Legal
Privacy Policy
Last updated: 3 October 2026 · Unitest Instruments Pte Ltd (UEN: 201119141H)
This Privacy Policy sets out how Unitest Instruments Pte Ltd ("Unitest", "we", "us", "our") collects, uses, discloses, and protects your personal data in accordance with the Personal Data Protection Act 2012 (No. 26 of 2012) of Singapore ("PDPA") and its subsidiary legislation, including the Personal Data Protection (Enforcement) Regulations 2021 and the Personal Data Protection (Notification of Data Breaches) Regulations 2021.
1. Organisation and Data Protection Officer
Organisation: Unitest Instruments Pte Ltd
UEN: 201119141H
Registered Address: 18 Boon Lay Way, #04-93 Tradehub 21, Singapore 609966
Data Protection Officer (DPO): sales@unitestinst.com
We have designated a Data Protection Officer as required under Section 11(3) of the PDPA. All data protection queries and access/correction requests should be directed to the DPO.
2. Personal Data We Collect
We collect personal data only where it is reasonably necessary for one or more business purposes. The categories of personal data we may collect include:
- Identity data: full name, job title, company name
- Contact data: email address, telephone number, mailing/billing address
- Transaction data: details of products purchased, order history, invoices, payment records
- Technical data: IP address, browser type and version, time zone, pages visited, device identifiers (collected via cookies and server logs)
- Marketing preferences: your preferences for receiving marketing communications from us
- Correspondence data: emails, enquiries, and other communications you send us
We do not collect sensitive personal data (e.g. NRIC/passport numbers, financial account credentials, biometric data) unless strictly necessary and with your explicit consent.
3. Purposes of Collection, Use and Disclosure
Under Section 18 of the PDPA, we collect, use, and disclose your personal data for the following purposes:
Order fulfilment: Processing, confirming, invoicing, and delivering your purchases; arranging calibration and service bookings.
Customer support: Responding to enquiries, technical questions, warranty claims, and after-sales support.
Account management: Creating and managing your customer account; verifying your identity for credit applications.
Legal and regulatory compliance: Complying with applicable Singapore laws (including the Companies Act, GST Act, and Accounting Standards); responding to lawful government or regulatory requests.
Marketing communications: Sending product updates, promotions, and industry news, only where you have given consent or where the soft-opt-in exception under the PDPA applies. You may withdraw consent at any time.
Business analytics: Improving our website, product range, and customer experience through anonymised or aggregated analytics.
Advertising measurement: Measuring which of our ads in ChatGPT lead to enquiries, using the OpenAI measurement pixel and the information described in section 9 (Cookies).
Security: Detecting and preventing fraud, abuse, or unauthorised access to our systems.
We will not use your personal data for any purpose other than those notified to you at the time of collection, or for a purpose that a reasonable person would consider appropriate in the circumstances.
4. Consent
We collect personal data with your knowledge and consent, except where the PDPA permits collection without consent (e.g. publicly available data, legal proceedings, national interest).
By submitting an enquiry form, placing an order, or providing your contact details, you consent to our collection, use, and disclosure of your personal data as described in this Policy.
You may withdraw your consent at any time by contacting our DPO. Please note that withdrawal of consent may affect our ability to provide certain services to you.
5. Disclosure to Third Parties
We may disclose your personal data to the following categories of third parties, solely for the purposes described above:
- Logistics and courier providers (for delivery)
- Payment processors and financial institutions (for payment processing)
- IT service providers and cloud hosting partners (for website and systems operation)
- OpenAI, the company behind ChatGPT, whose advertising tools we use (if you came to our website from one of our ChatGPT ads, or returned within 30 days of doing so: your email address and phone number in hashed form, your IP address and your browser's user agent, to measure which of our ChatGPT ads led to your enquiry)
- Brand principals and manufacturers (for warranty or technical support escalations)
- Professional advisers (lawyers, auditors, accountants) bound by confidentiality obligations
- Government authorities or regulators where required by law
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
6. Transfer of Personal Data Overseas
Where we transfer personal data outside Singapore, we comply with Section 26 of the PDPA and ensure that the recipient provides a standard of protection comparable to that under the PDPA, whether through contractual arrangements or because the recipient is located in a country with comparable data protection laws.
This includes personal data sent to OpenAI for advertising measurement (see section 9). OpenAI is a company based in the United States and may process this data in the United States and in other countries outside Singapore. Our use of OpenAI's advertising and measurement tools is subject to OpenAI's terms for those tools, which include its Ad Tools Data Processing Addendum.
7. Retention of Personal Data
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law:
- Transaction and accounting records: 7 years (Income Tax Act / GST Act requirement)
- Customer account data: duration of the business relationship plus 2 years
- Marketing preference data: until consent is withdrawn
- Technical/log data: up to 12 months
When personal data is no longer required, we will securely destroy or anonymise it.
8. Protection of Personal Data
We have implemented reasonable security arrangements to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These include access controls, encryption of data in transit (TLS/HTTPS), and periodic security reviews. However, no transmission over the internet is completely secure; you provide data at your own risk.
9. Cookies
Our website uses cookies and similar tracking technologies. Categories:
- Strictly necessary: Required for shopping cart, session management, and security. Cannot be disabled.
- Analytics: Google Analytics (anonymised IP). Helps us understand site usage. You may opt out via browser settings or Google's opt-out tool.
- Advertising: OpenAI measurement pixel, used to measure which of our ChatGPT ads lead to enquiries. It is loaded, and your browser contacts OpenAI's servers, only for a visit that starts from one of our ChatGPT ads (the address of the page you land on carries an ad click identifier) or while your browser still holds the
__opprefcookie from such a visit; for any other visitor nothing is loaded from OpenAI. For such visits it uses two cookies:__obref(a random browser reference, kept for 365 days after it is created) and__oppref(the identifier of an ad click when your visit starts from one of our ads, kept for 30 days after it is written). On a visit that starts from one of our ChatGPT ads, our own website also sets a cookie,__adsrc, kept for 30 days, recording the name of the ad campaign, which ad you clicked and the page you first landed on. If you then submit a form, we save this with your enquiry and show it in the notification our sales team receives, so that we know which ad brought you to us. We do not send it to OpenAI. OpenAI's pixel may also detect contact details on our website, such as an email address or phone number that you type into a form, and send them to OpenAI in hashed form from your browser, in addition to what our own website reports below. When you submit a quote or enquiry form after such a visit, our website sends OpenAI a note that the form was submitted, with a reference number, the address of our website, your IP address, your browser's user agent, the values of the__obrefand__opprefcookies if present, and your email address and phone number in hashed (SHA-256) form. Hashed details can still be matched to a person, so we treat them as personal data. OpenAI's Ad Tools Data Processing Addendum describes OpenAI as an independent data controller for this data. You can block or delete these cookies in your browser settings; without the__opprefcookie, our website does not report a form you submit to OpenAI. To ask questions or withdraw consent, contact our DPO at sales@unitestinst.com or +65 6659 8878. If you withdraw consent, we will stop reporting your enquiries to OpenAI; this does not remove information OpenAI already holds. If you arrive from one of our ChatGPT ads again, your browser will still load OpenAI's pixel and it will still set its cookies, unless you block them. What stops is our own reporting of your enquiry to OpenAI; while OpenAI's pixel is loaded it may still detect and send contact details you type into a form, which we cannot switch off. We will respond in line with our obligations under the PDPA.
10. Your Rights Under the PDPA
Under the PDPA you have the following rights:
Right of Access (s.21)
Request a copy of the personal data we hold about you and information about how it has been used or disclosed in the past year.
Right of Correction (s.22)
Request correction of inaccurate, incomplete, or misleading personal data.
Right to Withdraw Consent (s.16)
Withdraw consent to the collection, use, or disclosure of your personal data at any time (subject to reasonable notice and legal or contractual restrictions).
Right to Data Portability (s.26H)
Request transmission of personal data you provided to us in a commonly used machine-readable format to another organisation, where technically feasible.
To exercise any of these rights, email our DPO at sales@unitestinst.com. We will respond within 30 days. We may charge a reasonable fee for access requests. We may decline requests where permitted by law.
11. Data Breach Notification
In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify the Personal Data Protection Commission (PDPC) within 3 calendar days of becoming aware of the breach, and notify affected individuals as required under the PDPA and the Personal Data Protection (Notification of Data Breaches) Regulations 2021.
12. Updates to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Material changes will be notified to you by email or a prominent notice on our website.
13. Contact & Feedback
For questions, access/correction requests, or complaints about how we handle your personal data:
Data Protection Officer
Unitest Instruments Pte Ltd
18 Boon Lay Way, #04-93 Tradehub 21, Singapore 609966
Email: sales@unitestinst.com
Tel: +65 6659 8878
If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.