Privacy policy

This privacy policy explains how Theo ("I", "me") handles information in connection with Ink Spark, a personal blog hosted at inkspark.life. I write from Singapore and aim to comply with the Personal Data Protection Act 2012 (PDPA) as a reasonable individual publisher, even though this site is not a commercial platform. Read this document carefully. If you disagree with it, please stop using the site.

1. Who is responsible

The data controller for this website is Theo, reachable at Blk 210 Compassvale Lane, #03-25, Singapore 540210, or [email protected]. I do not maintain a separate corporate entity for the blog. Questions about privacy may be sent to the same email with the word Privacy in the subject line.

2. Scope

This policy covers the public pages of inkspark.life, including studio, folio, sketches, about, contact, cookie, and error pages. It does not cover third-party websites you may reach through ordinary links. Those sites operate under their own policies.

3. What I collect

Ink Spark is designed to collect as little as possible. I do not operate user accounts, comment boxes, checkout flows, or mailing-list pop-ups. Typical browsing may still produce limited data:

Server logs. The independent hosting provider may automatically record technical information such as IP address, browser type, referring URL, and timestamps when you request a page. I access these logs only for security or troubleshooting and do not merge them with marketing profiles.

Email correspondence. If you write to [email protected], I receive your email address, message content, and metadata your mail provider includes. I keep replies only as long as needed to conduct the conversation or meet legal obligations.

Cookie and local storage preferences. The site stores your cookie choices in a first-party cookie named sg_blog_consent and, when available, in local storage under cookie_consent_v1. These records contain JSON describing whether functional and analytics categories are enabled. They do not contain your name unless you put it in another channel.

Google Maps embed. When you allow functional cookies, pages load an embedded map served by Google. Google may process device and usage data according to its own policies. The embed is used solely to show the Compassvale neighbourhood and is not tied to an analytics dashboard I operate.

I do not knowingly collect sensitive personal data through the site. Please do not send NRIC numbers, financial account details, or medical records by email.

4. Purposes of use

Information is used only for: delivering pages you request; remembering cookie consent; responding to messages you initiate; protecting the site from abuse; and complying with applicable law. I do not use blog readership data to build advertising audiences. I do not sell personal data.

5. Legal basis and consent

Under the PDPA, organisations need a recognised basis to collect, use, or disclose personal data. For this personal blog, bases include consent (cookie choices, optional map loading), legitimate interests (security logging, replying to correspondence you send), and legal compliance where required. You may withdraw consent for non-essential cookies at any time via the Manage cookies control in the footer or the cookie panel.

6. Cookies and similar technologies

Essential storage keeps the site functional and records your consent decision. Functional storage enables Google Maps iframes to display. Analytics storage is disabled by default; if enabled in future, this policy will be updated before activation. See the cookie page for category descriptions and retention periods.

7. Disclosure to third parties

I may share limited data with: my hosting provider (infrastructure); Google (maps embed you choose to load); and authorities if legally compelled. I do not disclose email correspondence to marketers. Transfers outside Singapore may occur when you interact with Google services; Google publishes its own safeguards.

8. Retention

Cookie consent records expire after approximately one hundred eighty days unless renewed. Server logs retention follows the host's default rotation, typically thirty to ninety days. Email is kept while relevant, then deleted or archived offline unless a longer period is required for disputes.

9. Security

I use HTTPS, keep software reasonably patched, and limit access to mailboxes and hosting panels. No method of transmission is perfectly secure; you provide information at your own risk, though I take proportionate steps for a small personal site.

10. Your rights

Subject to PDPA exceptions, you may request access to personal data I hold about you, ask for correction of inaccurate data, or withdraw consent for optional processing. Contact [email protected] with sufficient identity context for me to respond without guessing. I will answer within a reasonable period, generally thirty days.

11. Children

Ink Spark is written for a general adult audience. I do not knowingly collect data from children under thirteen. If you believe a child provided information, contact me and I will delete it.

12. Links

External links are provided for convenience. I am not responsible for the privacy practices of other publishers, libraries, or map providers beyond what this policy states.

13. Changes

I may update this policy to reflect hosting changes or legal guidance. The last updated date at the top will change when revisions are material. Continued use after an update constitutes acceptance unless law requires explicit renewed consent.

14. Contact

Privacy enquiries: [email protected] · Blk 210 Compassvale Lane, #03-25, Singapore 540210 · +65 6427 1938 (quiet hours mornings and late evenings SGT).

15. Definitions

Personal data means data about an individual who can be identified from that data, or from that data and other information to which I have access. On this site that may include an email address you send me, technical identifiers in server logs, and cookie preference JSON.

Processing means any operation performed on personal data, including collection, storage, use, and deletion.

16. Do Not Track and similar signals

Some browsers send Do Not Track headers. Ink Spark does not respond to DNT because no analytics pipeline is active. If that changes, this section will be revised before any tracking begins.

17. Data breach notification

I maintain proportionate security for a small static site. If I become aware of a breach affecting personal data I control, I will assess severity under PDPA guidance and notify affected individuals and the Personal Data Protection Commission when required.

18. Automated decision-making

I do not use personal data for automated profiling or decisions with legal effect. Reading recommendations, if ever added, would be manual curation only.

19. Your responsibilities

Please do not submit third-party personal data without their permission. If you forward someone else's story in email, redact identifiers unless they have agreed. I may delete messages that include unnecessary sensitive details.

20. Governing law

This policy is governed by the laws of Singapore. Disputes should first be raised by email so we can resolve them in good faith where possible.

21. Accessibility of this policy

This page is available without login at /privacy.php. If formatting barriers prevent you from reading it, email me and I will provide the text in plain form.

22. Complaints to the PDPC

If you believe I have handled personal data contrary to the PDPA and we cannot resolve the matter by correspondence, you may contact the Personal Data Protection Commission in Singapore for guidance on escalation paths available to individuals.