Infratint Automotive Film Pte Ltd ("Infratint", "we", "us") is committed to protecting your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA). This policy explains what we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It applies to this website, our booking and enquiry forms, our WhatsApp and phone channels, and the customer records we keep at our workshop.

📥 1. Personal data we collect

• Contact details: your name, mobile number and email address when you enquire, book, or message us on WhatsApp or by phone.
• Vehicle details: make, model and licence plate when you book a service. The plate is how we index your installation and warranty record.
• Installation and warranty records: film tier installed, panels covered, installation date, warranty start and end dates, and any replacement history.
• Communications: messages you exchange with the team on WhatsApp, email or our web forms, kept so we can follow the thread of your enquiry or claim.
• Website analytics: page views, referring source, device type and similar usage signals, collected through Google Tag Manager and Google Analytics.

We do not collect NRIC numbers, payment card numbers or any special categories of data through this website, and we do not knowingly collect personal data from minors.

🎯 2. Purposes: why we collect and use it

Under the PDPA we collect, use and disclose personal data only for purposes a reasonable person would consider appropriate, and which we notify you of here:

• Responding to enquiries and preparing quotes for your vehicle.
• Scheduling, confirming, rescheduling and managing your appointment, including the booking confirmation we send to your number on WhatsApp.
• Performing the installation and maintaining your warranty record so future claims can be verified by licence plate.
• Handling warranty claims, replacements and aftercare support.
• Asking how your installation went and, with your consent, inviting you to leave a review.
• Improving our website, services and customer experience through aggregated analytics.
• Meeting legal, regulatory, accounting and dispute-resolution obligations.

✅ 3. Consent

By submitting a form, booking an appointment or messaging us, you consent to our collection, use and disclosure of your personal data for the purposes above. Where you volunteer information in conversation (for example, sending us photos of your car on WhatsApp), the PDPA's deemed-consent provisions apply: you are taken to consent to its use for the purpose you provided it.

You may withdraw consent at any time by contacting our Data Protection Officer (section 11 below) or replying "unsubscribe" or "stop" to any of our messages. We will act on the withdrawal within a reasonable time, explain any consequences (for example, that we cannot maintain a warranty record without your vehicle details), and stop the relevant use of your data. Withdrawal does not affect processing that took place before it.

📣 4. Marketing messages and the DNC Registry

Messages about your own booking, installation or warranty are transactional and are sent as part of providing the service. Beyond that, we send marketing or promotional messages to Singapore telephone numbers only where you have given clear and unambiguous consent, in line with the Do Not Call (DNC) provisions of the PDPA. Every marketing message we send identifies Infratint and includes a way to opt out. If you opt out, we stop within the timeframe required by law.

🤝 5. Who we disclose data to

We do not sell or rent your personal data. We disclose it only to the service providers who process it on our behalf under contract, and only what each needs:

• respond.io routes our WhatsApp conversations, so your number and chat history with us pass through their platform.
• Meta (WhatsApp Business Platform) carries the WhatsApp messages themselves, governed also by WhatsApp's own terms.
• Supabase hosts our customer, booking and warranty database.
• Vercel hosts this website and processes form submissions in transit.
• Resend delivers our transactional emails (booking confirmations and similar).
• Google provides our analytics (Tag Manager and Analytics) using aggregated usage data.
• Our film manufacturer, limited to what is needed to support a specific warranty claim.
• Public authorities, where disclosure is required or authorised by law.

🌏 6. Overseas transfers

Some of the providers above store or process data outside Singapore. Where personal data is transferred overseas, we take steps required under section 26 of the PDPA to ensure the recipient provides a standard of protection comparable to the PDPA, through contractual safeguards and by using providers with recognised data-protection certifications and practices.

🔐 7. How we protect it

• All traffic to this website and our systems is encrypted in transit (HTTPS/TLS).
• Customer records are held in access-controlled systems; staff access is limited to what their role requires.
• Administrative areas of this site sit behind authentication.
• We review the third-party processors we use and bind them to confidentiality and data-protection obligations.

🗂️ 8. How long we keep it

• Enquiries that do not become bookings: kept only as long as needed to follow up, then removed from active use.
• Installation and warranty records: kept for at least the life of your warranty so claims can be verified, and thereafter only as long as needed for legal, accounting or dispute-resolution purposes.
• Analytics data: retained per Google Analytics' standard retention controls, in aggregated form.

When personal data is no longer needed for any notified purpose or legal requirement, we cease to retain it or anonymise it, as section 25 of the PDPA requires.

✋ 9. Your rights: access and correction

You may ask us, at any time, for a copy of the personal data we hold about you and how it has been used or disclosed in the past year, and you may ask us to correct any error or omission. Email our Data Protection Officer with your name and mobile number (and licence plate, if your request concerns a warranty record). We respond within 30 days; if we ever need longer, we will tell you when to expect our response. We may decline requests in the limited circumstances the PDPA permits, and we will explain why.

🍪 10. Cookies and analytics

This site uses a small number of cookies and similar technologies: session cookies needed for forms to work, and analytics cookies set by Google Tag Manager and Google Analytics that help us understand which pages are useful. Analytics data reaches us in aggregated form. You can block or delete cookies in your browser settings; the site keeps working, with reduced analytics. We do not use cookies to build advertising profiles of identified individuals.

🚨 11. Data breach notification

If a data breach occurs that is likely to result in significant harm to affected individuals, or is of significant scale, we will assess it promptly and notify the Personal Data Protection Commission (PDPC) and affected individuals as required by sections 26A to 26E of the PDPA.

📮 12. Data Protection Officer

Our Data Protection Officer oversees compliance with this policy and the PDPA. For any request, question or complaint about your personal data:

• Email: info@infratint.com (attention: Data Protection Officer)
• Mail: Data Protection Officer, Infratint Automotive Film Pte Ltd, 32 Old Toh Tuck Road, #01-10, I.Biz Centre, Singapore 597658

If you are not satisfied with our response, you may approach the Personal Data Protection Commission Singapore (pdpc.gov.sg).

🔁 13. Updates to this policy

We review this policy periodically and update it when our practices or the law change. Material changes will be flagged on this page with a new "last updated" date. Continued use of our services after an update constitutes acceptance of the revised policy.