data-protection rights, or have a privacy concern, contact us at:
Hiboom Media Pte. Ltd.
Registered Address: 114 LAVENDER STREET, #07-80, CT HUB 2, Singapore 338729
Email: info@hiboommedia.com
Website: hiboommedia.com