Privacy Policy

NYALA Pte. Ltd. (“NYALA”, “we”, “us”) is a creative and growth partner based in Singapore. This policy explains how we collect, use, disclose and protect personal data when you visit nyala.sg, contact us, or work with us, in line with Singapore’s Personal Data Protection Act 2012 (“PDPA”).

If you have any question about this policy or your personal data, contact our Data Protection Officer at ask@nyala.sg.

Information you give us. When you use the Ask NYALA form or email us, we receive what you choose to share: typically your name, email address, brand or company, market, the services you are interested in and your message.

Information from working together. If you become a client, partner, creator or supplier, we hold the business contact details, briefs, approvals, invoices and correspondence needed to deliver and administer the engagement.

Creator and talent information. For influencer and creator campaigns we may hold creators’ names, handles, public profile information, rates, content and campaign performance data.

Technical information. Our website does not set its own tracking or advertising cookies. Some third-party services embedded on the site, described below, may collect technical data such as your IP address, browser and device information.

The form on our Contact page does not send your details to a server. When you press “Ask NYALA now”, it opens your own email app with a pre-written message addressed to ask@nyala.sg. Nothing is stored on the website, and nothing is sent until you choose to send that email.

We use personal data to: respond to your enquiry; prepare proposals and quotations; deliver, manage and report on engagements; coordinate creators, talent, vendors and partners; invoice and keep business records; meet legal, tax and regulatory obligations; and protect our legal rights.

We will only send you marketing communications if you have agreed to receive them, and you can opt out at any time by replying to say so.

By contacting us or providing personal data, you consent to us collecting, using and disclosing it for the purposes above, or for purposes you would reasonably expect in the circumstances. Where you give us personal data about someone else, such as a colleague or a creator, please make sure they agree to it being shared with us.

You may withdraw your consent at any time by writing to ask@nyala.sg. We will tell you what withdrawing may mean, for example that we can no longer deliver a particular service, and act on your request within a reasonable time.

Instagram (Meta). Some pages show live Instagram posts through Instagram’s official embed. These load from Instagram only when the post scrolls into view, and Instagram may set cookies and collect data under Meta’s Privacy Policy.

Google Fonts. Our typefaces are served by Google Fonts, which receives your IP address and browser details to deliver the font files, under Google’s Privacy Policy.

Links to other websites, including creator profiles and client sites, are governed by those sites’ own policies.

We do not sell personal data. We share it only where needed for the purposes above, with: clients, creators, talent, venues and production partners involved in an engagement; service providers who support our business, such as email, cloud storage, accounting and payment providers; professional advisers; and authorities where the law requires it.

Everyone we share personal data with is expected to protect it and use it only for the purpose it was shared.

We work across Southeast Asia, and some of our service providers store data overseas. Where personal data is transferred outside Singapore, we take reasonable steps to make sure it receives a standard of protection comparable to the PDPA, for example through contractual safeguards.

We keep personal data only as long as it is needed for the purpose it was collected, or as required for legal, accounting or business reasons. Enquiries that do not lead to an engagement are generally deleted within 24 months. When data is no longer needed, we delete it or anonymise it.

We take reasonable security arrangements to protect personal data against unauthorised access, collection, use, disclosure, copying, modification or disposal, including access controls and reputable, secured service providers. No method of transmission or storage is completely secure, but we work to keep risks low.

If a data breach is likely to cause significant harm, we will assess it promptly and notify the Personal Data Protection Commission and affected individuals where required by the PDPA.

You may ask us for access to the personal data we hold about you and how it has been used or disclosed in the past year, and ask us to correct any error or omission. Write to ask@nyala.sg with enough detail for us to identify you and your request.

We aim to respond within 30 days. If we need longer, or a reasonable fee applies to an access request, we will tell you before proceeding. If you are not satisfied with our response, you may contact the Personal Data Protection Commission at pdpc.gov.sg.

We may update this policy from time to time. The latest version will always be on this page, with the effective date below the title.