Privacy policy.

1. Who we are

Modtronic Pte Ltd (“Modtronic”, “we”, “us” or “our”) operates an automotive workshop at 2 Kaki Bukit Avenue 2, Kaki Bukit Autohub, #02-17, Singapore 417921. This policy is intended to describe our practices under Singapore’s Personal Data Protection Act 2012 (“PDPA”).

2. Personal data we may collect

Depending on how you interact with us, we may collect:

• your name, telephone number, WhatsApp details and preferred contact method;
• your enquiry, appointment, quotation, invoice, payment and service history;
• vehicle information, including make, model, registration number, service details, diagnostic information and photographs;
• communications and materials you send to us, together with any consent or instructions relating to publication;
• technical and security data that our website and hosting providers may process, such as IP address, browser or device type, requested pages, timestamps and security events; and
• data described in section 6 when an authorised Modtronic administrator uses our Google Business Profile publishing tool.

We generally receive personal data directly from you, from an authorised representative, from workshop records created while providing services, or automatically through the systems used to operate and secure our website.

3. Why we use personal data

We may collect, use and disclose personal data for purposes including:

• responding to enquiries and arranging appointments;
• inspecting, diagnosing, quoting for, servicing and repairing vehicles;
• issuing and maintaining work orders, quotations, invoices and service records;
• communicating about work in progress, completed work, safety matters and follow-up support;
• publishing workshop cases and photographs where we have the required permission or another lawful basis;
• operating, protecting, troubleshooting and improving our website and connected business tools;
• publishing approved information to Modtronic’s Google Business Profile;
• meeting legal, regulatory, accounting, insurance and dispute-resolution requirements; and
• sending marketing messages where you have consented or where otherwise permitted by law, with an option to opt out.

We will notify you of the relevant purposes when required and will not use personal data for a materially different purpose without an appropriate basis.

4. Consent and withdrawal

Where consent is required, you may withdraw it by contacting us. We will explain any likely consequences and will stop the affected collection, use or disclosure within a reasonable time, unless continued handling is required or permitted by law. Withdrawal does not affect processing that was lawful before it took effect and may limit our ability to provide a requested service.

5. Workshop photographs and vehicle information

Workshop stories are prepared from real service records and photographs. We review them before publication and exclude customer contact, payment and other unnecessary identifying details. Vehicle registration numbers are concealed for public use unless the customer has provided documented consent for display or publication is otherwise authorised. Manufacturer names, vehicle badges and trademarks may remain visible to describe the vehicle and work accurately; this does not imply manufacturer endorsement.

6. Google Business Profile publishing tool

Our private publishing tool is used only by authorised Modtronic administrators to prepare, schedule, publish and monitor posts for Modtronic’s own Google Business Profile. When an administrator grants Google authorisation, the tool may process:

• Google OAuth authorisation and refresh tokens;
• the administrator’s authorised business-account and location identifiers;
• post text, images, call-to-action links and scheduling instructions selected for publication; and
• Google response, publication status and limited operational logs needed to detect errors and avoid duplicate posts.

We use this data only to operate the Modtronic publishing workflow. We do not sell Google user data, use it for third-party advertising, or allow unrelated third parties to use it. Authorisation credentials are retained only while the tool remains authorised and are protected as confidential access credentials. An administrator may revoke access through their Google Account permissions or ask us to remove the authorisation.

7. When we disclose personal data

We may disclose relevant data to service providers that support our workshop, website, communications, security, storage, professional advice and business publishing. These may include Cloudflare for hosting, security and automation; Google for Google Business Profile and OAuth services; and Meta or WhatsApp when you choose to communicate through those services. We may also disclose data to insurers, professional advisers, authorities or other parties where reasonably necessary or required by law.

Service providers are expected to handle data only for the agreed service and with appropriate safeguards. Third-party websites and services have their own privacy practices.

8. Overseas transfers

Some technology providers may process or store data outside Singapore. Where the PDPA applies to such a transfer, we take reasonable steps to ensure that the recipient provides a standard of protection comparable to the protection under the PDPA.

9. Protection and retention

We use reasonable administrative, technical and physical measures to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. No internet or storage system can be guaranteed completely secure.

We retain personal data only for as long as it is reasonably needed for the purpose for which it was collected, for legitimate business or legal needs, or as otherwise required by law. When it is no longer required, we will cease retention or remove the means by which it can be associated with particular individuals where reasonably practicable.

10. Cookies, logs and external links

Our site and security providers may use essential technologies, request logs or similar tools to deliver pages, prevent abuse and understand site performance. Your browser may allow you to block some cookies, although doing so may affect certain functions. Links to Google, Google Maps, Facebook, Instagram and WhatsApp take you to services operated under their own terms and privacy policies.

11. Access, correction and questions

You may ask about personal data in our possession or control, request access or correction, withdraw consent, or raise a privacy concern. We may need to verify your identity and may apply lawful exceptions or a reasonable fee where permitted.

12. Changes to this policy

We may update this policy to reflect changes to our services, systems or legal obligations. The latest version will be posted on this page with its effective date. More information about Singapore data-protection rights is available from the Personal Data Protection Commission.