1. Introduction
This Privacy Policy explains how personal data is handled by ELECTRO CHEVAL (S) PTE. LTD. in the operation of its motor service workshop and its website. The workshop operates as a stable bay for electric motors: motors are booked in at an intake tag bay, documented on a bench sheet, checked in load test windows and winding review rounds, and returned at a collection sitting with a handover note. Personal data is collected at several points along that path, and this policy describes what is collected, why it is needed, how long it is kept and how it is protected.
The site and the workshop are operated by the developer Electro Cheval, a professional practice working in computer systems design and related technical services. References to the developer in this policy mean that practice and the people who build and maintain the website. The company name and the developer name are used in different contexts throughout this document, and both refer to the same responsible team for the purposes described below.
The company is ELECTRO CHEVAL (S) PTE. LTD., with its registered and operating address at 60 Kaki Bukit Place, #04-07 Eunos Techpark, Singapore 415979, Singapore (SG). The company can be reached by email at assistance@electrocheval.com and by telephone at +12232423135 during the business hours published on the contact page.
This policy is written in plain English so that clients, visitors and workshop staff can understand it without legal training. Where a term has a specific meaning, that meaning is explained in the paragraph where it first appears. If any part of this policy is unclear, please contact the company using the details in Section 20 and a member of the team will explain it.
The policy is intended to meet the requirements of the Personal Data Protection Act of Singapore and to reflect good practice in the handling of workshop records. It also describes the commitments the company makes to clients in other jurisdictions where those commitments are stricter than local law. Where a specific legal requirement applies to a particular client, the company will apply that requirement in addition to the practices described here.
2. Scope of This Policy
This policy covers personal data collected through the website, through telephone and email contact, through the intake tag bay, through bench sheet work, through load test windows, through winding review rounds, and through collection sittings. It applies to clients, their employees and agents, visitors to the workshop, suppliers, contractors, and anyone who contacts the company for any reason.
The policy does not cover personal data that a client collects about its own staff or customers. The company processes motor records on behalf of a client in some cases, and in those cases the client remains responsible for the personal data it supplies to the workshop. Where the company acts as a processor for a client, the arrangements between the parties are set out in the relevant service agreement rather than in this policy.
The policy does not apply to third party websites that may be reached through links on this site. The company does not control those websites and cannot be responsible for their privacy practices. Visitors are encouraged to read the privacy notices of any third party site before providing personal data to it.
The policy also does not apply to information that is lawfully in the public domain, to information that the company receives from public registers, or to aggregated information that cannot reasonably be linked to an individual. Such information may be used without restriction, subject to any applicable law.
3. Who Controls Personal Data
ELECTRO CHEVAL (S) PTE. LTD. is the organisation responsible for the personal data described in this policy. The company determines why the data is collected and how it is used. The registered address is 60 Kaki Bukit Place, #04-07 Eunos Techpark, Singapore 415979, Singapore (SG).
The developer Electro Cheval maintains the website and handles technical enquiries about the online contact form. The developer works under the direction of the company and does not use personal data for any independent purpose. Where the developer receives a request relating to personal data, it forwards the request to the company so that it can be answered in a consistent way.
The company has appointed a privacy contact who is responsible for responding to questions and requests relating to personal data. The privacy contact can be reached at assistance@electrocheval.com or by telephone at +12232423135. Requests are logged and acknowledged in writing, and the company aims to respond within the time limits described in Section 14.
Where the company shares personal data with a service provider, the service provider is selected with care and is bound by contractual obligations to protect the data and to use it only for the purpose for which it was shared. The company remains accountable for personal data that is transferred to a service provider under its instruction.
4. Personal Data We Collect
The company collects personal data that is needed to carry out motor service work and to communicate with clients. The categories of data collected include identity data, contact data, business data, technical motor data, and correspondence data. In most cases the data is supplied directly by the client, but some data is generated by the workshop itself.
Identity data includes the name of the client contact, the job title, and the name of the organisation that owns the motor. Contact data includes the email address, the telephone number, and the delivery or collection address of the motor. Business data includes the client reference number, purchase order details, and billing information where an invoice is required.
Technical motor data includes the frame size, serial number, winding readings, load test observations, and any photographs taken at intake. This data usually relates to a machine rather than a person, but where a serial number or tag number is linked to a named contact, the combined record is treated as personal data.
Correspondence data includes emails, telephone notes, and messages sent through the website contact form. Where a client writes to the company with a question or a complaint, the message and the reply are retained as part of the client file.
The company does not intentionally collect sensitive personal data such as health information, biometric data, or data about religious beliefs. Clients are asked not to include such data in messages to the workshop. If sensitive data is received by accident, it is removed from the record and handled in line with the retention rules in Section 11.
5. Intake Tag and Workshop Records
The intake tag is the anchor of every workshop record. A tag is written when the motor arrives and carries a unique number, the client reference, the frame details, and a short description of the fault. The tag number is the key that connects the bench sheet, the handover note, the photographs, and the correspondence about that motor.
Bench sheets are working documents. They record readings taken at the trestle, movements between stations, parts removed and replaced, and observations made during winding review rounds. A bench sheet may include the initials of the technician who wrote a line, the time a reading was taken, and a note of the person who authorised a movement. These details are used to keep the work traceable and are retained with the tag.
Handover notes are written from the completed bench sheet at the handover note desk. A handover note is intended to be read by the client and may therefore include the name of the client contact, a summary of the work, and a list of things to watch in future operation. The note is shared with the client at the collection sitting and a copy is sent by email.
Workshop records may include images of a motor and its installation. Images are taken to document condition at intake and to support the bench sheet. Where an image happens to include a person, that image is treated as personal data and is stored with the same controls as the rest of the record.
Records are stored electronically and, where a client requires a paper copy, in a locked cabinet at the workshop. The company keeps the electronic and paper versions aligned so that a single tag number retrieves a complete file.
6. How We Use Personal Data
The company uses personal data to deliver motor service work, to communicate about bookings, to prepare intake tags, to write bench sheets and handover notes, to issue invoices, and to answer questions after a collection sitting. Each use is tied to a purpose that a reasonable client would expect when booking a motor into a workshop.
Personal data is used to confirm a booking and to allocate a free trestle. It is used to contact the client if a bench sheet raises a question that the intake tag did not answer. It is used to schedule a load test window and to invite the client to a collection sitting. It is also used to send the handover note and to respond to later enquiries about the same tag number.
The company uses correspondence data to improve the way it communicates. Where several clients ask the same question, the company may add that question to the frequently asked questions on the contact page, without identifying any individual. The original messages remain in the client file and are not republished.
Billing data is used to raise invoices and to reconcile payments. Where a client requires a tax invoice, the company records the billing entity and the purchase order reference. Billing data is retained for as long as accounting records must be kept under applicable law.
The company does not use personal data to make automated decisions that produce legal effects for an individual. Decisions about a motor are made by technicians on the basis of the bench sheet, and a client can always ask to speak to the technician who made an entry on that sheet.
7. Legal Basis for Processing
The company processes personal data on the basis of consent, contract, legal obligation, and legitimate interest. Consent is obtained where the company wishes to send marketing messages or to use an image for a purpose beyond the workshop record. Consent is recorded and can be withdrawn at any time.
Contractual processing covers the core work: the intake tag, the bench sheet, the load test window, the handover note, and the collection sitting are all steps in delivering the service that the client has booked. Without this data the company could not carry out the work or document it.
Legal obligation covers accounting, tax, and record keeping. Where a statute requires the company to keep a record for a set period, the company retains that record even if the client asks for deletion, and explains the reason for the retention.
Legitimate interest covers the routine administration of the workshop, including the security of the premises, the prevention of fraud, and the improvement of the website. Before relying on legitimate interest, the company considers whether the processing would be unexpected or intrusive, and it offers an objection route where the balance could reasonably go the other way.
Where a client is located in a jurisdiction that requires a different legal basis, the company will confirm the applicable basis in writing before processing begins. This is usually handled in the service agreement that accompanies a larger booking.
8. Disclosure to Third Parties
The company shares personal data only where it is necessary to deliver the service or where the law requires it. Typical recipients include couriers, payment processors, accounting service providers, and the hosting and email providers that support the website and the workshop systems. Each recipient receives only the data needed for its role.
Couriers receive the collection and delivery address and the contact name for the motor. Payment processors receive billing details and invoice references but not the technical content of a bench sheet. Accounting service providers receive invoice and payment records for reconciliation. Hosting and email providers receive technical data generated by the website and the messages that pass through the mail system.
The company does not sell personal data and does not rent mailing lists. Personal data is not shared with advertisers, data brokers, or unrelated third parties. Where a business partner is involved in a joint project, the client is told before any data is shared and is given the name of the partner.
The company may disclose personal data where it is required by law, by a court order, or by a regulator with the authority to demand it. Where disclosure is permitted to be disclosed, the company tells the client unless doing so would be unlawful or would prejudice an investigation.
If the company is involved in a merger, acquisition, or transfer of the workshop business, personal data may be transferred to the successor organisation. The successor is required to honour this policy, and clients are notified before any such transfer takes effect.
9. Cross Border Transfers
The company is based in Singapore and stores most workshop records in Singapore. Some service providers, such as email and hosting providers, may process data in other countries. Where this happens, the company takes steps to ensure that the data remains protected to a standard comparable to the one described in this policy.
Before transferring personal data to another country, the company assesses the provider, the legal environment, and the safeguards available. Contractual clauses, provider certifications, and operational controls are used as appropriate to the sensitivity of the data.
Clients who require data to remain in a specific country can tell the company at the time of booking. The company will confirm whether the request can be met before the intake tag is written, and will decline the work if it cannot meet the requirement rather than proceed on terms the client has not accepted.
Cross border transfers are reviewed each year as part of the policy review described in Section 19. Where a provider changes its data location, the company is notified and repeats the assessment before the change is accepted.
11. Data Retention
The company retains personal data only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires. Retention periods are set by record type so that the workshop does not keep data out of habit.
Intake tags and bench sheets are kept for as long as the motor is in service with the client, and for a further period after the collection sitting in case the client returns with a related fault. The further period is set so that a history is available for the second visit without keeping inactive records indefinitely.
Handover notes and their covering emails are kept for the same period as the related bench sheet. Correspondence that does not result in a booking is kept for a short period and then deleted, unless the client asks for it to be kept or the correspondence relates to a complaint or a legal matter.
Billing records are kept for the period required by tax and accounting rules. When that period ends, the records are securely destroyed unless a legal hold applies. Legal holds override the usual retention period and are reviewed when the matter closes.
Where a client asks for deletion of data that the company is not required to keep, the company deletes or anonymises the data and confirms the action in writing. Anonymised data may be kept for statistical purposes because it no longer identifies a person.
12. Security Measures
The company protects personal data through a combination of physical, technical, and organisational controls. The workshop is a secure premises with controlled access, and paper records are kept in a locked cabinet when the bay is closed. Electronic records are held in systems that require named accounts and strong passwords.
Access to personal data is limited to the people who need it to do their work. Technicians can read the bench sheets for the motors they handle, while the office team can read the client contact details needed for bookings and billing. Access rights are reviewed when a person joins or leaves the team and when a role changes.
Systems are kept up to date and are backed up regularly. Backups are stored separately from the live systems and are tested from time to time to ensure that a restore would work when needed. Where a provider hosts part of the system, the company confirms that the provider applies equivalent controls.
The company trains its team on the handling of personal data, on recognising suspicious messages, and on reporting concerns promptly. Team members are bound by confidentiality obligations that continue after they leave the company.
No system is perfectly secure. If a security incident occurs, the company follows the response plan described in Section 18 and notifies affected clients and regulators where the law requires it.
13. Your Rights and Choices
Individuals have rights over the personal data that the company holds about them. These rights include the right to be informed about how data is used, the right to request access, the right to request correction, the right to withdraw consent, and the right to object to certain kinds of processing. The company honours these rights in line with applicable law.
To exercise a right, contact the privacy contact using the details in Section 20. The request should say what right is being exercised and should identify the records concerned. Where a request relates to a specific motor, the tag number is the quickest way to locate the file.
The company will not charge a fee for a routine request unless the law allows a reasonable fee and the request is manifestly unfounded or excessive. Where a fee applies, the company explains the reason before any work is done.
A person who believes that personal data is being processed unlawfully may lodge a complaint with the company. The company will investigate the complaint and respond in writing. Where the complaint cannot be resolved, the person may also contact the relevant data protection authority in their jurisdiction.
These rights are not absolute. Where the law requires the company to keep a record, or where a record must be kept to defend a legal claim, the company may decline a deletion request and will explain the reason.
14. Access and Correction Requests
An access request asks the company to confirm whether personal data is held and to provide a copy. A correction request asks the company to correct data that is inaccurate or incomplete. Both requests can be sent to assistance@electrocheval.com or made by telephone at +12232423135.
The company acknowledges every request within a short period and aims to respond in full within thirty days. Where a request is complex, the company explains why more time is needed and provides an estimated completion date.
Before providing access, the company takes reasonable steps to confirm the identity of the person making the request. This protects the client file from being disclosed to someone who is not entitled to see it. Additional verification may be needed where the request covers records for more than one motor.
Where a correction is made, the company notes the change on the bench sheet and handover note so that the file shows what was corrected and when. The client is told which records were changed and whether the change affects any earlier note.
Where the company declines a request, it explains the legal reason and sets out the route for a review. A person who is not satisfied with the answer may complain to the relevant authority.
15. Privacy for Children
The workshop is a professional and industrial environment, and the website is intended for business visitors, client contacts, and maintenance professionals. The company does not knowingly collect personal data from children, and the site is not directed to children.
Where a young person visits the workshop for an educational purpose, any personal data collected is handled with care and is limited to what is needed for the visit. A parent or guardian is asked for consent where the law requires it.
If the company learns that it has collected personal data from a child without the required consent, it will delete the data promptly. A parent or guardian who believes that such data has been collected can contact the privacy contact to request deletion.
16. Marketing Communications
The company sends service updates and workshop notices only to people who have agreed to receive them. Consent is recorded with the date and the channel, and every message includes a clear way to opt out.
Opting out of marketing does not stop transactional messages. A client will still receive messages about a booking, an intake tag, a load test window, a handover note, or a collection sitting, because those messages are part of the service.
The company does not share contact details for marketing purposes. If a client changes role or moves to a different organisation, the company updates the contact record on request and stops sending messages to the old address.
Unsubscribe requests are processed promptly, and the company maintains a suppression list so that a person who has opted out is not contacted again for marketing purposes.
17. Third Party Links and Services
The website may contain links to third party sites, including mapping services, payment pages, and professional directories. These links are provided for convenience, and the company does not control the content or the privacy practices of the sites they lead to.
When a visitor follows a third party link, the privacy notice of that site applies. The company encourages visitors to read that notice before providing personal data. The company is not responsible for data that a visitor provides directly to a third party.
Where an embedded service is used, such as a map on the contact page, the service is configured so that it loads only when needed. The company does not embed services that track a visitor across unrelated sites.
If a third party provider changes its practices in a way that affects the company, the company reviews the arrangement and, where necessary, replaces the provider or updates this policy.
18. Data Breach Response
The company has a response plan for security incidents that affect personal data. The plan is designed to contain the incident, assess the risk, notify affected people, and prevent a repeat.
When an incident is detected, the responding team records what happened, how it was discovered, and which records are affected. Access is restricted while the investigation is under way, and the privacy contact is informed without delay.
Where the incident is likely to result in a risk to individuals, the company notifies the affected clients and the relevant regulator as required by law. The notification explains what happened, what data was involved, what has been done, and what the client should do to protect itself.
After the incident is contained, the company reviews the cause and updates its controls. The review is documented, and the findings are shared with the team so that lessons are applied across the workshop.
19. Changes to This Policy
The company reviews this policy each year and whenever a significant change happens in the workshop or in the systems that support it. The effective date at the top of the page shows when the current version took effect.
Where a change materially affects how personal data is used, the company will give notice before the change takes effect. Notice is given by email to clients with an active booking and by a notice on the website.
Historical versions of the policy are kept so that a client can see what applied at the time of a booking. A client who needs a copy of an earlier version can request it from the privacy contact.
Continuing to use the website or to book a motor after a change takes effect means that the updated policy applies. A client who does not agree with a change can contact the company to discuss the effect on an active booking.
20. Contact and Complaints
Questions about this policy, requests relating to personal data, and complaints should be sent to ELECTRO CHEVAL (S) PTE. LTD. at assistance@electrocheval.com or by telephone at +12232423135. The registered address is 60 Kaki Bukit Place, #04-07 Eunos Techpark, Singapore 415979, Singapore (SG).
The company aims to acknowledge every message within two business days and to provide a substantive response within thirty days. Where a response needs more time, the company will explain why and give an expected date.
A person who is not satisfied with the response may ask for the matter to be reviewed by a senior member of the team. The review is documented, and the outcome is communicated in writing.
If the matter remains unresolved, the person may contact the relevant data protection authority. The company will cooperate with any regulator that investigates a complaint.
This policy is provided in English, and all communication about personal data is conducted in English. Where a translation is offered for convenience, the English version prevails.