Privacy Policy

Who We Are

AOS PTE. LTD. is an eyewear contact lens trading and distribution house that specialises in the wholesale of optical equipment and supplies. We were incepted more than a decade ago, and have since made strides with various contact lens brands including exclusive distribution of the Maxim Colors brand spanning across 400 physical stores in Singapore and Malaysia.

Our website address is: https://aospteltd.com.sg.

Data Protection

This Data Protection Notice ("Notice") sets out the basis on which AOS PTE. LTD. ("we", "us", or "our") may collect, use, disclose or otherwise process personal data of our customers in accordance with the Personal Data Protection Act ("PDPA"). This Notice applies to personal data in our possession or under our control, including personal data in the possession of organisations which we have engaged to collect, use, disclose or process personal data for our purposes.

Personal Data

1. As used in this Notice: "customer" means an individual who has contacted us, or whom we have contacted, through any means to find out more about any goods or services through our designated consultants or sales and marketing agents, through mediums including but not limited to our website or landing pages, social media accounts, opt-in lead generation form, referral SMS, EDM, emails, WhatsApp, face-to-face meetings, or virtual Zoom/Microsoft meetings.
2. We may provide your personal information to parties that have entered into a contract with us for the supply or rendering of any products or services; and "personal data" means data, whether true or not, about a customer who can be identified from that data, or from that data and other information to which we have or are likely to have access.
3. Depending on the nature of your interaction with us, some examples of personal data we may collect include company name, your first and last name, private email addresses, and personal landline, WhatsApp business or handphone number.

Collection, Use and Disclosure of Personal Data

• We may collect and use your personal data to perform obligations in the course of fulfilling a contractual agreement in connection with our provision of the goods and/or services requested by you;
• Verifying your true identity;
• Responding to, handling and processing queries, requests, applications, complaints and feedback from you;
• Managing your relationship with us, and enhancing our business operational processes or data analytics to offer better product or service offerings;
• We may disclose your personal data where such disclosure is required for performing obligations in connection with our provision of goods and services requested by you, or to our designated consultants and sales and marketing agents;
• Or to third-party service providers such as web hosting companies, auditors, distributors, sales and marketing agents, external consultants, external out-sourced marketing firms and other organisations we have engaged to perform functions in connection with the fulfilment of any product or service as stated in the Scope of Work in the contractual agreement.
• The purposes above may continue to apply even after your relationship with us has been terminated or altered, for a reasonable period under the laws of the Republic of Singapore (including a period to enable us to enforce our rights under a contract with you).

Withdrawing Your Consent

• Consent for the collection, use and disclosure of your personal data remains valid until up to seven (7) business working days from the time it is withdrawn by you in writing. You may withdraw consent and request us to stop collecting, using and/or disclosing your personal data by submitting your request in writing or via email to our Data Protection Officer at the details below.
• Upon receipt of your written request to our DPO, we will require up to seven (7) working business days to process your request and notify you of the consequences, including any legal consequences which may affect your rights and liabilities to us. In general, we shall seek to process your request within seven (7) business days of receiving it.
• Depending on the nature and scope of your request, we may not be in a position to fulfil our contractual agreement of any product or service to you, and we shall notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform us in writing through our official DPO email.
• Withdrawing consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclosure without consent is permitted or required under applicable laws for compliance purposes.

Access to and Correction of Personal Data

• If you wish to make (a) an access request for a copy of the personal data we hold about you, or information about how we use or disclose it, or (b) a correction request, you may submit your request in writing or via email to our Data Protection Officer at the details below.
• An access request will be charged at SGD$25/hour, calculated on a manpower-hours basis, depending on the complexity of the request. We will inform you of the fee before processing your request.
• We will respond as soon as reasonably possible, generally within fourteen (14) business days. Should we not be able to respond within thirty (30) days, we will inform you in writing within thirty (30) days of the time by which we will be able to respond. If we are unable to provide any personal data or make a correction requested by you, we shall generally inform you of the reasons why (except where we are not required to under the PDPA).

Protection of Personal Data

To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have introduced appropriate administrative, physical and technical measures such as minimised collection of personal data, web security measures against risks, and regular security review and testing.

You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we have adopted a reasonable web security management plan to protect the security of your information and are constantly reviewing and enhancing our information security measures.

This website is built as a static site: plain HTML, CSS and JavaScript pages served directly, with no content management system, no plugin ecosystem, no admin login and no database sitting behind it. This keeps the practical security measures simple and minimises what there is to protect:

• Encrypted connection. The site is served over HTTPS, so the connection between your browser and the server carrying this website is encrypted in transit.
• No database to breach. Because the site does not run a CMS or plugins and holds no database, there is no store of visitor or customer data on the website itself for an attacker to gain access to.
• Minimal collection by design. The only interactive feature on the site is the contact enquiry form, and even that does not transmit or store your details on any server behind this website, as explained under "Where We Send Your Data" below.

Accuracy of Personal Data

We generally rely on personal data provided by you (or your authorised representative). To ensure your personal data is current, complete and accurate, please update us of any changes by informing our Data Protection Officer in writing or via email at the contact details below.

From time to time, we may contact you only if we feel that your personal data may be inaccurate, to make corrections and ensure your personal data is accurate.

Retention of Personal Data

• We will retain your personal data primarily for the duration necessary to execute or maintain the contractual agreement, or as required or permitted by applicable laws.
• We will cease to use your personal data upon completion of the contractual agreement, and dispose of all data after two (2) years, or as soon as it is deemed unreasonable to assume such retention still serves the purpose for which the data was collected.

What Rights You Have Over Your Data

If you have left your personal information with us, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we delete any personal data we hold about you. This does not include data we are obliged to keep for administrative, legal, or security purposes.

Where We Send Your Data

This website is a static site with no application server, content management system or database behind it. It does not collect, store or transmit your personal data to any AOS server, cloud database or third-party host as part of its normal operation.

The one interactive feature on this site is the contact enquiry form on our Contact Us page. That form works by pre-filling an email addressed to cs@aospteltd.com.sg using your own device's default email application. Your details only reach us if and when you choose to send that pre-filled email yourself, from your own email account, in the ordinary way. Nothing you type into the form is transmitted to, or stored on, this website or any server behind it.

Data Log

This website does not run any application-level logging, analytics scripts or tracking code that records your IP address, browser details or browsing behaviour on our behalf. As is standard for effectively any website on the internet, the underlying web hosting infrastructure that serves these pages may automatically keep basic technical access records (such as IP address, timestamp and browser type) for its own operational and security purposes, under that host's own retention practices. AOS does not access, analyse or otherwise use this infrastructure-level log data for marketing, profiling or any other purpose.

Service Providers

We may employ third-party companies and individuals to: facilitate our Service in updating website content; provide website development services on our behalf; perform Service-related services; or assist us in analysing user experience on the website. These third parties have access to your Personal Information only to perform the tasks assigned to them on our behalf, and are obligated not to disclose or use the information for any other purpose.

Security

We value your trust in providing us your Personal Information and strive to use commercially acceptable means of protecting it. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee its absolute security. All individuals within aospteltd.com.sg understand and are trained to comply with the PDPA Act 2012 where their role falls under Collect, Use, Disclose or Store (CUDS).

Embedded Content in Website

Our Contact Us page includes an embedded Google Maps location so you can find our office. This embedded map behaves in the same way as if you had visited Google's website directly: Google may collect data about you, set cookies, and monitor your interaction with that embedded map in accordance with Google's own privacy policy, separate from ours. We do not control, receive or have access to that data.

Analytics

As at the date of this notice, this website does not have any analytics or marketing tracking tools installed, and it does not set cookies or similar tracking technologies of its own. Should we install any analytics tool in future, we will update this Notice to describe what is collected, for what purpose, and how you can opt out.

Data Protection Officer

You may contact our Data Protection Officer if you have any enquiries or feedback on our personal data protection policies and procedures, or if you wish to make any request, as follows:

Name of DPO: Tung Kai Sheng
Contact No.: +65 8668 4687
Address: 10 Ubi Crescent, Ubi Tech Park, Lobby B, #05-32, Singapore 408564
Email Address: tungkaisheng@gmail.com

Effect of Notice and Changes to Notice

This Notice applies in conjunction with any other notices, contractual clauses and consent clauses that apply in relation to the collection, use and disclosure of your personal data by us. We may revise this Notice from time to time without prior notice; you may determine if a revision has taken place by referring to the date below. Your continued use of our services constitutes your acknowledgement and acceptance of such changes.