Legal

Privacy Policy

Last updated 17 June 2026

Merlion Agency (“Merlion Agency”, “I”, “me”, or “my”) is a web design and development agency operated by Gerwyn Sim and based in Singapore. This Privacy Policy explains what personal data I collect when you visit merlionagency.com or get in touch, how I use it, and the choices you have. I handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).

Information I collect

  • Information you give me. When you contact me (through the contact form, email, WhatsApp, or a booked call), I collect the details you choose to share. This typically includes your name, email address, business name, and information about your project.
  • Project information. During a project, I may also collect information needed to do the work, such as content, images, or access you provide for your website.
  • Information collected automatically. This website is intentionally lightweight and does not use advertising or tracking cookies. My hosting provider may keep standard server logs (such as IP address and browser type) for security and reliability.

How I use your information

  • To respond to your enquiries and prepare quotes;
  • To provide and manage the services you engage me for;
  • To communicate with you about your project; and
  • To meet legal, accounting, and tax obligations.

I rely on your consent, and/or the need to take steps to enter into and perform a contract with you, as the basis for processing your personal data.

Who I share it with

I don't sell your personal data. I share it only with trusted service providers that help me run the agency, and only as far as needed to deliver the service:

  • Brevo, to deliver and receive email from the contact form;
  • Vercel, for website hosting;
  • Calendly, if you choose to book a call.

I may also disclose information where required to do so by law.

Where your data is processed

Some of these providers process data on servers outside Singapore. Where that happens, I take reasonable steps to ensure your personal data receives a standard of protection comparable to that under the PDPA.

How long I keep it

I keep enquiry and project information for as long as needed for our working relationship and a reasonable period afterwards (for example, for records, warranties, and tax). You can ask me to delete your data at any time, subject to any legal retention requirements.

How I protect it

I take reasonable technical and organisational measures to protect your personal data. No method of transmission or storage is completely secure, however, so I can't guarantee absolute security.

Your rights

Under the PDPA, you may:

  • Request access to the personal data I hold about you;
  • Ask me to correct it if it's inaccurate; or
  • Withdraw your consent to my use of it.

To make a request, email me at Gerwyn@merlionagency.com and I'll respond within a reasonable time.

Children

This website and my services are intended for businesses and adults. I don't knowingly collect personal data from children.

Third-party links

My site and portfolio may link to other websites. I'm not responsible for the privacy practices or content of those sites.

Changes to this policy

I may update this policy from time to time. The “last updated” date above shows when it last changed, and any significant changes will be reflected here.

Contact

Questions about this policy or your data? Email me at Gerwyn@merlionagency.com. Merlion Agency is operated by Gerwyn Sim, Singapore.