We will never sell, rent or trade your personal data. This policy explains what we collect, why, and the choices you have.
1. Who we are
This website and our services are run by Lets Flow Pte. Ltd. (trading as Let's Flow), a company registered in Singapore. Company registration number (UEN): 202423510N. Registered address: 20 COLLYER QUAY, #09-01, SINGAPORE 049319.
Let's Flow is the data controller for the personal data described in this policy. This means we decide how and why your data is used, and we are responsible for looking after it.
This policy applies to everyone who visits letsflow.sg, downloads our resources (including the resources that accompany the book Momentum), subscribes to our emails, buys our courses or products, or works with us as a client. It is written to meet the Singapore Personal Data Protection Act (PDPA), the EU and UK General Data Protection Regulation (GDPR), and other privacy laws that may apply to you, such as those in Australia, Canada and California.
If you have any questions, contact us at [email protected].
2. What we collect and why
We only collect what we need. Most of it comes directly from you, for example when you fill in a form, sign up for a resource or contact us.
What we collect | Why we use it | Legal basis (GDPR) |
|---|---|---|
Name and email address when you download resources | To send you the templates and guides you asked for | Performance of your request (contract) |
Name and email address when you opt in to marketing | To send our newsletter, leadership insights, events and offers | Your consent |
Contact and billing details when you buy a course or product | To process your purchase, give you access and keep financial records | Contract and legal obligation |
Information you share when you contact us or work with us | To respond to you and deliver our services | Contract or legitimate interests |
Email engagement data (for example, whether an email was opened or a link clicked) | To understand what content is useful and improve it | Consent (given when you opt in to marketing) |
Basic website usage data (pages visited, device and browser type, approximate location) | To keep the website working well and understand how it is used | Legitimate interests, or consent where cookies require it |
We do not collect sensitive personal data (such as health, religion or ethnicity), and we ask that you do not send it to us.
Under the PDPA, we rely on your consent, or on purposes permitted by law, for collecting, using and disclosing your personal data.
3. Our emails, your consent and unsubscribing
We use your details for our own newsletters and offers only. We never sell your data, and we never pass it to other organisations for their marketing.
- We ask first. We only send marketing emails if you have actively agreed, by ticking an unticked box or confirming your subscription.
- What you will receive. Leadership insights, news about Let's Flow, the ACT! Leadership System and Momentum, and occasional offers for our courses, workshops, coaching and events.
- Unsubscribe any time. Every email includes an unsubscribe link. You can also email us and we will remove you promptly. Unsubscribing does not affect anything you have already downloaded.
- We keep a record. We record when and how you gave consent, so we can show we have your permission.
If you unsubscribe, we keep your email address on a suppression list only so that we do not contact you again by mistake.
4. Who we share it with
We share your data only with trusted service providers who help us run our business, and only as much as they need. They act on our instructions and must keep your data secure.
Provider | What they do for us |
|---|---|
MailerLite | Sends our emails and stores subscriber lists |
Thinkific | Hosts our online courses and digital products, and processes payments |
Stripe | Processes payments securely (we never see your full card details) |
Squarespace | Hosts our website and forms |
We may also disclose data if the law requires it, or to protect our legal rights.
5. International transfers
We are based in Singapore, and some of our providers store data in other countries, including the United States. When your data leaves your country, we make sure it is protected to a comparable standard, for example through Standard Contractual Clauses or the provider's certification under recognised data protection schemes.
6. How long we keep it
- Email subscribers: until you unsubscribe, or after 2 years with no engagement, when we will ask whether you still want to hear from us or remove you.
- Customers: for as long as you have access to your purchase, and financial records for 5 years to meet Singapore legal requirements.
- Enquiries and client work: for as long as needed to deliver our services and for a reasonable time afterwards.
7. Keeping it secure
We use reputable providers with strong security, limit access to people who need it, and use secure passwords and two-factor authentication. No system is completely secure, but if a data breach is likely to put you at risk, we will tell you and the relevant authorities as the law requires.
8. Your rights
Wherever you live, you can ask us to:
- See the personal data we hold about you
- Correct anything that is wrong or incomplete
- Delete your data
- Withdraw consent at any time, without affecting anything we did before you withdrew it
- Object to or restrict how we use your data
- Receive a copy of your data in a portable format
To use any of these rights, email [insert privacy email]. We will reply within 30 days and will not charge you. We may need to confirm your identity first.
If you are in California: we do not sell or share your personal information as defined by the CCPA/CPRA, and we will not treat you differently for using your rights.
If you are unhappy with how we have handled your data, please talk to us first. You also have the right to complain to your local data protection authority, such as Singapore's Personal Data Protection Commission, the UK Information Commissioner's Office, or the authority in your EU country.
9. Cookies
Cookies are small files stored on your device when you visit a website. Our website runs on Squarespace and our courses run on Thinkific, and both platforms set cookies on our behalf. We do not use advertising or tracking cookies to target you with ads.
Type of cookie | What it does | Set by | Do we ask first? |
|---|---|---|---|
Strictly necessary | Keeps the site secure, lets you log in, remembers your basket at checkout, and remembers your cookie choices | Squarespace, Thinkific | No. These are needed for the site to work, so they cannot be switched off |
Analytics and performance | Counts visits and shows us which pages are useful, for example how many people visit and where they came from. Some last up to 2 years | Squarespace, Thinkific | Yes. We only use these if you accept them |
Third-party content | Embedded content such as videos, sign-up forms and payment pages may set their own cookies | For example MailerLite, Stripe, YouTube or Vimeo | These follow the provider's own cookie policy |
When you first visit our website, a cookie banner lets you accept or decline non-essential cookies. You can change your mind at any time through the cookie settings link on our website, or by clearing cookies in your browser.
For more detail, see the cookie policies of Squarespace and Thinkific.
10. Children
Our services are designed for adults. We do not knowingly collect data from anyone under 16. If you believe a child has given us their data, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we will let subscribers know by email.
12. Contact us
Lets Flow Pte. Ltd. Data Protection Officer: Kellie Lucas Email: [email protected]
Address: 20 COLLYER QUAY, #09-01, SINGAPORE 049319
Last updated: 12th October 2026