Privacy Policy

TOROL Singapore Pte. Ltd. ("TOROL", "we", "us", "our") respects your privacy and is committed to protecting your personal data under Singapore's Personal Data Protection Act 2012 (the "PDPA").

This Privacy Policy explains what personal data we collect through torol-singapore.com (the "Site"), why we collect it, how we use and protect it, and the choices and rights you have. By using the Site or sending us your details, you acknowledge that you have read and understood this Policy.

1. The personal data we collect

We only collect personal data that you choose to give us, or that is needed to run the Site:

• When you request a quote or contact us: your name, business name, email address, phone or WhatsApp number, delivery location and postal code, and anything you include in your message.
• When you subscribe to updates: your email address.
• When you browse the Site: limited technical data through cookies and similar technologies, such as your device and browser type, the pages you view, and how you reached the Site (see Section 6).

We do not knowingly collect sensitive data such as NRIC, passport or financial account numbers through the Site, and we ask that you do not send such information through our contact forms.

2. How and why we use your personal data

We use your personal data only for purposes a reasonable person would consider appropriate, including to:

• respond to your enquiries and prepare quotations;
• follow up on sales discussions and arrange delivery, installation or servicing;
• send you product updates or marketing messages, where you have agreed to receive them;
• maintain and improve the Site and our customer service;
• comply with applicable laws and regulations.

We will not use your personal data for a new purpose unless we notify you and obtain your consent, or are otherwise permitted by law.

3. Consent and withdrawing consent

By submitting your personal data through the Site, you consent to our collecting, using and disclosing it for the purposes set out in this Policy.

You may withdraw your consent at any time by contacting our Data Protection Officer (Section 12). Once you do, we will stop using your data for that purpose, although this may mean we can no longer provide a quotation or service. Withdrawing consent does not affect anything we have already done lawfully with your data. To stop marketing emails, you can also click the unsubscribe link in any such email.

4. Disclosure of personal data

We do not sell your personal data. We may share it only with:

• service providers who help us run the Site and our business (for example web hosting, email delivery and analytics), who are required to protect your data and use it only for the services they provide to us;
• our delivery, installation and servicing partners, where needed to fulfil your request;
• authorities or regulators where required by law.

5. Transfer of data outside Singapore

Some of our service providers (such as our web host and email provider) may store or process data on servers outside Singapore. Where this happens, we take reasonable steps to ensure your personal data is protected to a standard comparable to the PDPA.

6. Cookies and analytics

The Site uses cookies and similar technologies to keep it working, remember your preferences, and understand how the Site is used. You can control or delete cookies through your browser settings. Blocking some cookies may affect how the Site functions.

We use Google Analytics, a web-analytics service provided by Google, to understand how visitors use the Site so that we can improve it. Google Analytics sets cookies that collect information such as your approximate location, device and browser type, and the pages you view, in a way that does not directly identify you. This information is processed by Google on our behalf; for details, please see the Google Privacy Policy. You can opt out by installing the Google Analytics opt-out browser add-on, or by blocking cookies in your browser.

7. How we protect your personal data

We make reasonable security arrangements to protect personal data in our possession against unauthorised access, use, disclosure, copying, modification or disposal. These include access controls, encrypted connections (HTTPS) and keeping our systems updated. No method of transmission or storage is completely secure, but we work to protect your data and to limit who can access it.

8. How long we keep your personal data

We keep your personal data only for as long as it is needed for the purposes in this Policy, or as required by law. When we no longer have a business or legal reason to keep it, we delete or anonymise it. As a general guide, we keep enquiry and quotation records for up to 24 months after our last interaction with you, unless you ask us to remove them sooner.

9. Your rights: access and correction

You may ask us to confirm whether we hold personal data about you and provide a copy of it, and to correct any data that is inaccurate or out of date. We will respond as soon as reasonably possible. A small fee may apply to an access request, and we will tell you of any fee in advance. Please also help us keep your data accurate by letting us know of any changes.

10. Data breaches

If a data breach occurs that is likely to result in significant harm to affected individuals, or that otherwise meets the notification thresholds under the PDPA, we will notify the Personal Data Protection Commission and affected individuals as required by law.

11. Other websites

The Site may link to other websites we do not control. This Policy does not apply to them, and we encourage you to read their own privacy policies.

12. How to contact us

If you have any questions about this Policy, wish to withdraw consent, or want to make an access or correction request, please contact our Data Protection Officer:

13. Changes to this Policy

We may update this Policy from time to time. The latest version will always be posted on this page, with the effective date shown below. Please check back periodically.