Privacy Policy
Effective date: 15 June 2025
1. Who we are
This website (gaodishoots.com) is operated by Gao Wei Jie, an individual photographer based in Singapore. For any privacy-related queries, contact us at aarongaoweijie030103@gmail.com.
This policy describes how we handle personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA).
2. Data we collect
| Data | Source | Purpose |
|---|---|---|
| Name, email address, message | Contact form | To respond to your enquiry |
| Aggregated page-view data (no cookies, no personal identifiers) | Vercel Analytics | To understand how the site is used |
We do not collect sensitive personal data as defined under the PDPA. We do not use cookies for tracking or advertising. Vercel Analytics is privacy-first and stores no personal data.
3. How we use your data
- To respond to your contact form enquiry
- To send you a reply or follow-up regarding photography services
- To maintain records of client communication
We will not use your data for any purpose beyond those stated above without your explicit consent, and we will not sell or rent your personal data to third parties.
4. Third-party services
We share data with the following processors, each bound by their own privacy terms:
- Supabase — stores contact submissions (data hosted on AWS ap-southeast-1, Singapore region)
- Resend — delivers email notifications of contact submissions to us
- Vercel — hosts the website and provides aggregated, anonymised analytics
- Cloudflare R2 — stores and delivers photography images
No personal data from contact submissions is transferred to third parties outside of the processors listed above.
5. Data retention
Contact form submissions (name, email, message) are retained for up to 2 years from the date of submission, after which they are deleted. You may request earlier deletion at any time (see Section 7).
6. Data security
We implement reasonable technical and organisational measures to protect your personal data, including encrypted data transmission (HTTPS/TLS), access-controlled databases, and restricted admin access. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
7. Your rights under PDPA
You have the right to:
- Access — request a copy of personal data we hold about you
- Correction — request correction of inaccurate personal data
- Withdrawal of consent — withdraw consent for us to use your data
- Deletion — request deletion of your personal data
To exercise any of these rights, email us at aarongaoweijie030103@gmail.com with the subject line "PDPA Data Request". We will respond within 10 business days.
8. Cookies
This website does not use advertising or tracking cookies. A functional session cookie is set when you access a password-protected photo gallery; it expires automatically after 7 days and contains no personal data.
Vercel Analytics does not use cookies or store personal identifiers — it counts page views using aggregated, anonymised data only.
9. Changes to this policy
We may update this policy from time to time. The effective date at the top of this page will reflect the latest revision. Continued use of the site after changes constitutes acceptance of the updated policy.
10. Contact & complaints
For privacy concerns or PDPA requests: aarongaoweijie030103@gmail.com
If you believe your personal data rights have been violated, you may also lodge a complaint with the Personal Data Protection Commission (PDPC).