Privacy Policy

Taurus Studio is a trading name of Mediterranean Taurus Limited (Hong Kong Company No. 81399256) ("we", "us"). We respect your privacy and handle personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486).

1. What we collect

• Enquiry details you submit through our contact form: name, email, phone number, company, website, budget, timeline and message.
• Payment and billing details when you purchase online. Card details are entered directly with Stripe and never reach our servers; we receive your name, email, phone, billing address and transaction details.
• Technical data such as IP address and browser type, used for security, abuse prevention and basic site analytics.

2. Why we use it

• To respond to your enquiry and prepare quotes.
• To deliver services you have purchased, issue invoices and provide support.
• To protect our website from spam and fraud.
• To meet legal, accounting and tax obligations.

We do not sell your personal data, and we do not send marketing messages unless you have given separate consent. We comply with Singapore's Do Not Call provisions.

3. Consent and withdrawal

By submitting an enquiry or making a purchase you consent to the uses above. You may withdraw consent at any time by contacting us; we will stop processing your data for those purposes unless we are required to retain it by law. Withdrawal may affect our ability to provide services.

4. Who we share it with

We share data only with service providers who help us operate: Stripe (payments), our hosting provider, and our email provider. Each is bound to protect your data. Some providers may process data outside Singapore; where this happens we take reasonable steps to ensure a comparable standard of protection, as required by the PDPA's transfer limitation obligation.

5. Retention

Enquiries that do not lead to a project are deleted after 24 months. Client and transaction records are kept for up to 7 years to meet accounting obligations, then securely deleted.

6. Security

Our website uses encrypted connections (HTTPS). Access to personal data is restricted to people who need it to do their job, and our systems are kept up to date.

7. Cookies

This website uses only cookies that are strictly necessary for it to function. If we introduce analytics or marketing cookies in future, we will ask for your consent first and update this policy.

8. Access and correction

You may ask to access or correct the personal data we hold about you. We will respond within 30 days.

9. Contact

For any privacy question or request, please contact our Data Protection Officer through our contact page.

Registered office: Unit B, 11/F, Yam Tze Commercial Building, 23 Thomson Road, Wan Chai, Hong Kong.