How I handle your details

Who's responsible

When this page says "I", it means me and my business. I run terris.sg, the Terris Recommends guides on it, and my Instagram and Facebook pages myself, so any question about your data comes straight to me.

• Email: hello@terris.sg
• WhatsApp: +65 9751 8539

What I collect when you get in touch

• Forms on this site. The contact, quote, WhatsApp and Terris Recommends forms ask for your name and email, and some also ask for your phone number, company, website and what you need. Each form sends what you typed to my inbox as an email, with the page you sent it from. The site itself doesn't keep a copy.
• The quote form sends me your name and contact details as soon as you move past that step, so I can still help if you stop before the end.
• Free tools. If you ask for a tool's results by email, I send them to you and get a copy with your name, your email and the figures you entered. The Google Ads headline generator sends the business details you type in to DeepSeek's AI, which writes the headlines. It doesn't ask for your name or email.
• WhatsApp, email and calls. If you contact me directly, I get what you send, plus your number or email address and the name your account shows.
• The chat on the homepage. Its answers are written in advance. Nothing you type in it leaves your browser until you choose to send it to me on WhatsApp. I can see which of the ready-made questions people tap, never the words they type.

What I use it for

• To reply to you, answer your questions and send you a quote.
• To follow up on a quote I've sent you, a few times at most.
• To do the work you hire me for, and to invoice you for it.
• To keep the records a business has to keep, such as invoices.
• To see which pages, guides and ads bring enquiries, so I can improve them. That uses the visit statistics described below, not your messages.

I don't sell or rent your details, and I don't add you to a mailing list.

When you send me a form or a message, you agree to me using your details for these things. You can change your mind at any time: see your rights.

When we work together

• Your brief. The client brief form asks about your business, goals, budget and timeline. Files you attach go to a folder in my Google Drive (or, if Drive is down, onto the email itself), and you get a copy of your brief by email.
• What you send me during a project. Photos, logos, text, product lists, and logins to your website, hosting, domain or other accounts. I use them only for your project, keep them in my email, WhatsApp and Google Drive, and share them only with the services the work runs on, such as your host. When the project ends, change any password you gave me.
• My notes. I keep a record of each enquiry and project, with what we agreed and copies of our messages, so I can check what was said later.
• Your review and your case study. If you leave me a Google review, I may show it on this site word for word, with your name and your Google profile picture, next to the case study of the site I built for you. Case studies show your business's name and website. Ask and I'll take either one down.

Invoices and payments

I send invoices through QuickBooks, which holds your name or company, your email address and what each invoice is for. You pay by bank transfer, or by PayPal if you're outside Singapore. I see the payment that reaches me, never your card details.

I keep invoices and payment records for as long as Singapore's tax rules require.

Cookies, analytics and ads

These run on this site:

• Umami counts visits without cookies: which pages are read, where visitors came from, their browser, device and country, and which buttons get tapped. It doesn't identify you.
• Microsoft Clarity records how visitors scroll, tap and move through a page, as heatmaps and replays of visits, so I can find what confuses people. Microsoft and I collect this through first-party and third-party cookies and similar technology, and Microsoft also uses it as its Privacy Statement describes.
• The Google Ads tag tells me when someone who clicked one of my ads sends a form or opens WhatsApp, so I know which ads bring enquiries.
• Google reCAPTCHA checks that a form is sent by a person and not a spam bot, by looking at how the page is used and at your browser. Google's Privacy Policy and Terms of Service apply.
• Google Fonts supplies the site's typefaces, so your browser fetches them from Google, which sees your IP address.
• Elfsight shows my Google reviews on the pages that have them, loading them from its own servers.

Ads based on your visits

I use Google Ads remarketing, so after you visit this site you may see my ads on Google and on other websites. Third-party vendors, including Google, show these ads on sites across the internet, and they use cookies to choose them based on your past visits to this site and to other websites.

To opt out, turn off personalised ads in your Google Ads Settings, or opt out of many other vendors' use of cookies at aboutads.info. You can also block or clear cookies in your browser. The site, its forms and its WhatsApp links still work without them.

Kept in your browser only

A few things are saved in your own browser and never sent to me: light or dark mode, your unfinished answers in the longer forms so you don't lose them, the email you gave a free tool, and a few settings on the 3D pages, such as sound.

Terris Recommends

• Listed businesses. The guides list businesses with the website, WhatsApp number and email address each one publishes for its customers. Under the PDPA, these are business contact information. I may use them to contact a business about its listing. If you run a listed business and want a detail corrected or removed, email me.
• Contact buttons. When a reader taps a business's WhatsApp or email button, Umami records which business and which guide, never who tapped. The message itself goes to that business, not to me. Businesses with a paid Featured Spotlight get a monthly email with the counts for their own listings.
• The Recommends contact form (to suggest a business, ask to be featured or report a correction) sends your name, email and message to my inbox.

Instagram, Facebook and other links

I post on Instagram and Facebook. If you message me or comment there, I see it, and Meta handles it under its own policies. The social and share buttons on this site are plain links: nothing loads from Meta, LinkedIn or X until you tap one. Other sites I link to have their own privacy policies.

Who else handles your details

Nobody else gets your details apart from the services I run the business on, which handle them for me:

• Vercel hosts this site and runs its forms. Its servers keep technical logs of requests, such as IP addresses.
• Resend delivers the emails the forms send.
• Google: Gmail for my email, Google Drive for project files, the Google Ads tag, reCAPTCHA and Google Fonts.
• Meta: WhatsApp, Instagram and Facebook.
• Microsoft: Clarity.
• Umami: visit statistics.
• Elfsight: the reviews widget.
• DeepSeek: the AI behind the Google Ads headline generator.
• Intuit QuickBooks: invoices.
• PayPal: payments from outside Singapore.
• GitHub: my private project notes and this site's code.
• AI assistants, including Anthropic's Claude, which help me draft replies, write copy and keep my project notes in order. A message you send me may be processed by them.
• Your own providers. For a project, I may give your host, domain registrar or website platform what the work needs.

Most of these services store data outside Singapore, mainly in the United States. DeepSeek is based in China. If the law requires it, I may also have to share details with the authorities.

How long I keep it

• Enquiries and messages: for as long as I need them to reply and for my business records, then I delete them.
• Project files and notes: while we work together, and afterwards for as long as you might need changes or help with your site.
• Invoices and payment records: for as long as Singapore's tax rules require.
• Visit statistics: Umami, Clarity and Google keep them under their own retention settings.

Keeping it safe

The whole site runs over HTTPS, so what you type into a form is encrypted on its way to me. Your details stay with the services listed above. If a data breach ever affected your details in a way the PDPA requires me to report, I'd tell you and the Personal Data Protection Commission.

Your rights

You can ask me to:

• tell you what details I hold about you, and how I've used or shared them in the past year
• correct anything that's wrong
• stop using your details. I'll stop, and tell you first if that affects work in progress
• delete your details, apart from what tax rules make me keep

Email hello@terris.sg or WhatsApp +65 9751 8539. I'll answer you myself, within 30 days. If you're not happy with how I've handled it, you can complain to Singapore's Personal Data Protection Commission.

Changes to this page

If what I collect or the services I use change, I'll update this page and the date at the top.