Privacy Policy
Cheng Seng Electric Co Pte Ltd
Last updated: 24 August 2026
This policy explains what personal data we collect through this website and in the course of our work, why we collect it, who we share it with, how long we keep it, and what you can ask us to do about it. It is written to comply with the Personal Data Protection Act 2012 of Singapore (the “PDPA”).
“We”, “us” and “CSE” mean Cheng Seng Electric Co Pte Ltd, 167 Kaki Bukit Avenue 1, Shun Li Industrial Park, Singapore 416018. “Personal data” means data about an individual who can be identified from that data, or from that data together with other information we have or are likely to have access to.
1. What we collect, and when
You can read this website without telling us anything about yourself. We collect personal data when you choose to give it to us, and a limited amount automatically when you browse.
When you contact us or ask for a quotation
Our enquiry and quotation forms collect your name, company, email address, telephone number, the site or project address, and whatever you tell us in the message. If you send us drawings, single-line diagrams, load schedules or site photographs, we collect those too.
When you buy a smart meter from our online shop
We collect your name, billing and delivery address, email address, telephone number and your order history. We do not see or store your card details. Card payments are handled directly by our payment processor, Stripe, on their own systems. We receive only confirmation that a payment succeeded and the last four digits of the card.
When you ask to be told a product is back in stock
We collect your email address for that one notification.
When you download a guide or request GEMS information
We collect your name, company and email address so we can send you the material and follow up.
When your building uses GEMS
GEMS, our Green Energy Monitoring System, records electricity consumption at meter, circuit or tenant level for the premises it is installed in. Consumption data is data about a premises, not about a person — but where a meter is tied to a named tenant, or where we hold named user accounts for the portal, that combination is personal data and this policy applies to it.
When you send us a job application
If you email us a CV or an application, we collect what you send: your contact details, employment history, qualifications, licences and certifications.
Automatically, when you browse
We use Google Analytics 4, delivered through Google Tag Manager, which records the pages you view, roughly where in the world you are, your device and browser type, and the site that referred you. Our web server records IP addresses in its logs for security and troubleshooting. Our forms are protected by Google reCAPTCHA, which assesses whether a submission is automated. See section 8 for cookies.
2. Why we use it
- To answer your enquiry, survey the site and prepare a quotation.
- To carry out work you have engaged us for, including planning manpower, arranging access and site passes, and preparing the risk assessments, safe work procedures and namelists a project requires.
- To make licensed submissions and certifications. Our Licensed Electrical Workers, and the Professional Engineers we work with on lightning protection design, are required to identify the installation, the occupier and the responsible parties when submitting to the relevant authority.
- To process, deliver and support your order, including warranty and returns.
- To operate GEMS and produce the consumption, benchmarking and sustainability reporting you have asked for, including reporting used in BCA Green Mark submissions and tenant recharging.
- To meet our legal, tax, licensing and workplace-safety obligations, and to keep the records those obligations require.
- To keep this website secure and working, and to understand which pages people find useful.
- Where you have agreed to it, to send you information about our services.
We use your personal data only for the purposes above, or for purposes we tell you about at the time, or where the PDPA permits or requires us to.
3. Consent, and how to withdraw it
Where we rely on your consent, you can withdraw it at any time by writing to our Data Protection Officer (section 11). We will act on a withdrawal within a reasonable time and confirm when it is done.
Please note what withdrawal means in practice: if you withdraw consent for us to hold your contact details, we may no longer be able to answer your enquiry, service a warranty, or continue providing GEMS reporting. We will tell you plainly what the consequences are before we act. Withdrawing consent does not require us to delete records we are legally obliged to keep — see section 6.
Marketing calls and messages. Under Part 9 of the PDPA, the Do Not Call provisions, we do not send marketing messages or make marketing calls to a Singapore telephone number listed on the Do Not Call Registry unless we hold the clear and unambiguous consent the Act requires. You can tell us to stop at any time and we will.
4. Who we share it with
We do not sell personal data, and we do not share it for anyone else’s marketing.
We share it only where we need to:
- Service providers who work on our instructions — website hosting, email delivery, our payment processor (Stripe), analytics and security services (Google), and the couriers who deliver meters. They may use the data only to provide the service to us.
- Our own people — the engineers, project managers, Licensed Electrical Workers and administrative staff who need it to do the work. CSE uses a direct workforce and does not subcontract its electrical work, so your project information stays inside CSE.
- Professional Engineers and specialist consultants where a design requires PE endorsement, such as lightning protection design under SS 555.
- Your main contractor, consultant or building management where a project requires it — for example when a site demands a namelist, a permit to work, or worker certification records before allowing access.
- Government agencies and regulators where we are required or permitted to, including in connection with electrical installation licensing, building and fire safety approvals, and workplace safety and health obligations.
- Professional advisers, insurers and auditors, and where we are required to by law, a court, or a regulator.
5. Sending data outside Singapore
Some of the services above are operated from outside Singapore, so your personal data may be processed overseas. Where that happens we take reasonable steps, normally by contract with the provider, to satisfy ourselves that the data will be protected to a standard comparable to the PDPA, as the Transfer Limitation Obligation requires.
6. How long we keep it
We stop keeping personal data, or remove the means by which it can be linked to you, once it is no longer needed for any business or legal purpose. In practice:
- Enquiries that do not become work — kept while the opportunity is live and for a reasonable period afterwards, then removed.
- Quotations, contracts, orders and accounting records — kept for at least five years, which is the retention period Singapore tax law requires for business records, and longer where a warranty or a dispute is still open.
- Project, testing, certification and workplace-safety records — kept for as long as the relevant licensing, building control and workplace safety obligations require, which can be well beyond the life of the project.
- GEMS consumption data — kept for the term of your service agreement and any period we have agreed for historical benchmarking.
- Unsuccessful job applications — kept for up to twelve months in case a suitable role comes up, unless you ask us to remove them sooner.
- Website analytics — retained according to the retention setting in Google Analytics.
7. How we protect it
We make reasonable security arrangements to protect personal data in our care against unauthorised access, collection, use, disclosure, copying, modification or disposal. These include encrypted connections to this website, restricted and named access to our systems, two-factor authentication and activity logging on website administrator accounts, keeping software patched, and regular backups.
We should be honest about the limits: no website, no email system and no storage method is completely secure. We cannot guarantee absolute security, and information you send us by email travels over the public internet. If you need to send us something sensitive, ask us and we will arrange a better route.
8. Cookies
Cookies are small files a website stores in your browser. This site uses:
- Necessary cookies — to keep you logged in, to remember what is in your shopping cart, and to submit forms safely.
- Performance cookies — used by our caching system to serve pages faster.
- Analytics cookies — set by Google Analytics 4 through Google Tag Manager, to count visits and see which pages are used.
- Security cookies — set by Google reCAPTCHA, to tell real form submissions from automated ones.
You can block or delete cookies in your browser settings. If you block the necessary cookies, the shop and the forms on this site will not work properly.
9. Asking to see or correct your data
Under the PDPA you may ask us:
- for access — what personal data about you we hold or control, and how we have used or disclosed it in the year before your request; and
- for correction — to correct an error or omission in the personal data we hold about you.
Write to our Data Protection Officer at the address in section 11. Please tell us enough to let us find the data, and expect us to verify who you are before we release anything. We aim to respond within 30 days. If we cannot, we will tell you within 30 days when we will. There are limited situations in which the PDPA allows or requires us to refuse a request — for example where releasing the data would reveal personal data about someone else — and if we refuse we will tell you why. We may charge a reasonable fee for an access request, and if we intend to, we will tell you the amount and get your agreement before we do the work.
10. If something goes wrong
If a data breach occurs, we assess it promptly. Where a breach is likely to result in significant harm to affected individuals, or affects 500 or more individuals, we notify the Personal Data Protection Commission as soon as practicable and in any event no later than three calendar days after completing our assessment, and we notify the affected individuals, in line with the Data Breach Notification Obligation under the PDPA.
11. Our Data Protection Officer
We have appointed a Data Protection Officer, as the PDPA requires. All questions, consent withdrawals, access requests, correction requests and complaints about personal data should go to:
The Data Protection Officer
Cheng Seng Electric Co Pte Ltd
167 Kaki Bukit Avenue 1, Shun Li Industrial Park, Singapore 416018
Email: enquiry@chengseng.com.sg
Telephone: +65 6744 1133
12. Complaints
We would rather hear from you first, and we will try to put things right. If you are not satisfied with how we have handled your personal data, you may complain to the Personal Data Protection Commission of Singapore, which regulates compliance with the PDPA.
13. Other sites
This website links to other sites, including our payment processor and our suppliers. We are not responsible for their privacy practices. Read their policies before giving them your personal data.
14. Children
This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 13 without the consent of a parent or guardian. If you believe we hold such data, contact our Data Protection Officer and we will remove it.
15. Changes to this policy
We update this policy when our practices or the law change. The date at the top shows when it was last revised. Material changes will be posted on this page, and where the change affects how we use data you have already given us, we will tell you.