Privacy Policy.

1. Information you share

Our contact form collects your name, email address, optional company and phone number, and project brief. Submitted enquiries are saved in our website database so we can respond and keep a record of the enquiry. Please only share information you are authorised to provide.

Chat messages and the conversation context are sent to our server and OpenAI to generate a response. The studio assistant can recommend work and help draft a brief; it does not submit an enquiry automatically. You must review and send the contact form yourself.

2. AI chat and retention

The website chat keeps the current conversation in browser memory, rather than saving a transcript to our enquiries database. Reloading the page clears that conversation. If you choose to continue with a brief, it is temporarily placed in your browser’s session storage and removed when the contact form reads it.

We configure OpenAI API requests with response storage disabled. This is not a promise of zero retention: OpenAI’s default abuse-monitoring logs may contain messages and responses and are normally retained for up to 30 days, with exceptions described in its data controls documentation. Avoid sending confidential material, passwords, financial account details or other sensitive information in chat.

Submitted contact enquiries are retained to handle and keep a record of your request and any resulting business relationship. Contact us to ask about retention or request deletion; legal or business record-keeping requirements may apply.

3. Technical information and security

Our hosting and service providers process technical information such as IP addresses and request details to deliver and protect the website. For chat rate limits, our application stores a hash derived from the visitor’s IP address with a short-lived usage counter. Visitor counters expire after two hours, and expired counters are removed during subsequent chat requests. Site-wide counters expire after two days. These counters do not contain chat messages.

We take reasonable steps to protect information, but no internet service can guarantee absolute security. Service providers may retain their own operational or security logs under their policies.

4. Cookies, browser storage and media

Essential browser storage remembers your appearance preference and cookie choices, and supports a project brief transfer you request. Your media choice is saved for six months on this browser; if browser storage is unavailable, it lasts only for the current page session. You can change your choice below or clear your browser storage.

Vimeo videos load with Do Not Track enabled to reduce session analytics and non-essential cookies. Vimeo still receives network information, and essential security cookies may be used. Cookies already held by your browser may also be sent to Vimeo. See Vimeo’s player cookie guidance.

Instagram embeds are optional and are not loaded until you allow them. When enabled, Meta receives technical information and may use cookies according to its Privacy Policy and Cookie Policy. Rejecting optional content leaves our pages, Vimeo films, contact form and studio assistant available. Withdrawing permission removes the Instagram embed; it cannot recall information already sent or delete third-party cookies from your browser.

We have not added advertising pixels or optional audience analytics tools to this website. Images and links from services such as Vimeo may still involve third-party network requests when you use the site or chat.

5. Service providers and overseas processing

We use ChatGPT Sites hosting and its Cloudflare infrastructure, OpenAI for the studio assistant, and media services such as Vimeo and, when permitted, Instagram. These providers may process information outside Singapore. We use service arrangements and safeguards intended to protect personal data in line with applicable Singapore requirements. Following an external link is subject to that service’s own privacy practices.

6. Your choices and privacy enquiries

You may contact us to ask about your information, request access or correction, request deletion, withdraw consent where applicable, or raise a privacy concern. We may need to verify your identity before acting on a request. Withdrawing information needed to respond to an enquiry may limit our ability to help.

Email: winstonkoh@winstoncreative.tv
Winston Creative Pte. Ltd.
JustCo – Changi Airport Terminal 3
#03-37, Singapore 819663

7. Updates

We may update this policy as our website or services change. The date above identifies the latest version.