Privacy Policy

1. Who We Are

ForteAds is a performance marketing infrastructure company registered in the Republic of Singapore (registered office: 1 Raffles Place, Level 20, Singapore 048616). This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and, where applicable, the EU/UK General Data Protection Regulation (GDPR).

2. Data We Collect

We collect and process the following categories of data:

• Contact data — name, business email, company name, and phone number submitted via our briefing, consultation, and sign-up forms;
• Account data — login credentials and profile information for client portal users;
• Engagement data — campaign briefs, brand assets, website URLs, and business information you provide for service delivery;
• Campaign & analytics data — advertising performance metrics processed on your behalf as part of our services;
• Technical data — IP address, browser type, and usage data collected through cookies and similar technologies on our website;
• Billing data — subscription and payment records. Card details are processed by our payment provider (Stripe) and are never stored on ForteAds systems.

3. How We Use Your Data

We use personal data only for the following purposes:

• Delivering, operating, and improving the services you have engaged;
• Responding to briefing requests and managing our client relationship;
• Billing, account administration, and fraud prevention;
• Sending service communications and, with consent, marketing insights (you may opt out at any time);
• Complying with legal and regulatory obligations.

4. Data Sovereignty — Your Data Stays Yours

Client campaign data, audience lists, and first-party data remain the exclusive property of the client. ForteAds processes this data solely as a service provider under your instructions. We do not sell personal data, and we do not use one client's data — including audience lists, brand intelligence, or performance data — to benefit any other client. Client environments are logically isolated.

5. Third Parties & International Transfers

We share data only with sub-processors necessary to deliver our services — such as advertising platforms (Meta, Google, TikTok, LinkedIn and others, at your direction), cloud hosting providers, payment processing (Stripe), and email delivery services. Each sub-processor is bound by contractual obligations consistent with this policy.

Where data is transferred outside Singapore, we ensure the receiving organisation provides a standard of protection comparable to the PDPA, through contractual safeguards or equivalent mechanisms.

6. Security

We maintain administrative, technical, and physical safeguards aligned with SOC 2 principles and ISO-27001-standard data handling, including encryption in transit, access controls on a least-privilege basis, environment isolation, and audit logging. In the event of a notifiable data breach, we will notify affected clients and the Personal Data Protection Commission (PDPC) as required by law.

7. Retention

We retain personal data only as long as necessary for the purposes described above or as required by law. Upon termination of an engagement, client data is exported on request and deleted from our systems within ninety (90) days, subject to legal retention obligations (e.g., accounting records under Singapore law).

8. Cookies & Analytics

Our website uses cookies and similar technologies for essential functionality and aggregate analytics. You can control cookies through your browser settings. Disabling non-essential cookies does not affect your ability to use the site.

9. Your Rights

Under the PDPA (and GDPR where applicable), you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Withdraw consent to processing (which may affect our ability to provide services);
• Request deletion of your data, subject to legal retention requirements;
• Lodge a complaint with the PDPC or your local supervisory authority.

10. Contact & Data Protection Officer

To exercise your rights or raise any privacy concern, contact our Data Protection Officer at legal@fortefunded.com or write to ForteAds (Attn: DPO), 1 Raffles Place, Level 20, Singapore 048616. We respond to verified requests within thirty (30) days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to active clients and reflected in the "Last updated" date above.