Privacy notice

This notice explains what personal data Alucent collects, why, and what you can ask us to do about it. It is written to satisfy Singapore's Personal Data Protection Act 2012 (PDPA), and to be readable.

Who we are

Alucent is a brand of GX TECH PTE. LTD. (UEN 202503838W), a company registered in Singapore. We are the data controller for everything described here. Our Data Protection Officer can be reached at hello@alucent.sg.

What we collect, and why

When you place an order

Your name, email address, phone number and delivery address, plus what you bought and what you paid. We need these to take the order, deliver it, and handle a return or a warranty claim. Legal basis: performing the contract you entered into.

When you send an enquiry

Your name, email, optionally a phone number and company, and whatever you tell us about the room or project. We use it to reply and to prepare a quotation. We also record how you arrived at the site — a referrer or a campaign tag — so we know which of our own efforts are worth continuing.

When you create an account

Your email address and authentication details, held by Clerk (see below). An account is entirely optional; checkout works without one.

When you pay

We never see your card details. Payment happens on Stripe's own hosted checkout page. Stripe tells us that a payment succeeded, the amount, and the name, email, phone and delivery address you gave them. The card number does not reach our servers at any point.

What we do not do

• We do not sell or rent personal data to anyone, for any purpose.
• We do not run advertising or analytics trackers on this site. There is no Google Analytics, no Meta pixel, and no third-party cookie set by us — which is why there is no cookie banner asking you to consent to one.
• We do not add you to a mailing list because you bought something. If we ever start one, it will be opt-in.

Cookies and local storage

Your bag is kept in your browser's localStorage — it is data on your own device, it is never sent to us until you choose to check out, and clearing your browser data clears it.

If you sign in, Clerk sets a session cookie so you stay signed in. Stripe sets its own cookies on its checkout page for fraud prevention. Both are strictly necessary for the function you asked for.

Who processes data on our behalf

• Stripe — payment processing. Stripe is PCI-DSS Level 1 certified and is the controller for card data. Stripe's privacy policy.
• Clerk — account authentication, only if you create an account. Clerk's privacy policy.
• Cloudflare — hosting, and the database that stores orders and enquiries. Data is held in Cloudflare's distributed infrastructure, which means it may be processed outside Singapore. Under the PDPA we remain responsible for it and require a comparable standard of protection by contract.
• Our delivery partners — given your name, address and phone number, and nothing else, and only for the delivery in question.

How long we keep it

• Orders: seven years. Not our choice — Singapore tax law requires business records to be retained for five years, and warranty claims can run to five years from delivery.
• Enquiries that did not become orders: two years, then deleted.
• Account data: until you delete the account.

Your rights

Under the PDPA you may ask us to:

• Tell you what personal data we hold about you and how it has been used
• Correct anything inaccurate
• Withdraw consent for any use that is not required to complete an order
• Delete data we no longer have a legal or contractual reason to keep

Email hello@alucent.sg and we will respond within 30 days, which is the statutory maximum and considerably longer than we normally take. If you are not satisfied with our response you may complain to the Personal Data Protection Commission at pdpc.gov.sg.

Security

The site is served over HTTPS. Card data never reaches our infrastructure. Access to the order database is limited to the people who need it to fulfil orders. If a breach ever occurs that is likely to result in significant harm, we will notify affected individuals and the PDPC as the PDPA requires.

Changes

If this notice changes materially we will update the date at the top and, for anything that affects how we use data you have already given us, email you about it rather than relying on you to re-read this page.