Privacy Policy

Introduction

Axiom Auto is committed to protecting the privacy and security of personal information entrusted to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our automotive diagnostic and maintenance services. By using our services or providing information to us, you acknowledge the practices described in this policy.

This policy applies to information collected through our facility, website, contact forms, phone communications, and in-person interactions. We adhere to Singapore's Personal Data Protection Act (PDPA) and international data protection standards.

Data Collection

Types of Personal Data Collected

We collect various categories of personal information necessary for providing automotive services:

• Contact Information: Name, phone number, email address, mailing address
• Vehicle Information: Make, model, year, registration number, mileage, vehicle identification number
• Service History: Previous assessments, repairs performed, diagnostic findings, maintenance records
• Communication Data: Email correspondence, phone call records, service inquiries, appointment scheduling information
• Payment Information: Billing details, transaction records (payment card information is processed securely through third-party processors)
• Usage Data: Website visit patterns, page views, browsing behavior when applicable

Collection Methods

Personal data is collected through the following channels:

• Direct Provision: Information you provide when scheduling services, filling contact forms, or communicating with our team
• Service Delivery: Data recorded during vehicle assessments, diagnostic procedures, and maintenance work
• Automated Collection: Technical information gathered through website cookies and analytics tools
• Third Parties: Information from referral sources, insurance companies, or fleet management companies when authorized

Legal Basis for Processing

We process personal data based on the following legal foundations:

• Consent: When you explicitly agree to data collection and processing for specific purposes
• Contract Fulfillment: Processing necessary to provide requested services, complete assessments, and deliver reports
• Legitimate Interest: Business operations requiring data processing, such as service improvement and safety record keeping
• Legal Obligation: Compliance with Singapore regulations, tax requirements, and business record retention laws

Data Usage

Your personal information is used for the following purposes:

Service Provision

• Scheduling and coordinating diagnostic assessments
• Performing vehicle inspections and maintenance work
• Generating assessment reports and recommendations
• Maintaining service history for continuity
• Processing payments and issuing invoices

Communication

• Responding to inquiries and service requests
• Providing updates on service progress
• Delivering assessment reports and findings
• Sending appointment reminders (when authorized)
• Following up on completed services

Business Operations

• Improving diagnostic procedures and service quality
• Training staff on assessment methodologies
• Managing facility operations and scheduling
• Analyzing service patterns for resource allocation
• Maintaining business records for legal compliance

Legal and Safety

• Complying with legal obligations and regulations
• Responding to official inquiries when required
• Protecting against fraudulent activities
• Maintaining records for warranty and liability purposes

Data Retention

Personal data is retained for specific periods based on legal requirements and business needs:

• Service Records: Vehicle assessment reports and service history maintained for 7 years to support continuity and legal compliance
• Contact Information: Retained while you remain an active client, plus 3 years after last service for follow-up purposes
• Payment Records: Financial transaction data kept for 7 years to meet tax and accounting requirements
• Communication Logs: Email and phone records retained for 2 years for reference and quality assurance
• Marketing Consent: Maintained until consent is withdrawn or contact becomes inactive for 5 years

Data is securely deleted or anonymized once retention periods expire, unless ongoing legal obligations require continued storage.

Data Protection Measures

We implement multiple safeguards to protect personal information:

Technical Security

• Encryption of data during transmission and storage
• Secure authentication for system access
• Regular security updates and vulnerability assessments
• Firewall protection and intrusion detection
• Secure backup systems with restricted access

Organizational Measures

• Access controls limiting data availability to authorized personnel
• Staff training on data protection responsibilities
• Confidentiality agreements with employees
• Data breach response procedures
• Regular security policy reviews

Breach Notification

In the unlikely event of a data breach affecting personal information, we will notify affected individuals and relevant authorities within 72 hours as required by applicable regulations. Notification will include the nature of the breach, likely consequences, and remedial measures being taken.

Your Rights

Under Singapore's Personal Data Protection Act and international standards, you have the following rights regarding your personal data:

Right to Access

You may request copies of personal data we hold about you, including assessment reports, service history, and contact information.

Right to Rectification

You can request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements and legitimate business needs.

Right to Restrict Processing

You can request limitation of how we process your data in certain circumstances.

Right to Data Portability

You may request transfer of your personal data to another service provider in a structured, commonly used format.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of previous processing.

To exercise these rights, contact us at [email protected]. We will respond within 30 days and may require identity verification before fulfilling requests.

Third-Party Services

We engage select third-party service providers who may access personal data when delivering specific functions:

Payment Processors

Financial transaction processing is handled by secure payment service providers. They access billing information necessary to complete transactions but do not use data for other purposes.

Diagnostic Equipment Providers

Vehicle diagnostic data may be transmitted to equipment manufacturers' systems for accessing updated technical information. This data is anonymized where possible.

Communication Services

Email and messaging platforms may process communication data to deliver our correspondence to you.

Website Analytics

Anonymous usage data is collected through analytics services to understand website performance and visitor patterns.

All third-party processors are contractually bound to protect personal data and use it only for specified purposes. We conduct due diligence on service providers' data protection practices.

International Data Transfers

Personal data is primarily stored and processed within Singapore. When international transfers are necessary (such as diagnostic equipment manufacturer systems), we ensure appropriate safeguards are in place:

• Transfers only to countries with adequate data protection regulations
• Standard contractual clauses ensuring protection standards
• Data minimization principles applied to transferred information

Cookies and Tracking

Our website uses cookies and similar technologies. For detailed information about cookie usage, types of cookies employed, and how to manage preferences, please refer to our Cookie Policy.

Children's Privacy

Our services are not directed toward individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor's data has been collected, we will take steps to delete it promptly.

Policy Updates

This Privacy Policy may be updated periodically to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated through:

• Updated policy posting with revision date
• Email notification to active clients
• Prominent notice on our website

Continued use of our services following policy updates constitutes acceptance of the revised terms.

Contact Information

For privacy-related questions, data access requests, or to exercise your rights, please contact:

Privacy Officer
Axiom Auto
Email: [email protected]
Phone: +65 6493 7281
Address: 71 Ubi Road 1, #08-42 Oxley Bizhub, Singapore 408732

We are committed to addressing privacy concerns and resolving any issues related to personal data protection.