Compact Metal Industries Pte Ltd. UEN 197500009H. 22 Pioneer Crescent #06-07, West Park BizCentral, Singapore 628556.
vue+ is our service yard window range. Our assistant on Telegram is called Michelle. She is an AI, and she says so. Our website has a short form. If you fill it in, it passes your details to Michelle so you don't have to type them again.
We are responsible for your personal data under the Personal Data Protection Act 2012.
When you message us. Telegram gives us your account name, your username if you have one, and a chat number. We keep what you type, because it is a conversation.
While you ask questions. The estate you tell us about. Which of the six colours you say your block looks like.
If you use the form on our website. The estate and block you pick, your unit number and your mobile number, and that you agreed to how we use them. Like most websites, our server also keeps a short log of visits: the internet address your device connects from and the pages it asked for.
If you order. Your postal code and unit number, or your block number if your estate is too new to have a postal code yet. A phone number. Whether you own the flat. What you ordered, what you paid, and when.
If you send a photo or a file. We keep it and pass it to a colleague. Michelle cannot look at pictures herself.
We never ask for your NRIC or FIN. The HDB permit needs the flat owner's identity. Our surveyor takes that at your flat, on paper — not here.
We never ask for card numbers, bank details or passwords. We never see them. You pay on HitPay's own page. If anyone asks you for these in this chat, it is not us.
| What | Why |
|---|---|
| Your messages | To answer you. And so a colleague can see what was said |
| Estate and colour | To tell you what your block is set to, and brief the surveyor |
| Postal code or block, and unit | To check we can do your building. To schedule the survey and the install. It goes on your tax invoice |
| Phone number | To call you on the day, usually from downstairs, and to set up your payments |
| Flat owner question | The HDB permit needs the owner involved |
| Order and payment records | To do the job. And because tax law says we must keep them |
| Website form details | To hand you to Michelle with your details already filled in, so you don't type them twice |
| Website visit log | To keep the website working and stop people abusing the form |
We do not build a profile of you. We do not sell your data.
Ban Hong Aluminium and Construction Pte Ltd. They install your window and apply for your HDB permit. They get your address, your phone number and your appointment. Your contract, your payment and your warranty stay with us.
HitPay. They take your payment and hold the payment record. Their own checkout page may ask for your name and email, for their receipt — we do not ask for either there. If you type a name, we pick it up too, so it can go on your invoice. We never receive the email. We also send them the name on your Telegram account and your mobile number and, if your flat has a postal code, your address (block, street, unit and postal code), as part of setting up the payment request. We are told that you paid, how, and a reference number. We never see your card details.
Singapore Land Authority (OneMap). We send your postal code to look up the block and street. Only the postal code. No name, no unit, no order number.
Telegram. The chat happens on their app, so it passes through their systems and is stored there. Their privacy policy applies to that part. If this matters to you, call us instead.
Our AI provider. Michelle's replies are written by an AI service based in the United States. What you type in conversation goes to them so a reply can be written, along with the recent messages so she can follow what you are asking.
We do not send them your address, your phone number or your payment details. When we ask for those, your answer is handled by our own system and goes straight to your order.
We also try to strip out an address or phone number if you happen to type one in the middle of a chat. That is a filter, not a promise — if it matters to you, give us those details only when we ask for them.
Want to know who they are? Send /human, or contact our Data Protection Officer below. Michelle cannot answer that one herself — a colleague will.
Our accountant. Invoices and payment records, for tax filing.
Nobody else, unless the law makes us.
Two of the above are outside Singapore: Telegram, and our AI provider.
The law requires us to make sure data sent overseas is protected to a standard comparable to the PDPA. We have arrangements in place for that.
HitPay, OneMap and Ban Hong are in Singapore. Your order records sit on a system we control, in Singapore.
We keep things as long as the law requires, and as long as we need them to do what we promised. Not longer.
Your order, invoice and payment records — eleven years.
Tax law sets the floor at five years. It is counted from the end of our financial year, not from your order, so it is closer to six in practice.
Your warranty is what really decides it. It runs ten years. We cannot honour a warranty, or defend it, without the record of what we made, in what colour, and where we fitted it. So we keep these for ten years after your installation, plus one.
We cannot delete them before then, even if you ask.
Your address — the same eleven years. It is printed on your tax invoice, and we must keep that invoice. We could take it off our order screen sooner. We would rather tell you the truth: it is in a document we have to keep.
Your phone number — one year after installation. It is on nothing we must keep. It is there so we can call you on the day. Then it goes.
If you start an order and never pay. We close it a week after your quotation runs out — about three weeks in all. We delete the postal code, unit and phone number. Nothing was invoiced, so nothing has to stay. We keep it that long, and not longer, so that your order is still there if you come back while the price we quoted you still stands.
If you fill in the form on our website but never open the chat — 24 hours. We delete what you sent within 24 hours, and it never goes into our backups.
If you open the chat but never order. The details from the form are deleted after three weeks, the same as an order that is never paid.
Our website's visit log — 30 days. Then it goes.
Conversations — two years from your last message. No law requires these. We keep them so a colleague can see the history when you come back, and so a warranty question is easier to answer. Then they go.
One exception. If you spoke to a colleague rather than to Michelle, and you have an order with us, we keep that conversation for as long as we keep the order — eleven years. A conversation with a person is where something unusual gets agreed, and if there is ever a question about your window years from now, that is the part worth having.
Ask what we hold, or who handles it. Send /human, or contact our Data Protection Officer below. We will reply as soon as we can. We may ask you to confirm who you are first.
Michelle does not answer questions about herself or about who processes your data. She will pass you to a colleague who does.
Ask us to correct it. Same way. Tell us what is wrong.
Withdraw your consent. Send /human and say so. We will stop using your data, apart from what the law makes us keep.
If you have an order running, this means we cannot survey, schedule or install it. The deposit terms you agreed still apply.
Or just stop. Block the bot and the conversation ends. Records we must keep will still be there.
We do not market to our customers. Not by phone, not by SMS, not in this chat. Everything we send is about your own order.
Our system cannot message customers in bulk at all. There is no way to send you a promotion even if someone decided to. That is deliberate, not an oversight.
We do not sell your details, and we do not pass them to anyone who wants to sell you something.
Only the colleagues who need it can see your data. Your conversation goes to a private company workspace, not a public channel.
Order records are on a system we control in Singapore, and they are backed up. We never store payment details at all.
If something goes wrong and your data is likely to cause you serious harm, we will tell you. We will also tell the Personal Data Protection Commission, within the time the law allows.
Michelle is an AI. She handles the common questions and hands over when you ask. Send /human at any time.
You never have to use her. Call 6863 3268, Monday to Friday 9am to 6pm, and Saturday 9am to 1pm. A person will help you.
This policy is in English. That is the version that counts, because a translated term is a different term.
Michelle will explain any part of it in Mandarin, Malay, Tamil or Singlish if you ask. So will a colleague on /human. If something here is unclear, ask — that is quicker than guessing.
Our appointed Data Protection Officer:
Data Protection Officer
dpo@compact.com.sg
Compact Metal Industries Pte Ltd, 22 Pioneer Crescent #06-07, West Park BizCentral, Singapore 628556
If we change this, we post the new version and update the date at the top. If the change matters, Michelle will say so in the chat.