This policy explains what personal information NeckShoulderGuide collects, why, who else handles it, and what you can ask us to do with it. It is written to be read in a few minutes.
Who we are
NeckShoulderGuide (https://neckshoulderguide.com) is operated by Nigel Chua in Singapore. In this policy, “we”, “us” and “our” mean NeckShoulderGuide and its operator. We decide how your personal information is used on this site, which makes us responsible for it under the privacy laws that apply.
The clinical content is written and reviewed by Louise Yow, a physiotherapist registered in Singapore since 2006. The site offers general education about neck, shoulder and upper back pain. It does not offer consultations, assessments, treatment or appointments, so we do not collect medical records or ask about your health to provide care. Please do not send us details of your medical history.
What we collect and why
When you visit the site
- Server logs: our web host records technical details of each visit, such as your IP address, browser type and the pages requested. These logs are used to keep the site secure, stop abuse and fix performance problems.
- Usage statistics: Google Analytics 4 tells us, in aggregate, how many people visit, which pages they read and how they found the site. We use this to decide what to write and what to improve. See “Cookies and analytics” below.
When you join the email list
- What you give us: your email address, and your first name if you choose to give it.
- What is recorded: the date you signed up, the form or free resource you signed up through, and whether you opened an email or clicked a link in it. The form you used can show which topic you were reading about.
- Why: to send you the resource you asked for and the emails that follow, to keep those emails relevant to the topic you signed up for, and to see which emails are useful.
The list uses double opt-in: you are only added after you confirm by clicking a link in the first email we send. Every email has an unsubscribe link. Unsubscribing takes effect straight away and you do not need to give a reason.
If you buy a guide
Paid guides are sold through a merchant of record. That company runs the checkout, takes payment and handles sales tax and VAT. It collects your payment details directly. We never see your full card details. The merchant of record shares with us what we need to deliver the guide and keep proper records: your name, email address, country, what you bought, the amount paid, and any refund. The merchant of record also uses your information under its own privacy policy, which is shown at checkout.
The legal basis we rely on
Some laws, including the GDPR and UK GDPR, ask us to name a legal basis for each use of your information.
- Email list: your consent, which you can withdraw at any time by unsubscribing.
- Analytics cookies: your consent where the law requires it, and our legitimate interest in understanding how the site is used elsewhere.
- Server logs: our legitimate interest in keeping the site secure and working.
- Guide purchases: what is needed to deliver what you bought, and our legal duty to keep tax and accounting records.
We do not make decisions about you by automated means that have legal or similarly significant effects.
Cookies and analytics
Cookies are small files a website stores in your browser. This site uses Google Analytics 4, which sets cookies to count visits and tell new visitors from returning ones. Google receives your IP address when the analytics code loads and uses it to estimate your approximate location, such as your country or city. Google states that Google Analytics 4 does not log or store IP addresses. We see only aggregate reports. We do not use Google Analytics to identify you, and we do not turn on its advertising features.
If you are in the European Union, the European Economic Area or the United Kingdom, analytics cookies are only set after you agree to them, and you can change your choice later. Wherever you are, you can block or delete cookies in your browser settings, or install Google’s opt-out browser add-on for Google Analytics. The site still works if you do.
The site also uses LiteSpeed Cache to serve pages faster. It stores copies of pages on the server, not information about you. Our SEO plugin, Rank Math, helps search engines read the site and does not collect visitor personal data for us.
Who we share data with
We do not sell your personal information. We share it only with the service providers that run parts of the site for us, and only what each one needs:
- Hostinger: web hosting and server logs.
- Google (Google Analytics 4): usage statistics.
- Kit (formerly ConvertKit): the email list, sending emails, and open and click data.
- Our merchant of record: checkout, payment, tax and refunds, if you buy a guide.
These providers process your information on our instructions, except where a provider such as the merchant of record also acts under its own privacy policy. We may also disclose information if the law requires it, or to protect the site and its users from fraud or abuse. We use reasonable security measures, but no website or online service is completely secure.
International transfers
We are based in Singapore and our readers are worldwide. Our service providers may store and process your information outside your own country, including in the United States. Where the law requires it, we rely on safeguards such as the standard contractual clauses approved for this purpose, or a provider’s participation in a recognized data transfer framework, so your information keeps a comparable level of protection.
How long we keep it
- Email list data: until you unsubscribe, plus a short period afterward to process the request and keep a record that you should not be emailed again.
- Analytics data: for the period set in our Google Analytics retention setting, after which Google deletes it.
- Server logs: for the period our web host keeps them.
- Purchase records: for as long as tax and accounting laws require.
Your rights
Your rights depend on where you live. To use any of them, email nigel@nigelchua.com. We may need to confirm your identity first. We aim to reply within one month, and we will not treat you differently for using your rights.
Singapore
Under the Personal Data Protection Act (PDPA), you can ask for access to the personal data we hold about you and how it has been used, ask us to correct it, and withdraw your consent to its use. If you are not satisfied with our reply, you can complain to the Personal Data Protection Commission.
European Union, European Economic Area and United Kingdom
Under the GDPR and UK GDPR, you have the right to:
- Access: get a copy of the personal information we hold about you.
- Correction: have inaccurate information corrected.
- Deletion: have your information deleted, unless we must keep it by law.
- Objection and restriction: object to uses based on our legitimate interests, or ask us to limit how we use your information.
- Portability: receive information you gave us in a common, machine-readable format.
- Withdraw consent: at any time, without affecting what was done before you withdrew it.
- Complain: to the data protection supervisory authority in the country where you live or work. In the UK, this is the Information Commissioner’s Office.
United States
Several US states, including California, give residents rights over their personal information. Depending on your state, these can include the right to know what we collect, to get a copy, to correct it, to delete it, and to opt out of its sale, of its sharing for cross-context behavioral advertising, and of targeted advertising. We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not show ads on this site. You can still ask to know, correct or delete your information at any time.
Everywhere else
Wherever you live, you can ask what we hold about you, ask us to correct or delete it, and leave the email list at any time.
Children
This site is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has joined the email list or given us their information, contact us and we will delete it.
Contact
For questions about this policy, or to use any of your rights, email nigel@nigelchua.com. Nigel Chua is our data protection contact for the purposes of Singapore’s Personal Data Protection Act. Please do not send details of your health or medical history; we cannot advise on individual cases.
Changes to this policy
We will update this policy when the site, our service providers or the law changes. The date below shows when it last changed. If a change significantly affects how we use information you have already given us, we will tell email subscribers before it takes effect.
Last updated: 11 October 2026