Privacy & Data Protection Policy

1. Introduction & Scope

Lion Securisia Engineering LLP (鼎坤盾工程公司) ("Lion Securisia", "we", "us" or "our") is a Singapore Police Force (SPF) licensed security service provider (Licence No. L/PS/001019/2025P) and a bizSAFE Level 4 certified engineering firm. We take our responsibilities under Singapore's Personal Data Protection Act 2012 ("PDPA") seriously. Our information-handling practices are intended to reflect appropriate information-security principles; this statement does not represent that Lion Securisia holds ISO/IEC 27001 certification.

This policy applies when you visit lionsecurisia.com.sg, contact us by telephone, WhatsApp or email, request a quotation, attend a site survey, or engage us for installation, configuration, repair or maintenance of security and related systems in Singapore.

In this policy, "personal data" generally means data, whether true or not, about an individual who can be identified from that data or from that data and other information to which an organisation has or is likely to have access. This policy should be read together with any service-specific notices, contract terms or consent notices that we provide.

2. Personal & Project Data We Collect

Depending on your interaction with us, we may collect the following categories of information, where relevant and appropriate:

• Identity and contact particulars: Name, company or MCST name, designation, telephone or WhatsApp number, email address, and billing or installation address.
• Site assessment and project documentation: Floor plans, site layouts, network diagrams, server-rack information, photographs or videos of installation areas, and images of faulty equipment supplied for quotation, installation or troubleshooting.
• Site access and work records: Visitor-pass details, building-management work-permit information, risk assessments, method statements, attendance records and project sign-off documents required for the work.
• Transaction, warranty and service records: Quotations, contracts, invoices, payment records, product serial numbers, warranty claims and Annual Maintenance Contract (AMC) service logs.
• Security-system information: System configuration details, device identifiers, access logs or footage that you authorise us to access for installation, testing, diagnosis or maintenance. We seek to limit access to what is necessary for the task.
• Technical website information: Information such as IP address, browser and device details, pages requested and technical logs that may be generated when you use our website or its embedded third-party services.

We may obtain information directly from you, from your authorised representative, from building management where required to perform the work, or from systems you authorise us to service. Please ensure that you are authorised to provide any personal data, photographs, floor plans or other records that you share with us.

3. CCTV, Biometric & Site Security Information

We install and maintain systems that may process personal data, including IP CCTV, door-access systems, fingerprint or facial-recognition terminals, intrusion alarms and related network equipment. Our access to personal data depends on the scope of work authorised by the client and the system configuration.

• No routine live monitoring: We do not routinely monitor clients' live CCTV feeds or intentionally retain undisclosed access to commissioned systems. Access may occur where it is necessary and authorised for installation, testing, troubleshooting, maintenance or another agreed service.
• Temporary credentials: If you provide temporary administrator credentials, IP addresses or network details for an authorised service session, we will use them for that service purpose. We recommend that the client or its IT administrator changes temporary credentials after servicing where appropriate.
• Remote-viewing accounts: Where supported, remote-viewing applications and cloud accounts should be registered to and controlled by the client or its authorised administrator. Clients should manage account permissions, multi-factor authentication where available, and password changes.
• Biometric enrolment: Our engineers may assist an authorised client administrator with local enrolment and configuration of fingerprint, facial or card credentials. We do not routinely export or retain biometric templates on our own company systems. Any exceptional handling must be authorised, limited to the agreed purpose and handled in accordance with applicable law.
• Client responsibilities: Clients are responsible for ensuring that their use of surveillance, audio recording, access logs and biometric systems has an appropriate legal basis, required notices and permissions, and suitable access controls and retention settings. We can provide installation guidance but do not provide legal advice.

4. Purpose of Collection, Use & Processing

We collect, use and disclose personal data for purposes that are reasonably connected with our business and services, as notified to you, with your consent where required, or as otherwise permitted or required by Singapore law. These purposes may include:

• Responding to enquiries, arranging site surveys and assessing security coverage, cabling, network and installation requirements.
• Preparing quotations, proposals, contracts, invoices, payment records and project documentation.
• Preparing workplace-safety and building-management documents, including risk assessments, method statements and work-permit applications.
• Supplying, installing, configuring, testing, commissioning and maintaining CCTV, alarm, access-control, retail EAS, networking, cabling and related systems.
• Providing warranty support, troubleshooting, repairs, preventive maintenance and AMC services.
• Managing our business operations, service quality, customer communications and records, and handling complaints or disputes.
• Meeting applicable legal, regulatory, tax, accounting, licensing and record-keeping requirements.
• Sending service-related updates and, where permitted by law and applicable preferences, relevant marketing communications. You may ask us to stop marketing communications at any time.

5. Disclosure of Personal Data

We do not sell personal data. We may disclose relevant information only where reasonably necessary for the purposes described in this policy, with appropriate authorisation, or as permitted or required by law. Recipients may include:

• Manufacturers, principals and distributors: For product support, warranty returns, replacement claims or technical escalation where relevant.
• Building and facility management: MCSTs, managing agents, landlords, main contractors or facility teams where information is required for access approval, permit-to-work administration, safety documentation or project coordination.
• Service providers: Providers of email, hosting, communications, cloud, IT, accounting, payment or business administration services that support our operations, subject to appropriate handling arrangements.
• Professional advisers: Legal, accounting, insurance or other professional advisers when reasonably necessary.
• Government, regulatory or law-enforcement authorities: Where disclosure is required or authorised by applicable law or a valid legal process.
• Business transaction parties: Where necessary for a proposed or completed business restructuring or transfer, subject to applicable legal safeguards.

We aim to share only information reasonably necessary for the relevant purpose. Where a service provider processes personal data on our behalf, we take appropriate steps in light of the service and circumstances to protect that data.

Overseas processing: Some third-party service providers may process or store information outside Singapore. Where we transfer personal data outside Singapore, we will do so in accordance with applicable PDPA requirements for overseas transfers.

6. Data Protection, Security & Retention

We take reasonable administrative, physical and technical steps, appropriate to the sensitivity of the information and the nature of our operations, to protect personal data and confidential project information against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. Measures may include limiting access to authorised personnel, using appropriate account and device controls, and securely handling project files.

No method of transmission or storage can be guaranteed to be completely secure. If you suspect that information you supplied to us has been compromised, please contact us promptly using the contact details below.

We retain personal data only for as long as it is reasonably required for the purposes for which it was collected, including service delivery, warranty and maintenance support, dispute resolution, and applicable legal, regulatory, tax, accounting or licensing obligations. When information is no longer required, we will take reasonable steps to delete it securely or anonymise it, subject to any lawful need to retain it.

Personal Data Breaches

If we become aware of a suspected personal data breach, we will assess and manage the incident and make notifications to the Personal Data Protection Commission and affected individuals where required under applicable law.

7. Website Cookies & Third-Party Services

Our website may use cookies or similar technologies for essential operation, security, user preferences and, where enabled, website performance measurement. The technologies in use may depend on the website platform and features enabled at the time of your visit. You can manage or block cookies through your browser settings, although some website features may not function as intended.

Our website may load third-party resources such as Google Fonts and may embed services such as Google Maps on the contact page. When those services load, the relevant providers may receive technical information, which can include your IP address, browser information and the page making the request. Their handling of information is governed by their own terms and privacy notices.

If analytics, advertising or other tracking technologies are enabled on this website, we should identify those technologies and describe their purposes here. This policy should be reviewed whenever site-wide scripts, embedded content or tracking settings change.

When you follow an external link, including our WhatsApp link (https://wa.me/6587141319) or social media links, your activity on that platform is governed by the relevant provider's terms and privacy policy.

8. Access, Correction & Withdrawal of Consent

Subject to the PDPA and applicable exceptions, you may ask us to:

• Provide access: Tell you whether we hold personal data about you and provide access to that data and information about how it has been used or disclosed within the period prescribed by law.
• Correct personal data: Correct an error or omission in personal data that we hold, subject to the PDPA.
• Withdraw consent: Withdraw consent for the collection, use or disclosure of your personal data where consent is the basis relied upon, by giving us reasonable notice.
• Stop marketing messages: Ask us to stop sending direct marketing communications, subject to applicable law and any necessary service-related communications.

To protect your information, we may need to verify your identity and clarify the details of your request. We will respond to access and correction requests as soon as reasonably possible. If we are unable to provide access or make a correction within 30 days after receiving the request, we will inform you in writing within that period of when we expect to respond. Fees may apply to an access request where permitted by law, and we will explain any applicable fee before proceeding.

If you withdraw consent, we will explain any likely consequences and stop the relevant collection, use or disclosure unless otherwise permitted or required by law. Withdrawal may affect our ability to provide a particular service, maintain an account or continue a contractual arrangement.

9. Contact Our Data Protection Officer (DPO)

If you have a question about this policy, our data-handling practices, or wish to submit a personal data access, correction or consent-withdrawal request, please contact our Data Protection Officer using the details below.

Policy Updates

We may update this policy from time to time to reflect changes in our services, website features or legal requirements. The latest revision date will be shown at the top of this page. We encourage you to review this policy periodically.