Your privacy matters to us. This policy explains what personal data we collect, why we collect it, and the choices you have.
01Who we are
This website is operated by Raphael Industries Private Limited, a company incorporated in Singapore ("Raphael Industries", "we", "us" and "our").
We are responsible for the personal data we collect through raphael.industries (the "Site") and through enquiries you send us.
02What this policy covers
This policy explains how we collect, use, disclose, store and protect personal data when you visit the Site or contact us. It is written to meet our obligations under Singapore's Personal Data Protection Act 2012 ("PDPA") and other data protection laws that apply to us.
Separate notices may apply once you become a customer, supplier or employee.
03The personal data we collect
Information you give us. When you send an enquiry, we collect:
- your name and email address
- your organisation and country, if you provide them
- the area you are interested in
- any licence or end-user reference you choose to provide
- your message, and anything else you include in it
Information collected automatically. When you visit the Site, our hosting provider records standard server logs. To protect the enquiry form from spam, we also temporarily keep a one-way coded (hashed) version of your IP address and the time you sent an enquiry. These include your IP address, browser type, the pages you request and the date and time of your visit. The Site loads fonts from Google Fonts, so your browser also sends your IP address to Google when a page loads.
What we do not do. The Site does not use analytics, advertising or tracking cookies, and we do not sell your personal data.
Please do not send us sensitive personal data, such as identity document images, health information or financial account details, through the Site or by email unless we ask for it through a secure channel.
04How we use your personal data
We use your personal data to:
- respond to your enquiry and talk with you about your requirements
- check whether we can lawfully support your request. This may include checking eligibility, licences and end-user status under the laws that apply to firearms, unmanned systems and controlled technology.
- keep records of our communications
- operate, secure and improve the Site
- comply with legal and regulatory obligations, and respond to lawful requests from authorities
- establish, exercise or defend legal claims
We will not use your personal data for marketing unless you have agreed to it. You can opt out of marketing at any time.
05Consent and your choices
By sending us an enquiry, you consent to us collecting, using and disclosing your personal data for the purposes described in this policy. Where the law allows, we may also rely on legitimate interests, contractual necessity or legal obligations instead of consent.
You may withdraw your consent at any time by emailing us. If you withdraw consent, we may no longer be able to respond to your enquiry or deal with you. We will tell you what the consequences are before we act on your request. Withdrawing consent does not affect processing that has already taken place, or processing we must carry out by law.
06Who we share it with
We share personal data only where needed, with:
- any related companies we may set up in future, so they can handle your enquiry
- service providers who host our Site and email, such as Hostinger and our email provider. They process data on our instructions.
- manufacturers and suppliers, where needed to answer your enquiry. We will tell you before doing so.
- professional advisers, such as lawyers, auditors and compliance consultants
- government, licensing, customs and law-enforcement authorities, where the law requires it, including for licensing and export-control checks
- a buyer or successor, if our business is reorganised or sold
07International transfers
Your personal data may be stored in, or accessed from, countries outside Singapore where our service providers operate.
When we transfer personal data out of Singapore, we take the steps the PDPA requires so the data keeps a comparable standard of protection. These steps include contractual safeguards with recipients.
08How long we keep it
We keep personal data only for as long as we need it for the purposes above, or as long as the law requires. As a general guide:
- enquiries that do not lead to a business relationship: 24 months from our last contact
- records we must keep under licensing, export-control, tax or company laws: for the period those laws set
- server logs: for as long as our hosting provider keeps them
When we no longer need the data, we delete it or make it anonymous.
09How we protect it
We use reasonable administrative, technical and physical security measures to protect personal data. These include encrypted (HTTPS) connections, access controls and limiting access to staff who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If a data breach is likely to cause you significant harm, we will notify you and the relevant authorities as the law requires.
10Your rights
Depending on where you live, you may have the right to:
- ask for a copy of the personal data we hold about you, and how it has been used or disclosed
- ask us to correct inaccurate or incomplete data
- withdraw consent, or object to or limit certain uses of your data
- ask us to transfer your data to another organisation, where data portability applies
- ask us to delete your data, where the law provides for this
- opt out of direct marketing
If you live outside Singapore, you may have additional rights under the laws of your country. We do not sell personal data, and we will not treat you unfairly for using your rights.
To make a request, email us using the details below. We may need to verify your identity first. We will respond within the time the law allows, and we may charge a reasonable fee where the law permits.
11Children
The Site is intended for businesses, government bodies and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, please contact us and we will delete it.
12Contact us and complaints
Data Protection Officer
Raphael Industries
Email: contact [at] raphael.industries
Please use the subject line "Privacy request".
If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You may also contact the relevant regulator:
- Singapore: Personal Data Protection Commission (PDPC)
- Elsewhere: the data protection authority in your country
13Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date. If a change is significant, we will take reasonable steps to let you know.