Legal

Privacy policy.

Effective 13 May 2026

ExecAdvo takes its responsibilities under Singapore's Personal Data Protection Act (PDPA) and the EU and UK General Data Protection Regulation (GDPR) seriously. This policy explains what personal data we collect when you visit, subscribe, or correspond with us, what we do with it, who else handles it, and the rights you have over it.

1. Operator

ExecAdvo is a publication of Feltan Associates Pte Ltd (UEN 202225620G), a private limited company incorporated in Singapore. Our registered office is 1 Raffles Place, #02-01 One Raffles Place Mall, Singapore 048616. References to “ExecAdvo”, “we”, “our” or “us” mean Feltan Associates Pte Ltd publishing under the ExecAdvo brand. Feltan Associates Pte Ltd is the data controller for personal data processed through execadvo.com.

2. Personal data we collect

2.1 Information you give us

You may provide personal data to us when you:

Subscribe to the briefing (your name where given, email address, and payment details processed by our payment provider).
Request access to the beta or write to us directly (your name, email, and the content of your message).
Authenticate to the subscriber zone (your email and a one-time link or session token managed by our identity provider).

2.2 Information collected automatically

Our infrastructure provider sets a small number of strictly necessary cookies and may collect technical logs (IP address, user-agent, request times) for abuse protection and platform delivery. If you accept analytics in the cookie banner, our analytics provider sets additional cookies for aggregate readership measurement. See our cookies policy for detail.

3. Purposes and lawful bases

We process personal data for the following purposes, on the following lawful bases under Article 6 GDPR (and the equivalent bases under the PDPA):

To deliver the briefing you have subscribed to, and to operate the subscriber zone (performance of a contract).
To process subscription payments, issue receipts and meet our tax and accounting record-keeping obligations (legal obligation).
To respond to enquiries, including beta-access requests and reader correspondence (legitimate interest in operating a publication).
To protect the site from abuse and to keep service logs (legitimate interest in security and platform integrity).
To understand which briefings are read, where we have your consent for analytics cookies (consent, which you may withdraw at any time through the cookie banner).

4. Who we share data with

We use the following processors. Each operates under its own published privacy and security commitments and has its own data processing terms with us.

Stripe, Inc. — payment processing for subscriptions.
Supabase Inc. — database hosting and authentication. Our primary instance is in Singapore.
Resend, Inc. — delivery of the briefing and transactional email.
Vercel Inc. — website and edge hosting.
Google LLC (Google Analytics 4) — optional aggregate analytics, only if you accept analytics cookies.

We do not sell personal data, do not share it with advertisers, and do not transfer it to any party outside this processor chain except where required by law.

5. International transfers

Several of our processors are based outside Singapore. Where personal data is transferred outside Singapore, we take reasonable steps to ensure that the recipient is bound to a standard of protection comparable to the PDPA, including by reliance on Standard Contractual Clauses or equivalent safeguards. Where the GDPR applies to your data, we rely on the appropriate Article 46 transfer mechanism for each recipient.

6. Retention

Subscription and payment records: retained for seven years to meet Singapore tax and accounting obligations.
Beta-access requests and reader correspondence: retained for two years from the last interaction, then deleted unless an active dialogue remains open.
Server and security logs: retained on a rolling basis for operational purposes only, typically up to 90 days.
Analytics data: retained for 14 months at the analytics provider (GA4 default), only where you have consented to analytics cookies.

7. Your rights

Subject to the PDPA and, where applicable, the GDPR, you have the right to:

Request access to the personal data we hold about you.
Request correction of personal data that is inaccurate.
Withdraw any consent you have given us (which will not affect the lawfulness of processing carried out before withdrawal).
Object to processing carried out on the basis of legitimate interests, including any use of your data for direct marketing.
Request restriction of processing, where the GDPR applies to your data.
Request a portable copy of the personal data you have given us.
Request deletion of personal data we no longer need to retain.
Lodge a complaint with the Personal Data Protection Commission of Singapore, or with your local data protection authority if the GDPR applies to your situation.

To exercise any of these rights, write to briefing@execadvo.com. We respond inside thirty days.

8. Automated decision-making and profiling

ExecAdvo does not use automated decision-making or profiling that produces legal or similarly significant effects on you. Editorial decisions about what to publish are made by humans.

9. Security

We use commercially reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls on our database, and least-privilege keys for our processors. No internet-based service is perfectly secure; if we become aware of a data breach affecting your personal data we will notify you and, where required, the relevant authority within the timeframes set by law.

10. Children

ExecAdvo is a publication for senior executives and is not directed at children. We do not knowingly collect personal data from children under the age of 16.

11. Changes to this policy

We may update this policy from time to time. Where material changes affect how we handle your personal data, we will give subscribers notice by email. The current version, and its effective date, will always appear on this page.

12. How to contact us

We have not appointed a Data Protection Officer. Article 37 of the GDPR does not require us to, given the scale and nature of our processing. Data-protection questions and any of the requests above should be sent to briefing@execadvo.com, or by post to the registered office set out in section 1 above.

ExecAdvo is a publication of Feltan Associates Pte Ltd, registered in Singapore (UEN 202225620G), 1 Raffles Place, #02-01 One Raffles Place Mall, Singapore 048616.