16:40 · Emerald Hill · Singapore

Privacy notice.

News Forge Spark Pte. Ltd. ("we", "us") operates newsforgespark.life from Singapore. This notice explains how we collect, use, disclose, and protect personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

Last updated 14 August 2026. We review this notice at least annually and after material changes to our site or desk practices.

1. Organisation responsible

News Forge Spark Pte. Ltd.
13 Emerald Hill Road, #02-01, Singapore 229297
Email: [email protected]
Telephone: +65 6236 7041

Privacy queries may be sent to the same email with subject line "Privacy". We respond within reasonable timeframes required by PDPA.

2. Scope

This notice applies to visitors of newsforgespark.life, individuals who email or telephone the desk, and sources who provide information for reporting. It does not apply to third-party websites linked from our pages — review their policies separately.

Journalism activities may involve processing personal data about subjects of public interest; we balance public interest with fairness and PDPA obligations.

3. Personal data we collect

Technical data. Server logs may record IP address, browser type, referring URL, and timestamps when you load pages. Logs are used for security and troubleshooting.

Cookie and storage data. We store consent preferences in cookie nfs_consent_v18 and local storage key cookie_consent_v1 — see Cookies.

Communications. If you email or call us, we process your contact details and message content to respond.

Tip line data. Sources may provide names, contact details, or documents. We retain only what the quench requires.

We do not operate account registration on this portal as of 14 August 2026.

4. Purposes of collection

We collect personal data to: operate and secure the website; remember cookie preferences; respond to reader queries and correction reports; conduct verified journalism; comply with law; and defend legal claims where necessary.

We do not sell personal data. We do not use analytics cookies by default on this site.

5. Legal basis and consent

Under PDPA, we rely on consent where required — notably for non-essential cookies. Essential consent storage is necessary to remember your choice. Other processing may rely on deemed consent for reasonable purposes, contractual necessity, or legitimate interests aligned with journalism and site operation, documented in our internal register.

You may withdraw consent for optional cookies at any time via the cookie banner or Manage cookies control on the Cookies page.

6. Disclosure to third parties

We may disclose data to: hosting providers in Singapore; Google Maps when you consent to functional cookies; professional advisers under confidentiality; and authorities when required by law or court order.

We require processors to protect data consistent with this notice. We do not disclose tip-line identity without legal obligation or source consent.

7. International transfers

Primary hosting is in Singapore. If tools process data outside Singapore, we ensure appropriate protection consistent with PDPA transfer requirements before engagement.

8. Retention

Server logs: typically 90 days unless security investigation requires longer. Email: retained while the matter is active and thereafter as archives require. Cookie consent records: up to 180 days per nfs_consent_v18 Max-Age. Uncredited photograph metadata: deleted after 30 days per desk policy. Journalism source records: retained per internal archive policy and legal hold requirements.

9. Accuracy

We take reasonable steps to ensure personal data we use for communications is accurate. Published reporting corrections follow Make Good.

10. Protection

We implement administrative, technical, and physical safeguards appropriate to a small newsroom — access controls on the bench systems, encrypted transport (HTTPS), and limited staff access to tip logs.

No method is perfectly secure; report suspected breaches to [email protected] promptly.

11. Your rights under PDPA

Subject to exceptions, you may request access to and correction of personal data we hold about you. You may withdraw consent for optional processing where consent is the basis.

Send requests to [email protected] with enough detail for us to identify the data. We may charge a reasonable fee for manifestly unfounded or excessive requests as permitted by law.

If you believe we have not handled data fairly, you may contact the Personal Data Protection Commission of Singapore after giving us opportunity to respond.

12. Children

This site is not directed at children under 13. We do not knowingly collect their personal data without parental authority.

13. Do Not Track

We do not respond to DNT signals because we do not deploy non-essential analytics by default.

14. Changes

We update this notice when practices change. Material changes are dated at the top. Continued use after changes constitutes acknowledgement where permitted by law.

15. Contact

News Forge Spark Pte. Ltd., 13 Emerald Hill Road, #02-01, Singapore 229297. Email [email protected]. Telephone +65 6236 7041.

16. Definitions

Personal data means data about an individual who can be identified from that data or from that data and other information to which we have or are likely to have access, as defined under the PDPA.

Processing includes collection, use, disclosure, and storage. You means a visitor, correspondent, or data subject interacting with us.

17. Collection without direct interaction

When you browse without emailing us, we may still process technical data via server logs as described above. We do not merge those logs with third-party marketing databases. We do not buy contact lists.

18. Marketing communications

We do not send promotional email newsletters as of 14 August 2026. If we introduce optional updates in future, we will ask for consent separately and provide unsubscribe instructions.

19. Data breach response

If we become aware of a breach likely to cause significant harm, we will notify affected individuals and authorities as required by PDPA. We maintain an internal incident log and review breaches in the Sunday file aggregate note when appropriate for transparency.

20. Journalism and public interest

Processing for journalism may include names and statements of public figures and private individuals where relevant and fair. We minimise inclusion of private contact details in published text. Subjects may request correction of factual personal data errors via Make Good; requests to remove truthful on-the-record statements are evaluated against public interest and law.

21. Employee and contractor data

Staff personal data is processed under separate employment agreements not covered by this web notice. Contractors with desk access sign confidentiality undertakings and receive access only to systems required for their role.

22. Automated decision-making

We do not use automated profiling or automated decisions about individuals that produce legal or similarly significant effects. Cast assignment is manual on the bench.

23. Access request process

To request access: email [email protected] with "Privacy access" in the subject, your name, and enough detail to locate data (e.g. dates of correspondence). We verify identity before disclosure. We respond within PDPA timelines; complex requests may require extension with explanation.

24. Correction request process

To request correction: specify the inaccurate field and provide supporting documentation where available. We correct factual personal data errors promptly. Disputes about editorial judgement in reporting are handled under Make Good, not as PDPA correction of opinion.

25. Withdrawal of consent

Withdraw cookie consent via the banner or Manage cookies on Cookies. Withdrawal does not affect prior lawful processing. Essential cookies reset if you clear them — the banner reappears.

26. Third-party embeds beyond maps

As of 14 August 2026, the only optional third-party embed is Google Maps when functional cookies are enabled. We review new embeds for privacy impact before deployment.

27. Record keeping

We maintain a data inventory listing systems, categories of data, purposes, and retention. The inventory is internal but summarised in this notice. Updates follow material system changes.

28. Your responsibilities

Do not send us sensitive health or financial data unless necessary for your enquiry. Do not include third parties' personal data without their knowledge unless you are authorised to share it.

29. Consent for photography

When we photograph individuals for reportage, we apply standards on The Lens. Subjects may contact us about factual errors in captions; requests to remove truthful on-the-record images are evaluated individually.

30. Data protection officer contact

Privacy queries may be addressed to [email protected] with subject "Privacy". The desk routes requests to staff responsible for data protection compliance. We do not require a separate portal.

31. Previous versions

Material changes to this notice are dated at the top. Prior versions are archived internally for seven years. You may request the date of your last accepted version if you previously corresponded with us about privacy.

32. Summary table

Logs: IP and browser, 90 days, security. Email: contact details and message, active matter plus archive. Cookies: consent flags, 180 days, preferences. Tips: source data, quench duration plus legal hold. No analytics cookies by default as of 14 August 2026.

33. Notification of changes

We do not email visitors about privacy updates unless you have corresponded with us and agreed to receive legal notices by email. Material changes appear on this page with an updated date.

34. PDPA organisational accountability

We designate responsibility for PDPA compliance to desk leadership and review processing activities when adding tools or embeds. DPIA-style reviews are documented internally before functional cookies or new processors deploy.