Who we are
Original Copy Studio Pte Ltd ("Original Copy Studio", "we", "us") is a creative studio incorporated in Singapore, with people in Singapore and Bangkok. This policy covers the personal data we handle when you visit originalcopy.studio, sign up for our resources, email us, interact with us on social media or work with us.
What we collect
- When you unlock a playbook or Prompt Vault prompt: your email address and the page you unlocked.
- When you join our list: your email address.
- When you email us: your name, your email address and anything you choose to include in your message.
- When you browse the site: the pages you view, the links you click, your browser and device type, your approximate location (city or country) and the site that sent you here. We collect this with Google Analytics, which uses cookies (see Cookies and local storage). It tells us how the site is used, not who you are.
- When you comment on our Instagram posts: your Instagram username and ID and your comment, if the comment triggers an automatic reply (see Instagram auto-replies).
- When you work with us: the names, job titles, business contact details and project correspondence of the people we deal with at your company.
Our website host, Netlify, also processes your IP address and browser details to deliver pages and protect the site from abuse. We don't take payments on this site, and we don't ask for sensitive data such as NRIC numbers.
How we use it
- to reply to your enquiry and to run client projects
- to send you the resource you asked for
- if you signed up for them, to send occasional emails about new playbooks and prompts. You can unsubscribe at any time by replying to one of these emails or writing to us.
- to see which pages are useful and improve the site
- to keep the site secure and filter out spam
- to meet our legal, tax and accounting obligations
We sometimes contact businesses we would like to work with, using business contact details they have published. If you would rather we didn't contact you, tell us and we will stop.
We don't sell personal data, and we don't use it for purposes you wouldn't reasonably expect from the way you gave it to us.
Who we share it with
We use a small number of service providers who process personal data on our behalf:
| Provider | What they do for us | Where data may be stored |
|---|---|---|
| Netlify | Hosts the website and receives form submissions | United States |
| Google Analytics, Google Workspace (our email), and YouTube videos, which only load when you press play | United States and other countries | |
| Meta | Instagram, including our automatic replies | United States and other countries |
| Supabase | The database behind our Instagram auto-replies | South Korea |
We may also share personal data with professional advisers, such as our accountants and lawyers, or with authorities when the law requires it.
Transfers outside Singapore
As the table shows, some of these providers store data outside Singapore. We only use providers that are bound by contract to protect personal data to a standard comparable to the PDPA.
Cookies and local storage
- Google Analytics sets two cookies,
_gaand_ga_5Z0YDCSNXN, which last up to two years. They count visits and tell new visitors from returning ones. Google Analytics doesn't log or store IP addresses. - Prompt Vault: when you unlock a prompt, your browser keeps a note that you have done so, along with the email you used, so you aren't asked again. This stays in your browser's local storage on your own device, and clearing your browser data removes it.
- YouTube: videos on our site use YouTube's privacy-enhanced mode and only load when you press play. YouTube may set its own cookies after that.
You can block or delete cookies in your browser settings, or stop Google Analytics on every site with Google's opt-out browser add-on. The site works without cookies.
Instagram auto-replies
When you comment a keyword on one of our Instagram posts, our AutoReplies tool can send you the resource by direct message. It works through Meta's official API and processes your Instagram username and ID, your comment and whether the message was delivered. If the message includes a link, we count clicks using a scrambled (hashed) form of your IP address, never the address itself, along with your browser type.
There is more detail in the AutoReplies privacy notice. You can ask for this data to be deleted through its data deletion page or by emailing us.
How long we keep it
- Enquiries: up to two years after we last hear from you, unless they become a project.
- Client project records: five years after the project ends, as Singapore's record-keeping rules require.
- List and Prompt Vault sign-ups: until you unsubscribe or ask us to delete them.
- Analytics data: 14 months.
- Instagram auto-reply logs: until we no longer need them to run or troubleshoot the automation.
Your rights
Under the PDPA you can:
- ask for a copy of the personal data we hold about you, and how we have used or disclosed it in the past year
- ask us to correct it
- withdraw your consent, for example to our emails
- ask us to delete it
Email us at the address below. We will reply within 30 days, or tell you within that time if we need longer. We may need to confirm your identity first. If you withdraw consent, we will explain what that changes, for example that we can no longer send you new resources.
Security
The site runs over HTTPS. Form submissions and client files are only open to the studio team and the people working on your project, and our providers protect stored data with their own security controls. No system is completely secure, so if a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commission (PDPC), as the PDPA requires.
Children
Our site and services are for businesses. We don't knowingly collect personal data from children under 13.
Changes to this policy
When our practices change, we will update this page and the date at the top. If a change is significant and we have your email address, we will tell you.
Contact us
Our Data Protection Officer is Dominic Ho. For anything about your personal data, email hello@originalcopy.studio with "Privacy" in the subject line.
Original Copy Studio Pte Ltd, Singapore
If you aren't satisfied with our response, you can contact the Personal Data Protection Commission.