Privacy Policy

Last updated: 2026-07-13

1. Privacy controller

Local Web Works is a trading name used by Lucas Toh, with no UEN currently registered (Local Web Works, we, us).

Privacy contact: contact@sitesbuilder.store WhatsApp: +65 9161 6337

Lucas Toh is the privacy controller trading as Local Web Works. A correspondence address is supplied privately where reasonably required and is not published on the website.

2. Data we may receive

When someone contacts us or requests a preview, we may receive:

• name, business name and role;
• phone number, email address and contact preferences;
• current website or social link;
• information about the business, services, desired improvements and preferred package;
• logos, copy, images, product/service information and other material supplied for a preview or project;
• messages, approvals, feedback, proposal, invoice and payment-status records;
• technical logs such as IP address, browser/device type, request time, referring page and security events;
• non-sensitive website interaction events and Web Vitals where analytics is enabled.

Do not send unnecessary sensitive personal data through the preview request.

3. Why we use data

We use appropriate data to:

• respond to enquiries and assess fit/capacity;
• prepare and discuss a requested preview;
• create proposals, scopes, timelines and invoices;
• deliver, support and hand over website work;
• operate hosting/care services where purchased;
• maintain security, backups, reliability and fraud/abuse prevention;
• keep accounting and legal records;
• improve website usability and measure non-sensitive actions;
• comply with law and resolve disputes.

We process personal data for steps requested before a contract, performance of a contract, consent where required, compliance with legal obligations, and proportionate operational interests such as security and responding to enquiries.

4. Free-preview material

Material supplied for a preview is used only to assess and create the requested direction, communicate about it, protect against misuse and keep a reasonable project/audit record.

The requester confirms they are authorised to provide the material. Watermarked preview artefacts are not public by default. Local Web Works does not publish a requester’s preview, name, screenshots, testimonial or results without appropriate permission.

If no paid project follows, preview working material is normally deleted or de-identified within 30 days, except where retention is needed for security, legal claims, suppression/opt-out records or accounting.

5. WhatsApp and email

The primary contact action opens WhatsApp with an optional prepared message. The messaging platform processes data under its own terms and privacy policy. Email is delivered through the sitesbuilder.store business-email service. An internal provider register records the current vendor, purpose, data category and operational owner.

Do not include entered WhatsApp/email message text, supplied business URLs, phone numbers or email content in analytics events.

6. Analytics

The public website does not enable analytics at launch. Standard hosting and security logs may still contain technical request data as described in this policy. If analytics is enabled later, this policy will be updated before collection begins and the implementation will exclude business names, message text, prospect-supplied URLs, phone numbers and email content.

7. Hosting, logs and service providers

Data may be processed by providers used for website hosting, deployment, email, WhatsApp communication, analytics, invoicing/payment, monitoring, backups and customer-selected integrations.

The private provider register records the current purpose, data category, operational owner and available retention or security information for material providers.

We do not sell personal data.

8. Third-party websites and customer projects

Portfolio and contact links may open third-party websites. Their privacy practices apply after leaving our site.

For a customer website, the proposal must state whether Local Web Works acts as an independent controller, processor/service provider or has no access to the customer’s end-user data. Customer-specific data-processing terms are required where appropriate.

9. Retention

Proposed retention schedule, subject to verification and legal requirements:

• unsuccessful enquiry/preview working material: up to 30 days;
• ordinary enquiry correspondence: up to 12 months after last meaningful contact;
• project files and approvals: project term plus 12 months, unless an active service, warranty, dispute, security or legal need applies;
• invoices/accounting records: the legally required period, confirmed before payment collection;
• care-plan deployment history/customer content after cancellation: 30 days, unless export, dispute, security or law requires longer;
• analytics: not applicable while analytics remains disabled;
• suppression/opt-out record: as long as reasonably needed to honour the request.

Delete or de-identify data when no longer needed, subject to secure backups aging out under documented schedules.

10. Security

Use access controls, least privilege, multi-factor authentication where available, secret management, encrypted transport, provider security controls, production/preview isolation, backups where contracted and prompt revocation of unnecessary access.

No internet service is perfectly secure. Security incidents are handled under a documented response process and applicable notification duties.

11. International processing

Some provider categories may process data outside Singapore. Local Web Works uses available contractual, account-security and technical safeguards and limits the personal data shared to what the service requires.

12. Individual rights and requests

Depending on applicable law, individuals may ask to access, correct, delete or limit use of their personal data, withdraw consent, object to certain use or complain to the relevant regulator.

Requests: contact@sitesbuilder.store

We may need to verify identity and retain limited data where law, security, accounting or legal claims require it.

13. Children and sensitive data

The Local Web Works service is directed to businesses and is not intended for children. Do not intentionally request sensitive personal data for a free preview. If sensitive or child data is received unexpectedly, restrict access and assess deletion/legal obligations promptly.

14. Changes

Material policy changes show an updated date. Where required, provide additional notice or obtain consent before a new use.

15. Complaints

Contact us first at contact@sitesbuilder.store so we can investigate. You may also contact Singapore's Personal Data Protection Commission through pdpc.gov.sg.