This document is not approved or effective. The final text must match the deployed infrastructure and a written legal approval record.
1. Who is responsible
CORENOVA AI PTE. LTD. operates Areelshow and is the proposed responsible organisation for personal data handled through the website. The company details and contact channel appear alongside this policy.
2. Current website behavior
The current website presents six short-drama titles, company information, and a support email link. It has no account registration, forms, playback, purchases, subscriptions, or user-upload features. Selecting the email link opens the visitor's chosen email service; the website itself does not send the message.
3. Data categories and sources
The static frontend does not intentionally request personal information. The deployed web host may process standard request data such as IP address, user-agent string, requested URL, timestamp, and security diagnostics. If a person contacts the company by email, the company may receive the sender's address, message, attachments, and other information the sender chooses to provide. Final categories must be verified against hosting and mailbox configurations.
4. Purposes and legal basis
Proposed purposes are delivering and securing the website, diagnosing faults, responding to inquiries, maintaining business records, and meeting legal obligations. The applicable legal basis for each purpose depends on the visitor's location and the final operating configuration and must be confirmed by legal review.
5. Cookies and analytics
This release package does not implement cookies, analytics tags, advertising pixels, or behavioral profiling. The deployment owner must verify that the host or any injected service does not add them. This section must be revised before any such technology is enabled.
6. Disclosure and service providers
Technical request data may be handled by the selected hosting and security providers, and inquiry data may be handled by email and operational service providers. No provider is named in this candidate because the final vendor list has not been approved. Personal data should not be sold or disclosed for unrelated advertising.
7. Cross-border transfers
Hosting or email providers may process data outside Singapore. The business and legal owners must identify actual processing locations and confirm the required contractual or legal safeguards before this policy becomes effective.
8. Retention
Technical logs and inquiry records should be kept only as long as needed for the stated purposes, security, recordkeeping, or legal obligations. Specific retention periods must be documented against the final hosting and support operations before approval.
9. Security
The operator intends to use proportionate technical and organisational safeguards. No internet transmission or storage system is completely secure. The release owner must verify HTTPS, access controls, patching, logging, backups, and incident-response ownership before publication.
10. Individual rights
Depending on applicable law, individuals may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Requests may be sent to [email protected]. Identity and legal exceptions may need to be verified before a request is fulfilled.
11. Children's privacy
The website is not designed to collect personal data from children and provides no account or submission feature. A parent or guardian who believes a child has provided personal data by email should contact the operator.
12. Questions and complaints
Privacy questions and complaints may be sent to [email protected] or to the registered office shown on this page. Individuals may also have the right to contact the relevant data-protection authority. The correct authority and escalation wording require legal confirmation.
13. Changes
The approved policy should identify its effective date and material updates. This pending candidate must not be represented as the current effective policy.