How we handle personal data.

1. Scope and organisation

This Privacy Policy applies to personal data collected through glorwin.com and related business communications. The organisation responsible for the website is Glorwin Electromechanical Co., Ltd., trading under the GLORWIN brand.

Personal data means information about an identifiable individual. Business information that identifies an individual, such as a named business email address, may also be personal data.

2. Personal data we collect

When you submit a product inquiry, we may collect your name, business email address, company, target market, product division and the information included in your message. Only your name, email address, message and privacy acknowledgement are required.

Our server may also process limited technical and security information, such as request time, IP address, browser information and security logs. A one-way hash derived from the IP address may be retained temporarily to prevent repeated or automated submissions.

Please do not submit identification numbers, payment-card information, medical data or other sensitive personal data through the inquiry form.

3. Purposes, notification and consent

We collect, use and disclose inquiry information only for reasonable purposes connected with your request, including:

• responding to product, quotation, sample or cooperation inquiries;
• understanding product requirements and communicating relevant information;
• maintaining business correspondence and records where reasonably necessary;
• protecting the website and preventing fraud, spam and abuse; and
• meeting applicable legal, regulatory or dispute-resolution requirements.

By selecting the privacy acknowledgement and submitting the form, you consent to the collection, use and disclosure of the submitted information for these purposes. We do not use an inquiry as consent for unrelated promotional email. Any future marketing subscription will require a separate, optional choice.

4. Disclosure, service providers and overseas transfers

We may disclose personal data only where reasonably necessary to personnel handling your inquiry, affiliated operations involved in the relevant product request, and service providers supporting website hosting, email delivery, security, backup or professional advice. We may also disclose information where required or permitted by law.

Website and email service providers, or personnel responding to an inquiry, may process personal data outside Singapore. Where Singapore's PDPA applies to an overseas transfer, we will take appropriate steps to ensure that the transferred personal data receives a standard of protection comparable to that required under the PDPA.

We do not sell personal data.

5. Retention

Inquiry emails are normally retained for up to 24 months after the last substantive interaction, unless a longer period is reasonably required for an active business relationship, contract, warranty, dispute, security investigation or legal obligation. When personal data is no longer required for a business or legal purpose, we will cease retaining it or remove the means by which it can be associated with an individual.

The website is designed not to store the contents of inquiry submissions in the WordPress database. A submitted inquiry is delivered to our business email system, where the retention rule above applies. Short-lived anti-abuse records may be retained by the website.

6. Security, cookies and data incidents

We use reasonable administrative and technical measures intended to protect personal data, including encrypted HTTPS transmission, authenticated email delivery, restricted server access, input validation, anti-abuse controls, security monitoring and protected backups. No internet transmission or storage method is completely secure.

The public website currently does not use advertising or analytics cookies. WordPress may use strictly necessary cookies for administrators who sign in. If analytics, advertising or additional third-party tools are introduced, this policy and any required consent controls will be updated before those tools are enabled.

If a data incident occurs, we will assess it and make notifications to the Personal Data Protection Commission and affected individuals where required by applicable law.

7. Access, correction and withdrawal of consent

You may contact us to request access to personal data in our possession or control, request correction of an error or omission, ask how your personal data was used or disclosed, or withdraw consent with reasonable notice. Legal exceptions may apply, and we may need to verify your identity before acting on a request.

Withdrawing consent will not affect processing already carried out lawfully, but it may prevent us from continuing to respond to an inquiry or provide a requested service.

This business-to-business website is not directed to children, and we do not knowingly seek personal data from children.

8. Privacy and data protection contact

For privacy questions, complaints, access or correction requests, or withdrawal of consent, contact:

We may update this policy to reflect changes in our practices, services or legal obligations. The effective date shown above identifies the current version.