Last updated: 01 October 2025
Convert Power & Lighting Pte Ltd (“Convert Power & Lighting”, “we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, protect and retain personal data in Singapore, and the choices you have. It applies to personal data in our possession or under our control, including data held by organisations that process it on our behalf.
By interacting with us (e.g., using our website, submitting enquiries, purchasing products, visiting our premises, or working with us as a supplier/contractor), you agree to the practices described in this Policy.
1) Who we are
Entity: Convert Power & Lighting Pte Ltd
UEN: 202333555N
Website: https://www.convert.sg
We design, supply and support power and lighting solutions, including related site services, deliveries and after-sales support.
2) What “personal data” means
“Personal data” means any data (whether true or not) about an identifiable individual.
Examples we may collect
- Identification & contact: name, postal address, email, phone, job title, company name.
- Customer & transaction: orders, quotations, invoices, delivery details, warranty/returns records, service tickets, call recordings related to support.
- Site & security: visitor registration details, access logs, and CCTV footage at our premises.
- Technical & online: IP address, device identifiers, cookie IDs, pages viewed, browser and OS details.
- Employment (applicants/employees): CV/resume details, qualifications, referees, background screening results as permitted by law.
- Special handling: national identifiers (e.g., NRIC/FIN) only when required by law or strictly necessary to verify identity to a high degree of fidelity.
Business contact information (e.g., your name, position and business contact details used for business communications) may not be treated as personal data under Singapore law when used solely for contacting you in your business capacity; we still handle it with care.
If you provide us with personal data of another individual (e.g., your colleague or a delivery contact), you confirm you have notified that individual and obtained consent where required.
3) How we collect personal data
Directly from you
Forms, emails, calls, WhatsApp/SMS, business cards, meetings, events, service visits and onsite works.
Automatically
Through cookies and similar technologies on our website and systems.
From third parties
Your employer (for B2B dealings), our partners, logistics providers, payment processors, recruiters, background screening providers (with authority), or publicly available sources.
4) Why we collect, use and disclose personal data
- Sales & service delivery: processing enquiries, quotes and orders; arranging shipments and onsite works; commissioning; returns and warranty support.
- Customer care: responding to requests, technical support, maintenance notifications, product safety updates and recalls.
- Operations & finance: account creation, billing, payments, tax and audit, record-keeping.
- Security & safety: visitor management, CCTV monitoring, incident reporting and investigation.
- Quality & improvement: analytics, troubleshooting, testing, training, maintenance and enhancement of our products, services and website.
- Legal & compliance: complying with laws, codes, industry standards, or regulatory requests; establishing and defending legal claims; fraud prevention.
- Recruitment & HR: evaluating applications, onboarding, performance and training administration, and benefits (where applicable).
- Marketing (with consent or as permitted): sending product updates, invitations and offers; conducting surveys and market research.
We will notify you of additional purposes where required at the point of collection.
5) Basis for handling personal data (PDPA)
Consent
We obtain your consent for stated purposes. You may withdraw consent at any time (see Section 12).
Deemed consent
Deemed consent may apply where you voluntarily provide data for a purpose, or where deemed consent by notification is used and you have not opted out within the stated period.
Legitimate interests
Where permitted, we rely on legitimate interests after balancing our needs against your interests and implementing appropriate safeguards.
Other PDPA exceptions
For example, emergencies, investigations, fraud prevention, or use of publicly available data, where permitted by law.
6) Telemarketing, DNC and electronic messages
Do-Not-Call (DNC)
For marketing via calls, SMS/MMS or fax to Singapore numbers, we comply with DNC provisions (including checking the DNC Registry unless an exception applies or we have clear and unambiguous consent).
Commercial electronic messages & unsubscribe
For commercial electronic messages (e.g., email), we identify ourselves and provide a functional unsubscribe facility. If you unsubscribe or opt out, we will stop such marketing within a reasonable period.
7) Cookies and online tracking
We use necessary cookies to operate our site. With your consent (unless an exception applies), we may also use analytics and advertising cookies to understand usage and improve our content.
Your choices
You can manage cookie preferences via our cookie banner (where available) or your browser settings. Blocking some cookies may affect site functionality.
8) CCTV and visitor management
We use CCTV at selected locations for security, safety and loss prevention. Signage is displayed where CCTV is in operation. We retain footage for only as long as necessary for these purposes, subject to legal requirements. Visitor information collected at reception is similarly protected and retained only as needed.
9) NRIC and other national identifiers
We avoid collecting or retaining full NRIC/FIN numbers unless required by law or strictly necessary for verification to a high degree of fidelity (e.g., restricted-access site entry). We do not use NRIC/FIN as a login ID, password, or authenticator.
10) Sharing your personal data
We may share personal data with:
- Service providers (data intermediaries): hosting, IT, cybersecurity, payment processing, logistics, warehousing, call/contact centres, marketing platforms, recruiters, background screening providers and professional advisers—under written contracts with PDPA-aligned data protection terms.
- Business partners and principals: where necessary to deliver products/services you request.
- Affiliates/related entities: for operational support, subject to comparable protection.
- Authorities and law enforcement: where required by law or to protect our rights, safety or property.
- Other parties: in connection with business transfers or corporate transactions, subject to appropriate safeguards.
We do not sell personal data.
11) Overseas transfers
If personal data is transferred outside Singapore, we ensure a comparable standard of protection, typically through legally enforceable obligations (e.g., approved contractual terms such as ASEAN Model Contractual Clauses or equivalent safeguards), or as otherwise permitted by law.
12) Withdrawing consent and managing preferences
How to withdraw or object
You may withdraw consent or object to specific uses (e.g., marketing) at any time by contacting us through the channels listed on our Contact page or by using the unsubscribe links provided in our messages.
Withdrawal may affect our ability to deliver certain services. We will inform you of likely consequences and proceed based on your decision. Your request will not affect data already processed lawfully before withdrawal.
13) Access and correction
What you can request
- Access to your personal data in our possession or control;
- Information on how your personal data has been used or disclosed in the past year; and
- Correction of inaccurate or incomplete data.
How to request
Submit your request via the Contact page on our website or by writing to us using the details published there. We will respond within a reasonable time. A reasonable fee may apply for access requests. Certain exceptions and limitations may apply under the PDPA.
14) Accuracy
We make reasonable efforts to ensure personal data is accurate and complete for the purposes for which it is used. Please keep us informed if your details change.
15) Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws (e.g., tax and accounting). When no longer needed, we will delete, anonymise or securely dispose of the data.
16) Protection and security
Safeguards
We implement reasonable administrative, physical and technical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. Measures include access controls, need-to-know restrictions, encryption in transit and/or at rest where appropriate, secure configuration and monitoring, and staff training.
17) Data breach management
Notification timelines
If a data breach occurs, we will assess it promptly. Where the breach is notifiable under Singapore law (e.g., likely to result in significant harm or involves large-scale impact), we will notify the Personal Data Protection Commission (PDPC) as soon as practicable and no later than 3 calendar days after determining it is notifiable, and notify affected individuals at the same time or as soon as practicable thereafter. We aim to complete breach assessments within 30 calendar days where practicable and will take steps to contain, investigate and prevent recurrence.
18) Children’s personal data
We do not knowingly target our services at children. Where children’s data may be involved, we apply heightened protection and, where appropriate, obtain parental/guardian consent before collection or use.
19) Third-party services and links
Our website may contain links to third-party sites or services. Their privacy practices are not governed by this Policy. Review their policies before providing personal data.
20) Data portability (future)
If and when data portability obligations are brought into effect under Singapore law, we will update this Policy and our processes to support secure transmission of your data to another organisation where feasible.
21) Changes to this Policy
We may update this Policy from time to time to reflect legal, technical or business changes. The “Last updated” date indicates when it was most recently revised. Significant changes may be notified on our website or by other appropriate means.
22) Governing law
This Policy and any dispute arising from it are governed by the laws of Singapore.
Quick summary (non-legal)
- We collect only what we need to deliver and improve our products and services.
- You can manage consent (including marketing opt-outs) via our website Contact page or unsubscribe links.
- We protect your data, retain it only as needed, and notify when required.
- You can access and correct your data by contacting us through the Contact page.