Privacy Policy
How Project RE collects, uses, protects and discloses your personal data, in line with Singapore's Personal Data Protection Act 2012.
Last updated: 13 August 2026
The short version. We collect what we need to understand your body and help you train safely, and nothing more. We don't sell your data, and we don't share it for anyone else's marketing. You can ask what we hold, correct it, or withdraw your consent at any time by emailing derrickloy@projectre.com.sg.
1. Who we are
Project RE Pte Ltd (UEN 202438619G) ("Project RE", "we", "us") provides movement coaching, education and mentorship in Singapore. This policy explains how we handle personal data under the Personal Data Protection Act 2012 ("PDPA").
Our Data Protection Officer is Derrick Loy. You can reach the DPO on any matter in this policy at derrickloy@projectre.com.sg.
2. What we collect
Depending on how you interact with us, we may collect:
- Contact details. Your name, email address and, if you choose to give it, your phone number.
- Enquiry details. What you submit through our Clarity Call form: your primary limitation, how long you've had it, what you've tried, what you want to get back to, whether you're ready to prioritise it, your age and your gender.
- Health and movement information. Where relevant to coaching you safely: injury and medical history, symptoms, diagnoses or scan results you choose to share, assessment findings, movement measurements, and progress notes.
- Media. Photographs or video of you moving, where we have asked for and received your separate consent.
- Correspondence. Messages you send us by email, message or through our coaching tools.
We do not collect payment card details through this website.
3. Why we collect it
We use your personal data only for these purposes:
- To assess whether we're a suitable fit for what you need.
- To contact you and arrange your Clarity Call or consultation.
- To carry out your assessment and design, deliver and adjust your coaching programme.
- To keep records of your progress so our coaching stays safe and informed.
- To respond to your questions and provide support.
- To meet our legal and record-keeping obligations.
If we ever want to use your data for a purpose not listed here (for example, using your story or photograph in marketing), we will ask you separately, and you are free to say no.
4. Consent and withdrawing it
By submitting our form or providing information during coaching, you consent to us collecting, using and disclosing your personal data for the purposes above.
You may withdraw your consent at any time by emailing our DPO. We will confirm what withdrawal means for the services we can continue to provide, and action it within a reasonable period, normally within 10 business days. Withdrawing consent does not affect anything we did lawfully before you withdrew it, and we may still need to retain certain records to meet our legal obligations.
4a. Marketing communications
We only send you news about our workshops, events and services if you have specifically opted in. There is a separate, unticked box on our enquiry form for this. Ticking it is optional, and we will still respond to your enquiry either way.
If you opt in, you can expect occasional emails about upcoming workshops, events and services. We do not send them at high frequency, and we do not pass your details to anyone else to market to you.
You can unsubscribe at any time using the link in any message we send, or by emailing our DPO. Once you unsubscribe we stop sending, and we delete your details unless we still need them for another purpose you have consented to.
If we ever contact you by phone or text message for marketing purposes, we will first check the Singapore Do Not Call Registry, unless you have given us clear and unambiguous consent for that specific number as permitted under the PDPA.
5. Who we share it with
We do not sell your personal data, and we do not share it for third-party marketing. We share it only with:
- Service providers who help us operate. Our form provider (Formspree), our email provider, and any scheduling or coaching software we use. They may only process your data on our instructions.
- Other practitioners, with your agreement. If we are not the right fit for you, we may refer you to someone in our trusted network. We will ask you before passing on any of your details.
- Where the law requires it. For example, in response to a lawful request from a regulator or court.
6. Transfers outside Singapore
Some of our service providers store data outside Singapore. In particular, form submissions are processed by Formspree, whose servers are located in the United States.
Where we transfer personal data overseas, we take reasonable steps to satisfy ourselves that the recipient is bound by legally enforceable obligations to protect it to a standard comparable to the PDPA, as required by the Transfer Limitation Obligation.
7. How long we keep it
We keep personal data only for as long as it serves the purpose it was collected for, or as long as we are required to keep it by law.
- Enquiries that don't become clients. Deleted within 12 months of your last contact with us, unless you have opted in to hear about our workshops, events and services. In that case we keep your name and contact details for that purpose until you tell us to stop, and delete the rest of your enquiry at the 12-month mark.
- Client records, including health and assessment information. Retained while you are a client and for 6 years after our engagement ends, then securely deleted. We keep them this long so that we can respond to any question or claim about the coaching we provided, for as long as one can be brought.
- Photographs and video. Deleted on request, and in any case when the consent you gave for them is withdrawn.
8. How we protect it
We take reasonable security arrangements to protect personal data against unauthorised access, collection, use, disclosure, copying, modification or disposal. These include limiting access to those who need it, using reputable providers with encryption in transit, protecting accounts with strong authentication, and securely deleting data we no longer need.
No method of transmission or storage is completely secure. If a data breach occurs that is likely to result in significant harm to you, we will notify you and the Personal Data Protection Commission as required.
9. Accessing and correcting your data
You have the right to ask us:
- what personal data we hold about you, and how it has been used or disclosed in the past year; and
- to correct anything that is inaccurate or incomplete.
Email our DPO with your request. We will respond as soon as reasonably possible, and normally within 30 days. If we cannot respond within that time we will tell you when to expect a reply. A reasonable fee may apply to access requests, and we will tell you the amount before proceeding.
10. Cookies and analytics
This website does not set tracking or advertising cookies. Fonts are loaded from Google Fonts, which means Google receives your IP address in order to serve them.
11. Complaints
If you have a concern about how we've handled your personal data, please contact our DPO first. We would rather hear from you and put it right. If you are not satisfied with our response, you may raise the matter with the Personal Data Protection Commission of Singapore at pdpc.gov.sg.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised. If we make a significant change to how we use your data, we will tell you directly where we reasonably can.
13. Contact
Data Protection Officer
Derrick Loy
Project RE Pte Ltd (UEN 202438619G)
derrickloy@projectre.com.sg