Privacy Policy

This Privacy Policy explains how WatchGrid Pro ("we", "us", or "our") handles personal data when you visit watchgridpro.life, submit an enquiry about CCTV or video surveillance services, communicate with us by email or phone, or engage us for site surveys, installation, and maintenance at your property in Singapore. We process data in accordance with the Personal Data Protection Act 2012 (PDPA) and guidance issued by the Personal Data Protection Commission (PDPC).

1. Data controller

The organisation responsible for personal data processed through this website and our client operations is:

Privacy-related questions may be sent to the email address above. We aim to respond within thirty calendar days.

2. Scope

This policy applies to personal data collected through:

• Pages hosted at watchgridpro.life and its subpaths;
• The contact and enquiry form on contact.php;
• Email and telephone communication initiated via the site or sent directly to our office;
• On-site surveys, installation visits, and maintenance appointments at client premises;
• Optional functional features such as embedded Google Maps on the contact page, loaded only after you accept functional cookies.

It does not govern third-party websites linked from our content, camera manufacturer cloud portals, or mobile apps configured on your NVR — those services operate under their own privacy terms.

2a. Surveillance-specific notice

WatchGrid Pro supplies and installs equipment capable of recording video and, in some configurations, audio. Laws governing workplace monitoring, residential recording, and biometrics may apply depending on your deployment. We recommend that business clients consult HR and legal advisers before enabling audio recording or facial recognition features. Our Website and quotations describe technical capabilities; lawful use remains the client's responsibility after handover.

3. Personal data we collect

3.1 Information you provide

When you enquire about surveillance systems or engage our services, we may collect:

• Your name, job title, and contact details (email, phone);
• Property address, postal code, and property type (HDB, condo, commercial, industrial);
• Descriptions of your security requirements, existing equipment, and budget expectations;
• Floor plans, photographs, or site access instructions you voluntarily share;
• Billing and payment information for completed projects (handled through agreed invoicing channels, not via the public website form);
• Correspondence records including emails, messages, and call notes related to your project.

We do not request passwords, Singpass credentials, payment card numbers, or CVV codes through the public contact form.

3.2 Data collected during installation

When we install CCTV at your premises, recorded video may incidentally capture identifiable individuals in camera fields of view. You, as the property owner or authorised representative, are responsible for lawful deployment under the PDPA and for displaying appropriate notices where required. We provide guidance on camera placement but do not operate your cameras after handover unless under a separate maintenance agreement.

3.3 Technical data

Our hosting provider may process server logs containing IP addresses, browser type, referring URLs, timestamps, and requested pages. These logs support security monitoring and error diagnosis. We do not use server logs to build advertising profiles or sell data to brokers.

3.4 Cookies and local storage

We use minimal cookies and browser storage. Your cookie consent choice is stored locally. Google Maps may set third-party cookies only after you accept functional cookies. See our Cookie Policy for details. We do not deploy advertising pixels on this website.

4. How we use personal data

We process personal data for the following purposes:

• Responding to enquiries: Reviewing your message, scheduling site surveys, and preparing quotations;
• Delivering services: Installing, configuring, and maintaining CCTV systems you have engaged us to provide;
• Project administration: Invoicing, appointment scheduling, warranty records, and equipment serial tracking;
• Legal compliance: Retaining records where required by law or to establish, exercise, or defend legal claims;
• Site security: Detecting spam submissions, abuse, and technical faults on our website.

We do not sell personal data. We do not add enquiry contacts to unrelated marketing lists. Service updates are sent only in connection with an active project or where you have asked to receive maintenance reminders.

Marketing communications, if any, are sent infrequently and relate directly to surveillance products or maintenance plans compatible with equipment we installed. You may opt out of non-essential marketing email at any time using the unsubscribe link or by writing to our privacy contact.

5. Legal bases under the PDPA

We rely on:

• Consent — for optional functional cookies (Google Maps) and where you explicitly agree to specific processing;
• Legitimate interests — operating a surveillance integration business, responding to enquiries, maintaining website security, and improving our services;
• Contractual necessity — where processing is required to deliver services you have engaged;
• Legal obligation — where retention or disclosure is required by court order, regulator, or applicable law.

You may withdraw consent for optional processing without affecting essential communication about an active enquiry. Withdrawal does not invalidate processing that was lawful when collected.

6. Sharing and disclosure

We may share personal data with:

• Technicians and project staff who need access to perform surveys and installations;
• Hosting and email infrastructure providers under data processing arrangements;
• Equipment suppliers where warranty registration requires client contact details (only with your knowledge);
• Professional advisers (lawyers, accountants) when necessary;
• Authorities when required by law or valid legal process.

We do not share enquiry data with unrelated third parties for their marketing purposes.

7. International transfers

Primary data storage and processing occur in Singapore. Some camera manufacturers offer cloud viewing hosted overseas; if you enable such features, data may transfer outside Singapore under the manufacturer's terms. We discuss cloud options during project scoping so you can make an informed choice.

Where cross-border transfer occurs through manufacturer cloud services, review their data processing terms and regional server options before enabling remote access for sensitive areas such as childcare centres or medical reception zones.

8. Retention

We retain enquiry and project records for as long as needed to fulfil the purposes above, typically up to seven years after project completion for warranty and legal purposes unless a longer period is required. Server logs are rotated on a short cycle. You may request deletion of data no longer required, subject to legal retention obligations.

Specific retention practices include:

• Website enquiries: Contact form submissions logged in our secure data directory are retained for twenty-four months if no project proceeds, then deleted;
• Active projects: Survey notes, quotations, and correspondence kept for the project duration plus seven years;
• Invoices and tax records: Retained as required under applicable accounting and tax regulations in Singapore;
• Maintenance contracts: Service visit logs retained for the contract term plus two years;
• Cookie consent: Stored only in your browser local storage — we do not retain this on our servers.

9. Security

We apply reasonable administrative and technical measures including access controls on project files, secure handling of floor plans, and restricted access to data directories on our web server. No method of transmission over the internet is completely secure; please use reputable email providers when sending sensitive documents.

Our website architecture includes directory-level access restrictions on includes/, data/, and build/ folders. Contact form submissions are validated server-side with honeypot spam protection. Email headers sanitise user-supplied values to prevent header injection. We do not store payment card data on this Website.

10. CCTV footage and your responsibilities

After we install a surveillance system and hand over administrator credentials, you become the operator of recorded footage for PDPA purposes in most residential and commercial scenarios. You should:

• Inform employees, residents, or visitors that recording occurs where appropriate;
• Limit access to live and recorded feeds to authorised persons;
• Define retention periods aligned with your legitimate purpose and delete footage when no longer needed;
• Respond to access requests from individuals who appear in footage where the PDPA applies;
• Avoid pointing cameras solely at public areas beyond your property without assessing necessity and reasonableness.

We provide general placement guidance during installation but do not assume ongoing data-controller responsibilities unless agreed in a separate managed-services contract.

11. Your rights

Under the PDPA you may request access to, correction of, or withdrawal of consent for processing of your personal data, subject to exceptions in the Act. Contact us using the details in Section 1. If unresolved, you may lodge a complaint with the PDPC.

Access requests should identify the information you seek with reasonable specificity. We may request verification of identity before releasing records. Correction requests should explain the inaccuracy and provide supporting evidence where available. We will respond within thirty days unless an extension is permitted under the PDPA.

12. Children

Our services are directed at property owners and business operators. We do not knowingly collect personal data from individuals under eighteen without parental or guardian involvement in the enquiry.

13. Changes

We may update this Privacy Policy to reflect legal or operational changes. The "Last updated" date at the top will change accordingly. Material changes affecting active clients will be communicated where appropriate.

Previous versions are not archived publicly. If you require confirmation of terms that applied at a specific past date, contact us with the approximate timeframe and we will respond where records permit.

14. Contact

For privacy enquiries: