YOUR INFORMATION
Privacy notice
What you share, why we need it, and how to reach us.
Updated 29 October 2026
Who we are
Toby Digital Studio is operated by TOBY DIGITAL SOLUTIONS PTE. LTD. (UEN 202647085N), a company registered in Singapore. In this notice, “we” and “our team” refer to the company and the people handling enquiries on its behalf.
Privacy enquiries
For questions about your personal data, or access, correction or consent-withdrawal requests, email Hello@tobydigitalstudio.com with “Privacy request” in the subject.
When you send an enquiry
We collect your name, preferred contact method, email address or phone number, business description, the task you describe and any current tools you choose to share. The form also records your consent, a submission time and an enquiry reference.
We use this information to understand your request, respond, arrange any agreed follow-up and maintain a record of the conversation. Our private review desk and staff workspace record review status, flags, follow-up dates and internal notes to help us handle enquiries and follow-ups. The workspace reads the Google register without changing its original enquiry; workspace notes are stored separately in the hosted database. Submitting an enquiry does not subscribe you to marketing.
Please share only what is needed to describe the task. Do not send passwords, identity documents, payment credentials, patient records or other sensitive customer information.
Where your enquiry goes
Your enquiry and contact details are saved in a private register hosted by Google and emailed to our team. If you choose email as your contact method, we also send an acknowledgement to that address.
We use Make and Telegram for team notifications containing your enquiry reference, submission time and a private register link. Enquiry-related email and notification history may also be retained to help us handle your request.
People handling your enquiry and the service providers supporting these tools may process this information. Google, Make, Telegram and our website’s hosting providers may process data outside Singapore. You can read Google’s privacy policy and OpenAI’s privacy policy for their own practices.
Invitations, RSVP and organiser access
Our hosted RSVP service is being tested. Real purchases and payment collection remain disabled until launch. Public invitation demos use fictional details; an event invitation and its private organiser dashboard are separate from those demos.
For an event enquiry or commissioned invitation, we use the organiser’s contact details, event information and supplied photos to prepare the invitation and provide support. An invitation photo and published event details are visible to people who can open its invitation link. Please use photos you have permission to share, and share invitation links carefully.
Guest replies include a name or household name, attendance, adult and child totals, and any optional dietary or other note. The organiser can manage and export those replies. Please include only information needed for the event. Other guests cannot browse the guest list through the invitation.
The TDS staff dashboard does not show guest lists or dietary notes by default. The organiser can grant temporary support access to a named TDS staff email and revoke it. Necessary technical administration and recovery remain separate from this dashboard permission; the service is not end-to-end encrypted against the hosting operator.
Organiser sign-in codes are sent to an email approved for that event using Resend. A personal-device option keeps a secure sign-in session for up to 90 days; signing out or losing access can require a new code. This session duration does not extend event access or data retention. Keep access to your email secure and do not share sign-in codes.
When purchases are enabled, order records will include the selected package, price, customer contact details, optional billing address, and payment-report information. Payment screenshots are optional and private to authorised handling staff. Screenshots and an “I’ve paid” report are not proof that funds arrived. We do not collect online banking passwords or card credentials.
The planned event-retention policy removes guest replies, dietary notes and invitation photos 90 days after the event. Unconverted RSVP enquiries are removed after 90 days of inactivity. An optional returning-client profile keeps only the organiser’s email and invitation theme for up to 24 months, not guest lists or photos. Financial records are kept separately and reviewed for accounting and dispute requirements.
Automated deletion and separate scheduled backups are not active in this test release. Before real orders open, backup and deletion checks must pass. The planned rolling encrypted backups expire within 30 days, so a deleted event’s backup copy can remain for up to a further 30 days. Download any guest list you need before event access ends.
RSVP records and uploaded files use the website’s hosted database and file storage through Sites and Cloudflare. Resend processes sign-in email delivery. These providers may process data outside Singapore. Contact hello@tobydigitalstudio.com for access, correction or deletion requests.
Interactive demos and AI examples
Demo interactions run in your browser. They do not send messages, make bookings or collect payments. Please use fictional details only.
The enquiry demo stores sample enquiries, edited replies and review decisions in this tab’s session storage, so they remain available after a reload. This storage normally clears when the browsing session ends; your browser may restore it when restoring a session. You can remove individual sample enquiries using “Remove” in the review desk. If storage is unavailable, samples last only until the page reloads.
The other interactive demos reset when the page reloads. Enquiry recommendations use local rules and reply templates, with some examples showing preset results. No demo inputs are sent to a live AI model or our team. The real website contact form is separate and sends your enquiry when you select “Send my enquiry”.
Keeping the enquiry form available
We use Cloudflare Turnstile to reduce automated spam. Cloudflare processes browser and network challenge information and a random form reference. We do not send your name, email, phone number or enquiry text to Turnstile. Processing may take place outside Singapore. See Cloudflare’s privacy policy.
We also keep limited abuse-prevention records, including coded contact identifiers and submission information, for up to two days. These records can still be linked to an enquiry. If a security check prevents you from contacting us, please use our email link.
Website previews and your brief
The feature explorer and website builder save your selected theme, features, design versions and exact design references in this tab’s session storage. These choices contain no contact details or sample-site inputs. Storage normally clears when the session ends, although your browser may restore it. Remove a selected feature using its tick button in the explorer or its × button under “My brief”. Remove an exact design reference using its × button under “My brief”. In the builder, untick individual features or use “Clear preview” to remove the saved configuration.
“Discuss my website” in the feature explorer or “Discuss this website” in the builder adds your saved choices to the contact form for you to review and edit. They are sent to our team only when you submit the form; enquiry retention then applies.
You can also copy or download a brief to your own device. This does not send it to us, and you control any copies you save or share. If browser storage is unavailable, choices last only until the page reloads.
Preview websites use sample data and do not make bookings, place orders or take payments. Pointer positions and scroll progress are used only for local visual effects. We do not save these interactions or send them, brief choices or builder choices to analytics.
Cookie-free website analytics
We use Cloudflare Web Analytics on tobydigitalstudio.com to understand overall visits, page views and website performance. Reports include pages viewed, referring websites, country, device type, browser, operating system and loading performance.
Cloudflare receives page and referrer URLs, network information such as your IP address, and technical performance data. Its analytics beacon does not use cookies or browser storage to track visitors across websites. Processing may take place outside Singapore. Read Cloudflare’s analytics data information and privacy policy.
We do not send contact-form fields, enquiry messages, demo inputs or edited replies to analytics. We do not use session recordings or advertising profiles. Page visits to the standalone demo may be counted; its sample enquiry content stays in your browser.
Our website respects Global Privacy Control and Do Not Track for this analytics beacon. You can enable either supported browser setting to prevent it from loading.
Keeping and protecting information
We retain enquiry information for handling your request, agreed follow-ups and any applicable legal or business obligations. Our policy is to review inactive enquiries that have not become clients for removal 12 months after the last contact. Records may be retained longer for ongoing matters or applicable legal obligations.
We maintain access-restricted backups for recovery. These copies are subject to our data-retention reviews and may remain after information is removed from our active systems.
Access to enquiries, review notes and backups is restricted to authorised handling and recovery. We take relevant correction and deletion decisions into account when restoring information. No online service can guarantee complete security, so please keep sensitive records out of the contact form.
Your choices and requests
You can ask about the personal data we hold, request access or correction, raise a concern, or withdraw consent to further use by emailing the privacy contact above. You can also ask us to delete information that is no longer needed, subject to applicable requirements.
Include your enquiry reference if available and a brief description of the request. We may need to verify your identity before providing personal information. Please do not send identity documents unless a suitable verification method has been agreed.
If you withdraw consent, we will explain any consequences, such as being unable to continue responding to your enquiry. We handle requests subject to applicable Singapore data-protection requirements and exceptions.
Changes to this notice
We will update this page if our tools or practices change. The date above identifies the latest revision.