Privacy Policy

Car Spray Painting (“we”, “us”) respects your privacy. This policy explains how we collect, use, disclose and protect your personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA).

1. Personal data we collect

We only collect personal data that is reasonably necessary for our services, including:

• Contact details — name, phone number, WhatsApp number and email address.
• Vehicle details — car make and model, vehicle registration number, and photos of your vehicle and its damage.
• Insurance & accident details — insurer, policy number, accident reports and related documents, when you ask us to help with a claim.
• Payment records — invoices and payment references (we do not store card numbers).
• Website usage data — pages visited, device and browser type, approximate location and how you arrived at our site, collected through cookies and analytics tools (see section 7).

We do not ask for your NRIC number unless it is required by law or by your insurer for a claim.

2. How we collect it

We collect personal data when you fill in our quote or contact form, message or call us (including on WhatsApp), visit our workshop, ask us to handle an insurance claim, or use our website.

3. Why we use your personal data

• To respond to enquiries and prepare quotes.
• To carry out repair, spray painting and related services on your vehicle.
• To process insurance claims with your insurer, surveyors and other parties involved.
• To schedule appointments, send job updates and arrange collection.
• To issue invoices, handle warranty claims and keep business records.
• To improve our website and measure our advertising (e.g. Google Ads).
• To send you service reminders or promotions — only if you have agreed, and you can opt out at any time.
• To comply with legal and regulatory requirements.

4. Consent

By submitting our forms or contacting us, you consent to us collecting, using and disclosing your personal data for the purposes above. You may withdraw your consent at any time by contacting our Data Protection Officer (section 11). We will tell you the likely consequences of withdrawing (for example, we may be unable to continue an insurance claim) and will stop processing within a reasonable time.

We will not send marketing messages to Singapore telephone numbers registered with the Do Not Call (DNC) Registry unless you have given us clear and unambiguous consent.

5. Who we share it with

We do not sell your personal data. We only disclose it where needed for the purposes above, to:

• your insurer, the other party’s insurer, loss adjusters and surveyors (for claims);
• parts suppliers and towing providers involved in your repair;
• service providers who help run our business — e.g. our website host, form service, email, WhatsApp (Meta), and Google Analytics / Google Ads — under obligations to protect your data;
• government or law enforcement authorities where required by law.

6. Transfers outside Singapore

Some service providers (such as Google and Meta) may store data outside Singapore. Where this happens, we take reasonable steps to ensure the recipient protects your data to a standard comparable to the PDPA.

7. Cookies and analytics

Our website uses cookies and similar technologies, including Google Tag Manager, Google Analytics 4 and Google Ads conversion tracking, to understand how visitors use the site and to measure our ads. These tools collect information such as pages viewed and clicks on our call and WhatsApp buttons. They do not tell us your name. You can block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on.

Our site also shows an embedded Google Map. Google may set its own cookies when the map loads.

8. How we protect your data

We make reasonable security arrangements to protect your personal data from unauthorised access, collection, use, disclosure, copying, modification or disposal. This includes password-protected systems, restricting access to staff who need it, and secure (HTTPS) transmission on our website.

If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission (PDPC) as required by the PDPA.

9. How long we keep it

We keep personal data only as long as needed for the purposes it was collected or as required by law (for example, business and tax records, typically up to 5 years, and for the duration of your paintwork warranty). Quote enquiries that do not proceed are deleted within 12 months.

10. Accessing and correcting your data

You may ask us for a copy of the personal data we hold about you, how it has been used or disclosed in the past year, or ask us to correct it. Contact our Data Protection Officer. We will respond within 30 days; if we need longer, we will let you know. A reasonable fee may apply for access requests.

11. Contact our Data Protection Officer

Data Protection Officer
Car Spray Painting
Email: hello@carspraypaint.sg
Phone: +65 9620 7078

If you are not satisfied with our response, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with the “last updated” date above.