Privacy Policy

The HoloGrail SG Pte Ltd · Last updated: 5 August 2026

1. Introduction

The HoloGrail SG Pte Ltd (“we“, “us“, “our“, “the Company“) provides event photo booth and related photography services in Singapore. We are committed to protecting the personal data of our clients, event guests, and website visitors in accordance with the Personal Data Protection Act 2012 (No. 26 of 2012) (“PDPA“) and its subsidiary legislation.

This Privacy Policy explains what personal data we collect, why we collect it, how we use, disclose, and protect it, and the choices available to you.

By engaging our services, attending an event where we are providing photo booth services, or using our website at www.theholograil.com, you acknowledge that you have read and understood this Privacy Policy.

2. Scope

This Policy applies to:

• Clients who book our services (individuals or organisations);
• Guests at events where our photo booth is deployed;
• Visitors to our website; and
• Any other individuals whose personal data we collect in the course of our business.

3. Personal Data We Collect

Depending on how you interact with us, we may collect:

4. How We Collect Personal Data

We collect personal data:

• Directly from you, when you make a booking enquiry, sign a service agreement, or communicate with us;
• At your event, when guests use our photo booth or are photographed by our staff;
• Automatically, through cookies and analytics tools when you browse our website; and
• From third parties, such as event planners or venues who make a booking on your behalf (in which case that third party warrants to us that they have your consent to share your data with us).

5. Purposes for Collection, Use and Disclosure

We collect, use, and disclose personal data for the following purposes:

• Processing bookings, quotations, invoices, and payments;
• Delivering our photo booth services, including printing, digital gallery hosting, and delivery of photos/videos to clients and guests;
• Communicating with you about your booking (confirmations, reminders, logistics);
• Responding to enquiries and providing customer support;
• Marketing and promotional purposes, including use of event photos on our social media, website, and portfolio (see Section 6 for how this specifically works and how to opt out);
• Improving our website and services, including through analytics (see Section 7);
• Complying with our legal and regulatory obligations; and
• Any other purpose reasonably related to the above, which we will notify you of at the relevant time.

6. Photos and Videos Taken at Events — Marketing Use and Your Right to Opt Out

Because photography is central to our business, we want to be transparent about how event photos may be used beyond delivering them to you.

Default use for marketing. Unless you or a guest opts out, we may use photos and videos taken at your event (excluding any private, personalised, or clearly identifiable sensitive content) for our own marketing purposes — for example, posting to our Instagram/Facebook pages, using in our portfolio, or featuring on our website.

Notice at the point of capture. At every event, we will provide clear notice — through signage at or near the photo booth, an on-screen notice on the booth interface, and/or a verbal notice from our attendant — that photos may be used for marketing purposes and that guests may opt out.

Opt-out window. We will not publish or use any individual guest’s photo for marketing purposes until at least [7] days after the event, to give guests a genuine opportunity to opt out. Guests may opt out at any time — before, during, or after the event — by: – Informing our booth attendant on-site, who will flag the relevant images for exclusion; – Emailing us at hello@theholograil.com with the event date and a description or reference of the photo(s); or – Using the opt-out link/QR code provided in the digital gallery delivery.

Client responsibility. If you are booking our services for an event with guests (e.g. a wedding, corporate event, or party), you agree to make reasonable efforts to inform your guests of this policy, and we will provide you with signage/notice materials to display at the event for this purpose.

Withdrawal after publication. If a photo has already been published and you or a guest subsequently asks us to remove it, we will do so within a reasonable time upon verified request.

This mechanism is intended to operate as “deemed consent by notification” under Section 15A of the PDPA.

7. Cookies and Website Analytics

Our website uses cookies and similar tracking technologies, including:

• Essential cookies — required for the website to function properly;
• Analytics cookies (e.g. Google Analytics) — to understand how visitors use our site, which pages are popular, and how we can improve it; and
• Advertising/pixel cookies (e.g. Meta/Facebook Pixel) — to measure the effectiveness of our advertising and to show you relevant ads on social media platforms.

These tools may collect information such as your IP address, browser type, device identifiers, and browsing behaviour. Some of this data may be transferred to and processed by Google LLC and Meta Platforms, Inc., which may be located outside Singapore (see Section 10 on overseas transfers).

You can control or disable cookies through your browser settings, and opt out of Google Analytics tracking via the Google Analytics Opt-out Browser Add-on. Disabling cookies may affect the functionality of our website.

8. Consent and Withdrawal of Consent

By providing your personal data to us, you consent to our collection, use, and disclosure of it in accordance with this Policy. Where required by law, we will seek your explicit consent (for example, for the initial booking of your event).

You may withdraw your consent to our collection, use, or disclosure of your personal data at any time by giving us reasonable notice in writing to hello@theholograil.com. Please note that withdrawing consent may affect our ability to provide certain services to you (for example, we may be unable to deliver your event photos if you withdraw consent to process them), and withdrawal will not affect the lawfulness of processing carried out before withdrawal.

9. Disclosure to Third Parties

We may disclose your personal data to:

• Service providers who support our operations, such as cloud photo/gallery hosting providers, printing vendors, payment processors, and IT support providers;
• Sub-contracted photographers/booth attendants engaged by us to fulfil your booking;
• Social media and advertising platforms (e.g. Meta, Google, Instagram), where photos are used for marketing per Section 6, or where analytics/advertising cookies apply per Section 7;
• Professional advisors, such as our accountants or lawyers, where necessary; and
• Government authorities or regulators, where required by law.

We require our third-party service providers to protect your personal data in a manner consistent with the PDPA.

10. Overseas Transfer of Personal Data

Some of our service providers (such as cloud storage, analytics, or social media platforms) may store or process personal data outside Singapore. Where we transfer personal data overseas, we take steps to ensure the recipient provides a standard of protection comparable to the PDPA, whether through contractual obligations, the recipient’s certifications, or other means permitted under the PDPA.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law (for example, accounting and tax records). Event photos and client booking data are generally retained for 24 months after the event, after which they may be archived or securely deleted, unless you have requested earlier deletion or a longer retention period (e.g. for print reorders).

12. Protection of Personal Data

We implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, or similar risks, including access controls, secure storage, and staff confidentiality obligations. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Access and Correction Requests

You may request access to, or correction of, the personal data we hold about you by contacting us at hello@theholograil.com. We will respond within the timeframes required under the PDPA. We may charge a reasonable fee for access requests and may decline requests where permitted by law (e.g. where disclosure would reveal another individual’s personal data).

14. Children and Minors

Our photo booth services may be used at events attended by minors (for example, family events, birthday parties, or weddings). Where a guest is a minor, we rely on the parent, guardian, or the event’s booking client to provide any necessary consent on the minor’s behalf, including in relation to marketing use under Section 6. If you are a parent or guardian and wish to opt a minor’s photo out of marketing use, please contact us using the details in Section 6.

15. Marketing Communications and the Do Not Call Registry

If we send you marketing messages (e.g. promotions, newsletters), we will only do so with your consent, and in compliance with Singapore’s Do Not Call (DNC) Registry provisions under the PDPA where applicable to calls, SMS, or fax to Singapore telephone numbers. You may unsubscribe from marketing communications at any time using the unsubscribe link provided, or by contacting us directly.

16. Data Breach Notification

In the event of a data breach that is likely to result in significant harm to affected individuals, or that is of a significant scale, we will notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with our obligations under the PDPA.

17. Data Protection Officer

We have appointed a Data Protection Officer (“DPO”) who is responsible for ensuring our compliance with the PDPA. You may contact our DPO with any questions, concerns, or requests regarding your personal data:

Data Protection Officer The HoloGrail SG Pte Ltd Email: hello@theholograil.com Address: 65 Ubi Road 1, #03-73, Oxley Bizhub, Singapore 408729

18. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our website with a revised “Last updated” date. We encourage you to review this Policy periodically.

19. Contact Us

If you have any questions, feedback, or complaints about this Privacy Policy or our handling of your personal data, please contact us at:

The HoloGrail SG Pte Ltd Email: hello@theholograil.com Phone: +65 8020 2587 Address: 65 Ubi Road 1, #03-73, Oxley Bizhub, Singapore 408729 UEN: 202409635K

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission of Singapore (www.pdpc.gov.sg).