1. Scope of this Policy

This policy covers personal information that AGVA SINGAPORE PTE LTD handles in connection with this website, with enquiries sent to the company, and with the products and services offered by the canvas case bench and the systems design practice. It applies to visitors who browse the pages, to people who submit the contact form, and to clients, suppliers and partners who exchange information with the company in the course of business.

The policy does not cover information that a third party collects on its own website, even when a link to that website appears here. It also does not cover information that the company receives in a purely professional capacity about an organisation, such as a registered business address or a public company number, where such information is not tied to an individual.

The company operates from Singapore and serves clients in Singapore and abroad. Where the company handles information about people in other jurisdictions, it aims to apply standards of care that are consistent with those jurisdictions while meeting its obligations under Singapore law.

2. Who We Are

AGVA SINGAPORE PTE LTD is a company registered in Singapore. The company works in computer systems design and related professional services, and it also operates a canvas case workshop that produces laptop sleeves, desk organisers and travel cases. The website at agvasingapore.buzz presents both sides of the business, and the same team answers enquiries for either.

The registered and working address is:

The person responsible for data protection matters can be reached at inquiries@agvasingapore.buzz or by telephone on +19434695872. Please include the word privacy in the subject line of any message about this policy so that it reaches the right desk quickly.

3. Information You Provide

The company collects information that a person chooses to provide. The contact form on this website asks for a name, an email address, a subject and a message. Additional information may be provided in the body of a message, for example a phone number, a company name, a delivery address, device dimensions, order quantities or photographs of a piece that needs repair.

When a client places an order, the company may collect the following categories of information:

• Identity details such as name, job title and the organisation represented
• Contact details such as email address, telephone number and postal address
• Order details such as item type, quantity, material choices and delivery dates
• Technical details needed for case work, such as device dimensions and packing lists
• Billing details processed through a payment provider, where a payment is made
• Correspondence and notes taken during calls, sample reviews and bench visits

The company does not ask for sensitive personal information through this website. Sensitive information includes health data, religious affiliation, political views and biometric identifiers. Please do not include such information in a message unless it is genuinely necessary for a specific request, and contact the company first if there is doubt.

4. Information Collected Automatically

When a person visits this website, the hosting infrastructure may record limited technical information in server logs. This information is used to keep the site available and to understand how it is used in aggregate. Typical entries include the internet protocol address, the browser type and version, the operating system, the referring page, the pages visited and the time of the visit.

The pages of this website are static and are designed to work without tracking scripts. The site does not run advertising networks and does not build visitor profiles across other websites. The small amount of technical information that is recorded exists to support security, troubleshooting and service reliability rather than marketing.

If the company later adds a measurement tool that uses personal information, this policy will be updated before that tool goes live, and the update will describe what the tool reads and why it is needed.

5. Cookies and Similar Technologies

This website does not require cookies for its core functions. Navigation between the pages, reading of the legal pages and use of the contact form all work without cookies being stored on the visitor device. The site does not set advertising cookies and does not share cookie identifiers with data brokers.

Some hosting providers set a strictly necessary cookie to manage load balancing or to protect a form from automated abuse. Where such a cookie is present, it is used only for that purpose and is not used to identify a person across websites. A visitor can block or delete cookies through the settings of a browser, and the pages of this site will continue to work.

If the company adopts a cookie for an optional purpose in future, for example to remember a preferred layout, it will ask for consent where the law requires it and will document the change in the newsletter and in this policy.

6. How We Use Personal Information

The company uses personal information for purposes that are directly connected to the services it provides. Those purposes include answering enquiries, preparing quotes, planning bench runs, producing and delivering orders, supporting repairs and refits, maintaining business records, and meeting legal obligations.

The following list sets out the main uses in more detail:

• Responding to a message sent through the contact form or by email
• Preparing a quote, a cut sheet or a sample proposal for a case or systems job
• Scheduling bench time and coordinating delivery of an order
• Recording the approved sample so that a repeat order matches the first batch
• Providing repair and refit support and tracking a piece through the workshop
• Issuing invoices, receipts and delivery notes and reconciling accounts
• Keeping books and records as required by accounting and tax rules
• Protecting the website and the workshop systems from misuse and fraud
• Improving the wording and structure of the website so that enquiries are clearer

The company does not sell personal information. It does not rent a mailing list to another organisation. It does not use a message sent through the contact form to build an advertising audience or to make automated decisions about a person.

7. Lawful Bases for Processing

Where a legal framework requires the company to identify a lawful basis for handling personal information, the company relies on one or more of the following grounds. Consent applies when a person chooses to send a message or to subscribe to a list, and that consent can be withdrawn at any time. Performance of a contract applies when the company needs the information to quote for, produce or deliver an order.

Legitimate interests apply when the company handles information for purposes such as replying to a business enquiry, protecting the website, maintaining accurate records or improving a service, provided that the interests of the individual are not overridden. Legal obligation applies when the company must keep or disclose information to comply with tax, accounting or regulatory requirements.

Where the law of another jurisdiction requires a different basis, the company will identify and document that basis before handling information that falls within that jurisdiction.

8. Workshop and Order Records

The canvas case bench keeps records that are needed to make consistent products. These records may include a cut sheet, a hardware approval sheet, a stitched sample note and a delivery schedule. Some records carry the name of the client contact, the name of the organisation and the order reference.

The company keeps an approved sample on the shelf for repeat orders. The sample itself does not carry personal information, but the note attached to it may include a client name and a contact email. Access to the sample shelf and to the job cards is limited to bench staff and to the staff who manage client accounts.

Photographs of a piece sent in for repair may be retained with the repair record so that the same fault can be recognised if it occurs again. These photographs are stored in the company records system and are not published on the website without the written agreement of the client.

9. Sharing with Service Providers

The company shares personal information with a small number of service providers that help it operate. These providers include the hosting provider that serves this website, the email provider that receives workshop messages, the accounting service that issues invoices and the payment processor that handles card payments. Each provider receives only the information needed for its function.

Providers are engaged on terms that require confidentiality, appropriate security and a limit on use. The company reviews the list of providers from time to time and removes any provider that no longer meets the standard. Where a provider is outside Singapore, the company takes steps to ensure that the information remains protected, as described in the section on international transfers.

The company does not share personal information with advertising networks, data brokers or social media platforms. It does not share a client list with another client.

10. Disclosure Required by Law

The company may disclose personal information when it is required to do so by law, by a court order, by a regulator with lawful authority, or by a law enforcement body investigating a suspected offence. In such a case the company will disclose only the information that is properly requested.

The company may also disclose information where it is necessary to establish, exercise or defend a legal claim, to protect the safety of a person, or to prevent fraud. Where the law permits, the company will inform the affected person of the disclosure unless doing so would compromise the purpose of the request.

11. International Transfers

The company operates from Singapore, and the primary systems that hold personal information are hosted in Singapore or in a jurisdiction with comparable protection. Some service providers used for email, payment or accounting may process information in another country.

When a transfer outside Singapore is necessary, the company relies on appropriate safeguards. These may include contractual terms with the provider, a provider certification recognised by a regulator, or the use of a provider whose processing location is covered by an adequacy decision. The company reviews transfers annually and keeps a note of the safeguards in place for each provider.

A person who would like to know more about a specific transfer may write to inquiries@agvasingapore.buzz and request the relevant information. The company will answer within a reasonable time and will not charge a fee for a first request.

12. How Long We Keep Information

The company keeps personal information only for as long as it is needed for the purpose for which it was collected, or for as long as a legal rule requires. Retention periods differ by record type, because an enquiry and an invoice have different obligations attached to them.

The following periods are used as a guide:

• General enquiries that do not lead to an order are kept for up to twenty four months
• Quotes and sample records related to an order are kept for the life of the order plus six years
• Invoices and accounting records are kept for at least five years, in line with tax rules
• Repair records, including photographs, are kept for three years after the repair is completed
• Website server logs are kept for a short period and are then deleted or aggregated
• Marketing subscriptions are kept until the person unsubscribes or the list is retired

When a retention period ends the company deletes the record or removes the identifying details so that the record can no longer be linked to a person. Backups that contain the record are cycled on a fixed schedule and are removed in the normal course.

13. Security of Personal Information

The company applies technical and organisational measures to protect personal information. Access to email and to the records system is protected by individual accounts and strong passwords. Administrative access is limited to staff who need it for their work, and access is removed when a person leaves the company.

Devices used to read messages and to prepare quotes are protected with screen locks and are kept up to date with security patches. Paper job cards are kept on the bench while a run is active and are filed in a locked cabinet when the run closes. The workshop is secured outside working hours.

No system is completely secure, and the company cannot guarantee that a breach will never occur. If a breach occurs that is likely to result in harm, the company will notify the affected people and the relevant regulator without undue delay, and will describe what happened, what information was involved and what steps are being taken to reduce the risk.

14. Your Rights and Choices

Depending on where a person lives, the law may give that person rights over the personal information held about them. The company honours these rights for all visitors and clients, regardless of location, as a matter of good practice.

The main rights are:

• The right to ask what personal information is held and to receive a copy
• The right to ask for inaccurate information to be corrected
• The right to ask for information to be deleted where there is no good reason to keep it
• The right to ask for processing to be restricted while a concern is reviewed
• The right to object to processing based on legitimate interests
• The right to withdraw consent for a marketing message at any time
• The right to ask for information to be provided in a portable format

To exercise a right, write to inquiries@agvasingapore.buzz with the subject line privacy request. The company may ask for information to confirm identity before acting, so that a request cannot be used to obtain the records of another person. A reply will be provided within thirty days, and the reply will explain any part of the request that cannot be met and why.

If a person is not satisfied with the response, that person may raise the matter with the data protection regulator in the relevant jurisdiction. The company will cooperate with any such review.

15. Privacy for Children

This website and the services described on it are intended for businesses, organisations and adults acting in a professional capacity. The company does not knowingly collect personal information from a child under the age of sixteen through this website.

If a parent or guardian believes that a child has sent personal information through the contact form or by email, that person may write to inquiries@agvasingapore.buzz and the company will delete the information promptly. The company will confirm the deletion in writing once it is complete.

Where a school or youth organisation wishes to order canvas cases, the enquiry should be made by an adult representative of the organisation, and personal information about students should not be included in the message.

16. Marketing Communications

The company sends marketing messages only to people who have asked to receive them. A person may ask to be added to the bench newsletter after an order, and the request is recorded with the date. Every newsletter includes a way to unsubscribe, and an unsubscribe request is processed within two business days.

The company does not send marketing messages to an address that was provided only for the purpose of a repair, a quote or a one off enquiry. A business contact may receive a short follow up about a specific job, but that message is transactional rather than promotional and is not added to a list without consent.

If the company changes its email tool, the new tool will be held to the same rules, and the rights described in this policy will continue to apply.

17. Third Party Links

This website may link to the websites of partners, suppliers or public resources. A link does not mean that the company controls the content or the privacy practices of the destination site. A visitor who follows a link should read the privacy notice of that site before providing personal information.

The company is not responsible for the practices of a third party site and cannot accept a request to delete information that is held by another organisation. Where a partner is involved in an order, the company will tell the client which partner will handle which part of the work, so that the client knows where to direct a question.

18. Changes to this Policy

The company reviews this policy at least once a year and updates it when a process changes, when a new service is introduced, or when the law requires a change. The effective date at the top of the page shows when the current version took effect.

A material change will be announced on the homepage for a period of thirty days and, where the company holds an email address for the purpose, in a direct message to affected clients. The company will not apply a new use of personal information to information that was collected under an earlier version without a lawful basis for the change.

A visitor may always read the current version at this address. Previous versions can be requested from inquiries@agvasingapore.buzz.

19. How to Contact Us

Questions about this policy, requests to exercise a right, and complaints about the handling of personal information should be sent to the company at the details below. The company aims to acknowledge a message within two business days and to answer fully within thirty days.

If a concern cannot be resolved directly, a person may contact the Personal Data Protection Commission of Singapore or the data protection authority of the relevant jurisdiction. The company will provide any information that the authority requires in order to review the matter.

20. Governing Law

This policy is governed by the laws of Singapore. Any dispute about the handling of personal information that cannot be resolved through the contact process will be subject to the jurisdiction of the courts of Singapore, unless a mandatory rule of another jurisdiction provides otherwise.

The company will continue to honour the commitments in this policy even where a local rule sets a lower standard, because those commitments describe how the company chooses to work rather than only what the law demands.

This policy should be read together with the Terms of Service for this website, which describe the rules that apply to the use of the site and to orders placed with AGVA SINGAPORE PTE LTD. The Terms are available on the terms of service page and can be reached from the footer of every page.