Privacy Policy.

How we collect, use and protect your personal data, in line with Singapore’s Personal Data Protection Act.

Last updated: 31 October 2026

Vareliq Product Lab Pte. Ltd. (UEN 202650080D) (“Vareliq”, “we”, “us”) respects your privacy. This policy explains how we collect, use, disclose and protect personal data, in line with Singapore’s Personal Data Protection Act 2012 (PDPA). It applies to vareliqlab.com and to enquiries and projects you bring to us.

1. What we collect

  • Details you give us: your name, company, email, phone number, what you are enquiring about, timeline, quantity or budget, the project description you write, and any files, sketches or references you send.
  • Your choices: whether you agreed to us replying to your enquiry and whether you opted in to updates, with the date.
  • For confirmed projects: billing and delivery details, and records of quotations, invoices and payments.
  • Technical data: our website host records standard information such as your IP address, browser type and the pages requested, to deliver and secure the site. We do not use analytics or advertising cookies.

2. How we use it

  • To reply to your enquiry and discuss your project.
  • To prepare quotations, designs, samples and production plans.
  • To manufacture, check and deliver your order, and to invoice you.
  • To send occasional updates on new products and projects, only if you opted in.
  • To keep the website secure and meet our legal, tax and accounting duties.

We will ask for your consent again before using your data for any other purpose.

3. Who we share it with

We do not sell your personal data. We share it only as needed with:

  • AYWU (艾屋科技), our design and manufacturing partner in Qingdao and Ningbo, China: the project details needed to design, quote, make and ship your product. We share your contact details only where they are needed, for example for delivery.
  • Google: Firebase hosts our website and stores enquiries in its Singapore region; Google Workspace runs our email; Google Fonts supplies the website’s typefaces; Google reCAPTCHA checks contact form submissions to block spam.
  • Logistics, payment and professional service providers (such as couriers, banks, accountants and auditors), for the part of the work they do.
  • Authorities, where the law requires it.

4. Transfers outside Singapore

Some of the parties above handle data outside Singapore, including AYWU (艾屋科技) in China and Google’s global services. When we transfer personal data overseas, we take steps so that it receives protection comparable to the PDPA, for example by written agreements with the recipient.

5. Cookies and browser storage

We do not use analytics or advertising cookies. To protect our contact form from spam, our home page uses Google reCAPTCHA, which may set cookies and collect information about your device and browser to tell people from automated programs. Google’s Privacy Policy and Terms of Service apply to that use.

The site also saves one setting in your browser, your light or dark mode choice, so it remembers it on your next visit. You can clear cookies and this setting at any time in your browser settings.

6. How long we keep it

  • Enquiries that do not become a project: up to 2 years from our last contact, then deleted.
  • Project, quotation and invoice records: as long as Singapore law requires for business and tax records, normally 5 years.
  • Marketing preferences: until you unsubscribe, after which we keep only a record that you opted out.

7. How we protect it

We limit access to the people who need it, use providers with recognised security standards, and store enquiries in a database that the public website can add to but cannot read. If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires.

8. Your choices and rights

You can ask us to:

  • give you a copy of the personal data we hold about you and tell you how it has been used or disclosed in the past year;
  • correct personal data that is wrong or incomplete;
  • stop using your data, by withdrawing your consent. We will explain what this means for any ongoing project before we act on it.

To unsubscribe from updates, use the link in any update email or write to us. We will respond to requests as soon as reasonably possible and normally within 30 days. If we need longer, we will tell you why.

9. Children

Our services are for businesses and adults. We do not knowingly collect data from children under 13. If you believe a child has sent us their details, contact us and we will delete them.

10. Contact our Data Protection Officer

Data Protection Officer: Ken Jacob Ong
Vareliq Product Lab Pte. Ltd., Singapore
Email:

If you are not satisfied with our response, you may contact the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

11. Changes and governing law

We may update this policy from time to time and will post the new version on this page with its date. This policy is governed by the laws of Singapore.