Legal

Privacy Policy

Effective date: 20 April 2026 Last updated: 20 April 2026 Version: 1.0 (draft)

Plain summary. We are Zeta Media Pte Ltd, a Singapore company trading as Dr. by Zelix. We collect personal data you share with us (name, email, phone, practice details, website content) to build your website and run our business. We do not sell your data. You can ask us to show you what we hold, correct it, or delete it. The full policy below explains how this works.

1. Who we are

This Privacy Policy is issued by Zeta Media Pte Ltd (UEN 201200615E), a company incorporated in Singapore with its registered office at 1 North Bridge Road #11-06, Singapore 179094 ("Zeta Media", "we", "us", "our"). Zeta Media operates the Dr. by Zelix service at drzelix.com.

For the purposes of the Singapore Personal Data Protection Act 2012 ("PDPA") and other applicable privacy laws, Zeta Media is the controller of personal data collected through our website and services.

2. What personal data we collect

We collect personal data directly from you when you interact with our website, complete our forms, make a payment, or correspond with us. Categories include:

Identity and contact data — full name, professional title, email address, mobile/WhatsApp number, country, practice or clinic name, professional registration number (when voluntarily provided).
Professional and practice data — qualifications, specialty, clinic addresses, hospital affiliations, languages spoken, services offered, areas of interest, biographical narrative, photographs you send us.
Commercial data — tier selected, invoice and billing details, purchase history, payment receipts. We do not store full card numbers; payment is handled by our payment processor.
Communication data — emails, WhatsApp messages, form submissions, and supporting documents you send during discovery and revision rounds.
Technical data — IP address, browser type, device type, referring URL, pages viewed, approximate location (country/city level), collected via cookies and similar technologies. See our Cookie Policy for details.
Publicly available data — where you authorise us to perform research as part of the onboarding flow, we access publicly available information about you (hospital profile pages, medical council registers, press, social profiles). We use this only to pre-fill your draft website content for your review.

We do not intentionally collect any special categories of personal data (such as health data about you personally). If you include such information in content you send us, we treat it with the same care as all other personal data.

3. How we use your personal data

We use your personal data for the following purposes:

Purpose	Legal basis
To deliver the website design service you have engaged us to provide, including research, copywriting, design, development, hosting setup, and compliance review.	Performance of a contract between us and you.
To issue invoices, process payments and refunds, and keep accounting records.	Performance of a contract and compliance with tax and accounting law.
To communicate with you about your project, revisions, approvals, and post-launch support.	Performance of a contract.
To improve our service, understand how visitors use the website, and fix bugs.	Our legitimate interest in running a well-performing business, balanced against your privacy rights.
To send you marketing updates about new tiers, editorial features, or case studies.	Your consent, which you can withdraw at any time.
To comply with legal obligations, respond to lawful requests from authorities, and defend legal claims.	Compliance with legal obligations; our legitimate interests.

4. Who we share your personal data with

We share personal data only with parties who need it to deliver our service to you, and only under written data-processing terms. Categories of recipient:

Our hosting platform — serves the website and handles deployment.
Our database and backend platform — stores onboarding submissions, story questionnaire answers, and build metadata.
Our payment processor — takes card and alternative-method payments on our behalf. Card data is transmitted directly to the processor and is not stored by us.
Our email and workflow automation platforms — routes onboarding notifications to our team so we can respond quickly.
Our AI research partner — we use a large language model to help pre-fill draft website content from publicly available sources. Queries are sent under zero-retention terms; no model training is performed on your data.
Our professional advisors — accountants, lawyers, and insurers, where necessary.
Competent authorities — where legally required.

We do not sell your personal data to anyone. We do not share it with advertising networks for cross-site tracking.

5. International transfers

Zeta Media is based in Singapore. Some of our service providers process data outside Singapore, including in the United States, the European Union, and the United Kingdom. When we transfer your data to a country whose privacy protections are not comparable to those in Singapore, we take steps required by the PDPA to ensure a comparable standard of protection, such as entering into written contracts imposing protective obligations on the recipient.

6. How long we keep your personal data

Client records (onboarding form, story questionnaire, delivered files, correspondence) — kept for the duration of our engagement and for 7 years after the final invoice, to support audits, warranty claims, and compliance record-keeping.
Financial records — 7 years, as required by Singapore tax and accounting rules.
Prospect enquiries that do not become engagements — 24 months from last contact, then deleted or anonymised.
Marketing list subscribers — until you unsubscribe, then removed within 30 days.
Website analytics — up to 14 months in aggregated form.

7. Your rights

You have the following rights in relation to your personal data:

Right of access — ask us to confirm what personal data we hold about you and to provide a copy.
Right of correction — ask us to correct data that is inaccurate or incomplete.
Right to withdraw consent — where we rely on your consent (for example, marketing), withdraw it at any time. Withdrawal does not affect processing already carried out.
Right to object — object to processing based on our legitimate interests, where you believe the balance is wrong for your situation.
Right to erasure — ask us to delete your personal data, subject to our legal and accounting retention duties.
Right to data portability — ask for a machine-readable copy of data you have provided to us.
Right to lodge a complaint — with the Singapore Personal Data Protection Commission (pdpc.gov.sg) if you are not satisfied with our response.

To exercise any of these rights, email our Data Protection Officer at the address in section 11. We aim to respond within 30 days.

8. How we protect your personal data

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the data we hold, including access controls, encrypted transport (TLS), restricted staff access, vendor due diligence, and regular review of our processes. No system is perfectly secure. If a personal data breach occurs that is likely to result in significant harm to you, we will notify you and the regulator in line with our legal obligations.

9. Children's data

Our services are intended for medical professionals and their authorised representatives. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided data to us, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. If we make material changes, we will take reasonable steps to notify active clients, for example by email.

11. Contact us

Data Protection Officer

Zeta Media DPO Officer

Zeta Media Pte Ltd (UEN 201200615E)

1 North Bridge Road #11-06, Singapore 179094

Email: privacy@zetamedialabs.com