Privacy — Ikier Spatial · NUS Alumni Gala
Your data, held carefully.
Last updated · 11 Oct 2026 · Draft for legal review
1. Who we are
This site lets guests of the NUS Alumni Network Shenzhen anniversary gala preview a photograph engraved in crystal and submit one photo for a free engraving, collected at the gala on 24 October 2026.
The site is operated by Stardust & Company [TBC: registered company name, number and address] (“Stardust”, “we”), the controller of your personal data. The engraving is produced by Ikier [TBC: Ikier registered company name].
Questions or requests: [TBC: privacy contact email].
2. Previewing is private
When you choose a photo to preview, the depth is calculated in your browser. The photo is not sent to us unless you create an account and save or submit it.
3. What we collect
| Data | Why |
|---|---|
| Name, title, job title, company or organisation | To identify you, prepare your crystal and check you in at the gala |
| Email address (your login) | Your account, verification codes, your submission receipt and pickup notices |
| Phone number (optional) | To reach you about your pickup if email fails |
| Photos you save, and the one you submit | To show your previews and to engrave your crystal |
| Your consents, with the date and time | To show what you agreed to |
| Security records (sign-in times, IP address) | To protect accounts and prevent abuse |
Before a photo is uploaded, your browser removes its hidden metadata (EXIF), including GPS location, device model and capture time. Passwords are stored only as a one-way hash; nobody, including us, can read them. We use no advertising or analytics trackers.
4. Who receives it
- Ikier, to engrave and package your crystal: your submitted photo, name and organisation.
- NUS Alumni Network Shenzhen, for check-in and pickup at the gala: your name, title, organisation and pickup status. Not your photos, email or phone.
- Our service providers, who process data only on our instructions: Supabase (database, sign-in and photo storage, Singapore), Vercel (website hosting) and Resend (email delivery, sent from Ireland, EU).
We do not sell your data. With your separate, optional consent, Ikier may contact you about its products; you can withdraw that at any time.
5. Where it is stored
Your data is stored in Singapore, and emails are sent through a provider’s servers in Ireland (EU). If you are in mainland China, this is a cross-border transfer; we ask for your separate consent to it when you register. It is protected in transit (HTTPS) and at rest (AES-256 encryption).
6. How long we keep it
We keep your account and photos until you delete your account, or ask us to delete them. If you consented to hear from Ikier, we keep your contact details for that purpose until you withdraw. Security records are kept for up to [TBC: 90 days].
7. Your rights
You can, at any time and free of charge:
- see and download your data (Dashboard → Download my data);
- correct your details (Dashboard → Profile);
- delete your account and photos (Dashboard → Delete my account). After 18 October, a submission already in production is kept until the crystal is collected, then deleted;
- withdraw consent to marketing, or object to processing;
- complain to a regulator, such as the Office of the Privacy Commissioner for Personal Data (Hong Kong), the Personal Data Protection Commission (Singapore) or the Cyberspace Administration of China.
For anything else, write to [TBC: privacy contact email]. We reply within 15 working days.
8. Security
Access is limited by design: each person can reach only their own records, enforced by the database; photos are private and opened only through links that expire in 60 s; staff access requires two-factor authentication and is logged. No system is perfectly secure; if a breach affects you, we will tell you and the relevant authority as the law requires.
9. Children
This service is for adults (18 or over). Do not submit a photo of a child unless you are their parent or guardian.
10. Changes
If we change this policy, we will update the date above and, for significant changes, tell you by email.