Privacy Policy

Last Updated: March 2026

1. Overview

This Privacy Policy describes how Winston Koh ("we", "us", or "our") collects, uses, and discloses your information in connection with your use of our website (https://winstonkoh87.com/). This policy is compliant with Singapore's Personal Data Protection Act (PDPA).

2. Data Collection

We collect data in the following ways:

  • Voluntarily Provided: When you contact us via email, WhatsApp, or contact forms, you may provide your name, email address, phone number, and message content.
  • Automatically Collected: We use Google Analytics (GA4) to collect anonymized usage data including page views, session duration, device type, and geographic region. No personally identifiable information is collected through analytics.
  • Cookies: This site uses minimal cookies for analytics purposes. Google Analytics sets cookies to distinguish unique users and throttle request rates. No advertising or tracking cookies are used.

3. Use of Information

Information you provide is used solely to:

  • Respond to your inquiries about services
  • Provide consulting and project deliverables
  • Improve the website experience based on aggregated analytics

We do not sell, trade, or rent your personal identification information to others.

4. PDPA Compliance

Under Singapore's Personal Data Protection Act (PDPA), you have the right to:

  • Access: Request access to any personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Withdrawal: Withdraw consent for data collection at any time
  • Deletion: Request deletion of your personal data from our records

To exercise any of these rights, contact us directly via the methods provided on the Contact page.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Client project data is retained for the duration of the engagement plus 12 months. Contact form submissions are retained for up to 24 months unless otherwise requested.

6. Cookies & Analytics

This website uses Google Analytics 4 (GA4) for anonymous traffic analysis. GA4 collects:

  • Page views and navigation paths
  • Session duration and bounce rate
  • Geographic region (country/city level)
  • Device and browser type

Google Analytics data is processed in accordance with Google's Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7. Embedded Content

Articles and pages on this site may include embedded content (e.g., YouTube videos, GitHub gists, external images). Embedded content from other websites behaves as if you have visited those websites. These third-party sites may collect data about you, use cookies, and monitor your interaction with the embedded content.

8. Third-Party Links

Our website contains links to third-party sites (e.g., GitHub, LinkedIn, WhatsApp). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

9. Data Security

This website is served over HTTPS with encryption in transit. We take reasonable measures to protect personal data from unauthorized access, alteration, or disclosure. However, no method of internet transmission is 100% secure.

10. Contact

For questions regarding this policy or to exercise your PDPA rights, please contact us directly via the contact methods provided on the Contact page.