Privacy Policy

1. Who We Are

Light and Shadow Media is a Singapore-registered corporate entity providing video production services and live event ticketing. Our registered address and UEN are available upon request.

For the purposes of data protection law, Light and Shadow Media is the data controller responsible for your personal information.

2. Data We Collect

When you book tickets or interact with our website, we may collect the following personal data:

• Identity data — your full name
• Contact data — email address, phone number
• Transaction data — seat selections, ticket tier, payment amount, booking reference
• Technical data — IP address, browser type, pages visited (collected automatically via standard web server logs)

We do not collect payment card details. All payment processing is handled by licensed third-party payment processors and we never receive or store your card numbers.

3. How We Use Your Data

We use your personal data for the following purposes:

• To process your ticket booking and confirm your reservation
• To send your QR code e-ticket by email
• To verify your ticket at the event entrance
• To contact you about important changes to your booking or the event
• To process refunds where applicable under our refund policy
• To comply with legal and regulatory obligations

We will not use your data for marketing purposes without your explicit consent. We do not sell your data to any third party.

4. Data Sharing

We share your data only where necessary:

• United Overseas Bank (UOB) — we process all payments through UOB PayNow Corporate services. Your name and payment reference may be visible in the transaction record as required by the bank. UOB is regulated by the Monetary Authority of Singapore (MAS) and operates under Singapore banking law.
• Google LLC — we use Google Sheets and Gmail APIs to store booking data and send ticket emails. Data is stored on Google's infrastructure. Google's privacy policy applies: policies.google.com/privacy
• Cloudflare Inc. — our API backend runs on Cloudflare Workers. Data passes through Cloudflare's infrastructure. Cloudflare's privacy policy applies.

We do not use third-party payment gateway intermediaries. All payment transactions are processed directly through our UOB corporate bank account.

We do not share your data with any other third parties unless required by law or a court order.

5. Data Storage & Security

Your booking data is stored in Google Sheets, accessible only to authorised staff via password-protected admin access with rate limiting and session controls.

Our website is served over HTTPS. All data in transit is encrypted. Our backend uses industry-standard authentication.

While we take all reasonable measures to protect your data, no method of transmission over the internet is 100% secure. If you have concerns, please contact us.

6. Data Retention

We retain booking records for a minimum of one year after the event date for audit and accounting purposes. After this period, records are deleted or anonymised.

If you request deletion of your data before this period, we will comply unless retention is required by law.

7. Your Rights

Under Singapore's Personal Data Protection Act (PDPA) and applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for data use (where consent is the legal basis)
• Request deletion of your data, subject to legal retention requirements

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

8. Cookies

Our website does not use tracking or advertising cookies. We do not use Google Analytics or any third-party analytics that track your behaviour across websites.

Standard browser session behaviour (not persistent cookies) may be used within our booking and admin pages for functional purposes only.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: