Privacy Policy
Effective date: 1 August 2026. Last updated: 20 August 2026.
1. Introduction
Listen And Rate Pte. Ltd. ("we", "us", "our") operates listenandrate.pro (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit the Site or contact us. We are committed to handling personal data responsibly and in accordance with applicable law, including the Personal Data Protection Act 2012 of Singapore ("PDPA") where it applies to our activities.
Please read this policy carefully. By using the Site, you acknowledge that you have read this Privacy Policy. If you do not agree, please discontinue use of the Site.
2. Data Controller
The data controller responsible for personal data processed through this Site is:
Listen And Rate Pte. Ltd.
173 Chin Swee Road, #06-02 San Centre
Singapore 169877
Email: [email protected]
Telephone: +65 6248 3917
3. Scope
This Privacy Policy applies to personal data collected through listenandrate.pro and communications you initiate with us via email or telephone. It does not apply to third-party websites or services linked from our Site, including Spotify. Those services have their own privacy policies and terms.
We do not operate user accounts, subscription paywalls, or e-commerce checkout on this Site. Our data processing is therefore limited compared with platform businesses.
4. Information We Collect
4.1 Information you provide
If you email or call us, we receive the content of your message, your email address or phone number, and any information you choose to include. We do not operate contact forms on this Site.
4.2 Automatically collected information
Our hosting provider may log standard server data: IP address, browser type, referring URL, pages requested, and timestamps. We use these logs for security, troubleshooting, and aggregate traffic understanding — not for profiling individual visitors for advertising.
4.3 Cookies
We use a minimal cookie or local storage entry to remember your cookie consent choice. See our Cookie Policy for details.
4.4 What we do not collect
We do not collect payment card data, government identification numbers, precise geolocation from your device, or health information through this Site.
5. How We Use Information
We use personal data to: respond to enquiries and correction requests; maintain Site security and integrity; comply with legal obligations; improve editorial accuracy when you report errors; and record cookie consent preferences where applicable.
We do not use personal data for behavioural advertising on this Site, automated decision-making with legal effects, or sale of personal data to data brokers.
6. Legal Bases
Under the PDPA and general privacy principles, we rely on: consent where you initiate contact or accept cookies; legitimate interests in operating a secure editorial website and responding to readers; and legal obligation where retention is required by applicable law.
7. Cookies
Essential preference storage may be used for consent banner state. We do not deploy third-party advertising cookies on review pages. Full details are in our Cookie Policy.
8. Sharing and Disclosure
We may share personal data with: hosting and infrastructure providers under contract; professional advisers bound by confidentiality; and authorities when required by law or valid legal process. We do not sell personal data.
9. Data Retention
Email correspondence is retained as long as needed to resolve enquiries and for a reasonable period thereafter for audit purposes — typically up to twenty-four months unless a longer period is required by law or ongoing correspondence. Server logs are rotated on a schedule determined by our host, generally not exceeding ninety days for raw access logs.
10. Security
We implement appropriate technical and organisational measures including HTTPS transport, access controls on editorial systems, and staff training on phishing and data handling. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.
11. International Transfers
Our Site is hosted in Singapore. If you access the Site from outside Singapore, your data may be processed in Singapore. Email routed through global providers may transit other jurisdictions under those providers' policies.
12. Your Rights
Subject to applicable law, you may request access to, correction of, or deletion of personal data we hold about you, or withdraw consent where processing is consent-based. Contact [email protected]. We may need to verify your identity before responding. You may lodge a complaint with the Personal Data Protection Commission of Singapore if you believe our processing violates the PDPA.
13. Children
The Site addresses mature true-crime subject matter and is intended for adults. We do not knowingly collect personal data from children under thirteen. If you believe a child has contacted us, email [email protected] and we will delete the correspondence where appropriate.
14. Third-Party Links
Links to Spotify and other external sites are ordinary hyperlinks. When you follow them, you leave our Site and become subject to the third party's terms and privacy practices. We do not control Spotify's collection of listening data.
15. Changes to This Policy
We may update this Privacy Policy to reflect legal, technical, or editorial changes. The "Last updated" date at the top will change when we publish revisions. Material changes may be noted on the Site homepage for a reasonable period.
16. Contact
Privacy enquiries: [email protected]
General contact: [email protected]
Listen And Rate Pte. Ltd., 173 Chin Swee Road, #06-02 San Centre, Singapore 169877
17. Data Protection Officer
Although we are a small editorial publisher, we designate a data protection contact at our privacy mailbox. That person coordinates access requests, breach notifications where required, and staff training on email handling. For most readers, the only personal data we hold is whatever you include in voluntary email correspondence.
We do not maintain marketing lists derived from Site visits. If you email us once about a correction, we do not add your address to a newsletter because we do not operate a newsletter.
18. Analytics and Log Files
We may review aggregated server statistics — total page views, referrers, error rates — without identifying individual visitors by name. Raw IP addresses in logs are used for security monitoring and are not merged with editorial databases. We do not purchase third-party marketing analytics that fingerprint browsers across unrelated sites.
If we introduce privacy-preserving analytics in future, this policy will be updated before collection begins, and the Cookie Policy will list any new storage identifiers.
19. Breach Notification
If a personal data breach likely to result in significant harm occurs, we will notify affected individuals and the Personal Data Protection Commission of Singapore where required by law. Given the limited categories of data we process, our breach scenarios primarily involve unauthorised access to email archives or hosting credentials — events we mitigate through access controls and host security features.
20. Your Responsibilities
Please do not send sensitive personal data unrelated to your enquiry — such as government ID numbers or financial account details — when contacting us about a podcast review. We cannot secure information we do not need. If you reference a criminal case, remember that email is not a confidential legal channel; use professional legal services for matters requiring privilege.
21. Marketing Communications
We do not send marketing email to Site visitors because we do not collect addresses through forms or newsletters. If you email us, we reply about your enquiry only. We do not add you to bulk mailing lists or sell your address to sponsors.
22. Automated Processing
We do not profile visitors for automated decisions with legal or similarly significant effects. Server-side security tools may automatically block suspicious IP ranges; those actions affect access rather than editorial rights.
23. Records of Processing
Internally we maintain a simple register of processing activities: contact email, server logs, consent storage, and hosting contracts. The register is reviewed annually or when functionality changes.
24. Supervisory Authority
The Personal Data Protection Commission (PDPC) is the supervisory authority for the PDPA in Singapore. Contact details and complaint procedures are published on the PDPC website. We encourage you to contact us first so we can address concerns directly.
When we receive a valid access request, we respond within the timeframe required by applicable law, typically within thirty days unless an extension is permitted. Complex requests may require additional verification steps to protect data about other individuals mentioned in the same email thread.
25. Data Minimisation in Practice
Staff are instructed to delete attachments unrelated to editorial correction once resolved. Email threads containing only routine praise with no ongoing matter are archived briefly then deleted. We do not build CRM profiles from casual reader mail.
26. Complaints Handling
We log privacy complaints internally with date, summary, and resolution. You may request confirmation that your complaint was received and closed. We aim to acknowledge privacy complaints within five business days.
27. Accessibility of This Policy
This policy is available as HTML readable without JavaScript. If you need a plain-text copy emailed to you, contact the privacy mailbox and we will send the current version within a reasonable time.