Privacy Policy
How we handle your personal data
We are a Singapore company that sources goods from suppliers in China on behalf of business customers. We collect and use personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA). This page explains what we collect, why, and the choices you have.
1. What we collect
Most of the data we hold comes from you directly, when you:
- Send an enquiry through our website form, WhatsApp or email. We receive your company name, your name, work email, phone number and the details of what you want to source.
- Become a customer. We then hold your business contact details, delivery addresses, purchase orders, quotations, invoices, payment records and our correspondence with you.
- Correspond with us in any other way, for example about a delivery or a claim.
Our website does not use cookies for tracking or analytics and does not run advertising. If we add analytics in future we will update this policy first.
2. Why we use it
- To respond to your enquiry and prepare a quotation.
- To fulfil an order: buying from suppliers, arranging shipping and import, delivering to you, and issuing invoices and delivery documents.
- To keep accounting and tax records, which Singapore law requires us to retain.
- To handle questions, claims and disputes.
- To tell you about changes to our services or terms. We do not send marketing messages unless you have asked for them, and you can opt out at any time.
3. Who we share it with
We share personal data only where it is needed to do the above:
- Freight forwarders, couriers and customs agents, so goods can be shipped and delivered to you. This can involve transferring your delivery contact details to service providers outside Singapore, including in China. We only transfer what is needed for the shipment and we require the recipient to protect it to a standard comparable to the PDPA.
- Suppliers in China, in the rare case where a supplier must ship directly to your address. Otherwise suppliers do not receive your details.
- Our accountants, bankers, payment providers and IT service providers, under confidentiality obligations.
- Government authorities, where the law requires it, for example Singapore Customs or IRAS.
We do not sell personal data and we do not share customer lists with anyone.
4. How long we keep it
Enquiries that do not lead to an order are deleted within 12 months. Records of orders, quotations, invoices and payments are kept for at least five years after the end of the relevant financial year, as required for tax and accounting purposes, and then deleted or anonymised.
5. How we protect it
Your data is stored in password-protected business systems with access limited to the people who need it. Our website is served over HTTPS. No method of storage is completely secure, so we cannot guarantee absolute security, but we take reasonable steps and will notify you and the Personal Data Protection Commission of any data breach as the PDPA requires.
6. Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, or withdraw consent for us to use it. Withdrawing consent may mean we can no longer fulfil an order for you, and we will tell you if that is the case. To make a request, contact our Data Protection Officer using the details below. We respond within 30 days.
7. Third-party services
If you contact us on WhatsApp, your messages are also subject to WhatsApp's own privacy policy. Links from our site to other websites are provided for convenience and we are not responsible for their privacy practices.
8. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Continued use of our services after a change means you accept the updated policy.
9. Contact
Data Protection Officer
[YOUR COMPANY NAME PTE. LTD.]
976 Jurong West Street 93, Singapore 640976
Email: hello@onevendor.sg