Privacy Policy | LaptopClinic.sg

This policy explains, in plain English, what personal data LaptopClinic.sg collects, why, who we share it with and what your rights are. It follows Singapore's Personal Data Protection Act 2012 (PDPA).

LaptopClinic.sg is run by Esmond Solutions Pte. Ltd. (UEN 202031216G), a company registered in Singapore, which is responsible for your personal data ("we", "us" and "our").

Our Data Protection Officer

Our Data Protection Officer is Nicholas Low. For any question, request or complaint about your personal data, email sales@laptopclinic.sg with "For the Data Protection Officer" in the subject line, or send a WhatsApp message to +65 8828 8180. We pass it to him.

What we collect and why

When you order in Singapore: your name, email address, mobile number, delivery address and what you bought. We use them to process, deliver and invoice your order, and to help you after the sale (questions, returns, warranty).
When you pay: you pay on HitPay's secure payment page. HitPay tells us whether the payment went through, with a payment reference. We never see or keep your full card number.
When you order from overseas or chat with us on WhatsApp: your phone number, your WhatsApp name, what you write to us, any photos you send, and the delivery details you give us. We use them to answer you, quote and deliver your order, and help you after the sale.
When you sign in with Google: Google gives us your name and email address, and we open a customer account with them. You can add your mobile number and address there. Your account shows your orders, their invoices and their tracking.
When you use our contact form: your name, email address, WhatsApp number, subject and message. They are emailed to our sales team so we can reply.
When you sign up for our newsletter: your email address. We use it only to send you our offers and new stock. You can stop at any time (see "Marketing" below).
When you visit the website: Google Analytics records which pages are visited and how the site is used, and our website host processes your IP address to show you the pages and keep the site secure. See our Cookie Policy.
When you use our contact form or newsletter box: Google reCAPTCHA checks that you are a person and not a robot, using information about your browser and how you use the page.

We collect this with your consent (when you give it to us for an order, a message or a sign-up), or because the law requires it (for example, tax records). For Google Analytics we rely on the PDPA's "legitimate interests" exception: we need to know how people use the shop to keep it working well, and we have set it up to limit the effect on you (Google's advertising features are off, and detailed visit data is deleted after 2 months). Our Cookie Policy explains how to switch it off. Google's own use of this data is explained on its page How Google uses information from sites or apps that use our services.

We do not sell your personal data, and we do not use it to build advertising profiles.

Who we share it with

We share your personal data only as far as each of these needs it to do its job for us:

HitPay (Singapore), our payment provider, for Singapore orders.
Couriers, who need your name, address and phone number to deliver your parcel. In Singapore we deliver with our own team or a delivery partner; overseas orders and pre-orders are sent from our China warehouse by an international courier.
Our warehouse team in China, for pre-orders and overseas orders that ship from there.
Google, for Sign in with Google, Google Analytics and reCAPTCHA, and Google Cloud in Singapore, which runs the system that holds our orders and customer accounts.
Vercel, which hosts this website. Your orders, messages and sign-in pass through Vercel's servers in the United States on their way to our system in Singapore.
Exabytes (Singapore), which runs our email.
WhatsApp (Meta), when you chat with us there, and Telegram, which alerts our staff to new emails in our sales inbox (the alert shows the sender's details and message).
GitHub, from which your browser loads the small country flags in the phone number box at checkout.
Our professional advisers, and the police, courts or government agencies when the law requires it.

Personal data sent outside Singapore

Some of these providers handle data outside Singapore: Vercel and Google in the United States and elsewhere, WhatsApp, Telegram and GitHub around the world, and our warehouse team and courier in China. We send personal data abroad only when we need to, and we use providers that commit to protecting it, so that it is protected to a standard comparable to the PDPA.

How long we keep it

Orders, invoices and payment records: at least 5 years, because Singapore tax law requires business records to be kept for 5 years.
Your customer account: while you use it. Ask us and we will close it (we still keep the order records above).
Messages, photos and chats: as long as we need them to deal with your request and any follow-up.
Newsletter: until you unsubscribe.
Google Analytics: detailed visit data is deleted after 2 months, and data linked to a visitor after 14 months.

When we no longer need personal data, we delete it or remove what could identify you.

How we protect it

This website uses encrypted connections (HTTPS). Only our staff who need your data can see it, and our systems need a password to sign in. Card payments happen on HitPay's own secure page. No system is perfectly secure, so we cannot promise that your data will never be at risk, but we take reasonable steps to protect it.

If a data breach is likely to cause significant harm, or affects 500 or more people, we will report it to the Personal Data Protection Commission within 3 calendar days of confirming that it must be reported, and we will tell you if it is likely to cause you significant harm, as the PDPA requires.

Marketing

We send marketing only if you ask for it, by signing up for our newsletter. We do not send marketing messages by WhatsApp, SMS or phone call unless you have asked us to. To stop the newsletter, email sales@laptopclinic.sg and we will take you off the list.

Your rights

See your data. Ask us what personal data we hold about you and how we have used it in the past year. We reply within 30 days, or tell you within 30 days when we will. We may charge a reasonable fee for this, and if so we tell you the amount first.
Correct your data. Tell us if something is wrong and we will correct it, unless we have a reasonable ground not to; if we do not correct it, we note the correction you asked for.
Withdraw your consent. Tell us and we will stop using your data for that purpose, after telling you what this means for you (for example, we may not be able to deliver an order without your address).
Deleting your data. Singapore's PDPA does not give a right to have your data deleted on request, so we do not promise that. We delete personal data, or remove what could identify you, once we no longer need it for the purpose we collected it for or for legal or business reasons (see "How long we keep it").
Complain. Contact our Data Protection Officer first. If you are not satisfied, you can complain to the Personal Data Protection Commission at www.pdpc.gov.sg.

To keep your data safe, we may ask you to prove who you are before we act on a request.

Children

This shop is for adults. Under 18s may only order with a parent's or guardian's permission, and we do not knowingly collect children's personal data without it.

Changes to this policy

We will update this policy when what we do changes. The date at the top of this page shows when it last changed.

Contact us

WhatsApp (text messages only): +65 8828 8180
Email: sales@laptopclinic.sg
Or use our contact form.

Our customer care hours are Monday to Friday 10am to 7pm and Saturday 10am to 3pm (Singapore time). We are closed on Sundays and public holidays.

LaptopClinic.sg is run by Esmond Solutions Pte. Ltd. (UEN 202031216G), a company registered in Singapore. We are an online store with no public walk-in counter.