Privacy Policy

Introduction

Circuit Workshop operates as a professional automotive service provider in Singapore. We recognize that personal information entrusted to us requires responsible handling. This privacy policy explains how we collect, use, protect, and manage data obtained through our automotive services, website interactions, and customer communications.

Our approach to data protection balances operational needs with respect for customer privacy. We collect only information necessary for service delivery and maintain security measures appropriate to the sensitivity of data involved. This policy applies to all customers, potential customers, and website visitors interacting with Circuit Workshop.

Information We Collect

Contact Information

When scheduling services or making inquiries, we collect names, phone numbers, email addresses, and physical addresses if relevant to service delivery. For pre-purchase inspections at seller locations, we record inspection site addresses while maintaining confidentiality about property details.

Vehicle Information

Service provision requires collection of vehicle identification numbers (VIN), registration details, make, model, year, and relevant modification or service history. This information enables appropriate diagnostic work, parts sourcing, and service record maintenance.

Service Records

We document work performed, parts installed, diagnostic findings, and recommendations made during service. These records include photographs when relevant to documentation purposes. Service history maintained in our systems helps track maintenance patterns and inform future service recommendations.

Payment Information

Transaction records are maintained for accounting purposes. Payment card data is processed through secure third-party systems; we do not store complete card numbers. Bank transfer information and payment receipts are retained according to accounting requirements.

Website Usage Data

Our website collects standard information through cookies and similar technologies: IP addresses, browser types, pages visited, time spent on pages, and referral sources. This data helps us understand how visitors use our website and identify areas for improvement.

Communication Records

Email correspondence, phone call records, and inquiry form submissions are retained for customer service purposes. These communications help us maintain service quality and resolve any questions or concerns that arise.

Legal Basis for Processing

Our data processing activities rely on several legal bases as recognized under Singapore's Personal Data Protection Act (PDPA):

• Consent: When you provide information through inquiry forms or service requests, we obtain your consent for processing that information.
• Contract Fulfillment: Processing your data is necessary to deliver the automotive services you've requested.
• Legitimate Interest: We process certain data to improve service quality, maintain business operations, and communicate relevant information.
• Legal Obligation: Some data retention is required by Singapore's accounting, tax, and business regulations.

How We Use Your Information

Service Provision

Primary use of collected data involves delivering requested automotive services: scheduling appointments, performing diagnostic work, ordering appropriate parts, documenting service completion, and maintaining service records for future reference.

Communication

We use contact information to discuss service recommendations, provide updates on work progress, send appointment reminders, and respond to inquiries. Communication focuses on matters directly relevant to your service or questions.

Service Improvement

Aggregated and anonymized service data helps us identify common issues, evaluate parts performance, refine diagnostic procedures, and improve overall service quality. Individual customer data is not used for marketing analytics.

Legal Compliance

Certain records are maintained to comply with Singapore's accounting requirements, tax obligations, and business licensing regulations. These retention periods follow statutory requirements.

Security

Transaction records and service documentation help detect and prevent fraudulent activities, verify service completion, and resolve any disputes that may arise regarding work performed.

Data Retention

Retention periods vary based on data type and purpose:

• Service Records: Maintained for seven years to support warranty claims, provide service history, and meet accounting requirements.
• Communication Records: Email and phone records retained for three years to support customer service and resolve inquiries.
• Financial Records: Kept for seven years as required by Singapore's accounting regulations.
• Marketing Consent: Maintained until withdrawn or for two years after last interaction if no explicit withdrawal.
• Website Analytics: Anonymized data retained indefinitely; identifiable data removed after 26 months.

Data no longer required for these purposes is securely deleted or anonymized. You may request earlier deletion of certain data types, subject to our legal obligations.

Security Measures

We implement security measures appropriate to the sensitivity of data handled:

• Physical records are stored in secured areas with restricted access limited to authorized personnel.
• Electronic data is protected through password-protected systems, regular backups, and controlled access permissions.
• Payment processing utilizes third-party services that maintain PCI DSS compliance; we do not store complete payment card information.
• Website communications occur over encrypted connections (HTTPS) to protect data in transit.
• Staff receive training on data protection procedures and handling of customer information.
• Breach response procedures are established to address any security incidents promptly.

While we implement reasonable security measures, no system is completely immune to risks. We maintain appropriate insurance and incident response procedures to address potential security events.

Your Rights

Under Singapore's Personal Data Protection Act, you have several rights regarding your personal data:

Right to Access

You may request copies of personal data we hold about you. We will provide this information within a reasonable timeframe, typically within 30 days of your request.

Right to Correction

If you believe personal data we maintain is inaccurate or incomplete, you may request correction. We will update records promptly upon verification of the correct information.

Right to Deletion

You may request deletion of your personal data, subject to our legal obligations for record retention. Service records required for warranty, accounting, or regulatory purposes cannot be deleted during mandatory retention periods.

Right to Restrict Processing

You may request limitation of how we process your data while disputes about accuracy or processing legitimacy are resolved.

Right to Data Portability

Where technically feasible, you may request transfer of your personal data to another service provider in a structured, commonly used format.

Right to Object

You may object to processing based on legitimate interests. We will cease processing unless compelling legitimate grounds override your interests or the processing is necessary for legal claims.

Right to Withdraw Consent

Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

Third-Party Services

We engage certain third-party service providers who may process your data:

• Payment Processors: Handle transaction processing securely. These providers maintain their own privacy policies and security standards.
• Parts Suppliers: Receive vehicle information necessary for sourcing appropriate components. They are contractually bound to use information only for fulfillment purposes.
• Website Analytics: Google Analytics processes website usage data to help us understand visitor behavior. Analytics data is anonymized where possible.
• Email Service: Our email system is hosted by a third-party provider subject to standard security and privacy protections.
• Accounting Software: Financial records are maintained in cloud-based accounting systems with appropriate security measures.

Third-party processors are selected based on their security standards and data protection practices. We maintain agreements requiring appropriate handling of data they process on our behalf.

International Data Transfers

Your data is primarily stored and processed within Singapore. Some third-party services (particularly website analytics and email hosting) may involve data transfers outside Singapore. When such transfers occur, we ensure appropriate safeguards are in place through service provider agreements requiring adequate data protection standards and compliance with applicable regulations.

Cookies and Tracking

Our website uses cookies and similar technologies for functionality and analytics. For detailed information about our cookie practices, including how to manage cookie preferences, please refer to our Cookie Policy.

Policy Updates

This privacy policy may be updated periodically to reflect changes in our practices, legal requirements, or service offerings. Significant changes will be communicated through our website. The "Last Updated" date at the top of this policy indicates when the most recent revision occurred. Continued use of our services after policy changes constitutes acceptance of the updated terms.

Contact Information

For questions about this privacy policy, to exercise your rights regarding personal data, or to raise privacy concerns, please contact us:

We aim to respond to privacy-related inquiries within 10 business days. If you're not satisfied with our response, you may lodge a complaint with Singapore's Personal Data Protection Commission (PDPC).