Privacy Policy

Last updated 1 October 2026

This policy explains how Cathay Seal Pte Ltd ("Cathay Seal", "we", "us") handles personal data when you visit www.cathayseal.com.sg or contact us. We are based in Singapore and comply with the Personal Data Protection Act 2012 (PDPA). Because our website is also visited from the European Union and the wider European Economic Area, we also apply the EU General Data Protection Regulation (GDPR) where it applies to our processing.

1. Who we are

Cathay Seal Pte Ltd is the organisation responsible for your personal data (the "controller" under the GDPR). We are part of the Erria Group, whose parent company is Erria A/S in Denmark.

Questions about this policy or requests about your personal data can be sent to our Data Protection Officer at sales@cathayseal.com.sg. Please mark your email "Data protection".

2. What we collect and why

When you contact us

If you email or call us, we process the details you share, such as your name, email address, phone number, company, job title and the content of your message. We use this to answer your enquiry, prepare quotes and samples, deliver orders and manage our business relationship with you.

Under the GDPR, we rely on the steps needed to enter into or perform a contract with you (Article 6(1)(b)) and on our legitimate interest in responding to business enquiries (Article 6(1)(f)). Under the PDPA, we rely on the consent you give when you contact us, or on another basis the PDPA permits.

When you browse our website

Our hosting provider, Cloudflare, processes technical data needed to deliver the website securely, such as your IP address, browser type, device information, the page requested and the time of the request. This is necessary to run and protect the website and is based on our legitimate interest in doing so (GDPR Article 6(1)(f)).

Website analytics (only with your consent)

If you accept analytics cookies, we use Google Analytics 4 to understand how our website is used. Google Analytics collects information such as the pages you view, how long you stay, how you arrived at our site, your approximate location (country or city), and your device and browser type, linked to an identifier stored in a cookie. Google states that Google Analytics 4 does not log or store IP addresses. We use these insights in aggregated form to improve our website.

Marketing measurement (only with your consent)

If you accept marketing cookies, we use the LinkedIn Insight Tag. It collects information such as the page URL, referring page, IP address, device and browser characteristics, and a timestamp, and uses cookies to recognise your browser. LinkedIn uses this to provide us with conversion reports and audience insights, and to let us show relevant ads on LinkedIn. We only receive aggregated reports and cannot identify individual visitors.

Analytics and marketing processing is based on your consent (GDPR Article 6(1)(a) and the PDPA). You can withdraw your consent at any time via Cookie Settings. Withdrawing does not affect processing that took place before.

3. Cookies

We only use cookies that are not strictly necessary if you agree. Our Cookie Policy lists every cookie we use, what it does and how long it lasts.

4. Who we share data with

We do not sell personal data. We share it only where needed, with:

• Service providers who host our website and run our email and IT systems on our behalf, including Cloudflare, Inc.
• Google (Google Ireland Limited and Google LLC) for website analytics, if you consent.
• LinkedIn (LinkedIn Ireland Unlimited Company and LinkedIn Corporation) for marketing measurement, if you consent. LinkedIn processes this data in line with its own privacy policy.
• Other Erria Group companies where this is needed to handle your enquiry or serve you as a customer.
• Authorities and advisers where we are required by law or need to establish, exercise or defend legal claims.

5. International transfers

We are located in Singapore, so personal data you send us is processed in Singapore. Our service providers, Google and LinkedIn may also process data in the United States and other countries. Where personal data from the European Economic Area is transferred to a country without an EU adequacy decision, the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or, for certified US companies, the EU-U.S. Data Privacy Framework. Where the PDPA applies, we make sure recipients provide a comparable standard of protection.

6. How long we keep data

• Enquiries and correspondence: as long as needed to handle your enquiry and maintain our business relationship. We then delete it, unless we must keep it longer for legal, tax or accounting reasons.
• Google Analytics data: event-level data linked to cookies and identifiers is kept for no longer than 14 months and then deleted automatically. Aggregated reports may be kept longer.
• LinkedIn Insight Tag data: LinkedIn states that it removes direct identifiers within 7 days and deletes the remaining data within 180 days.
• Your cookie choice: 6 months, after which we ask you again.

7. Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data deleted or its use restricted;
• object to processing based on our legitimate interests;
• receive your data in a portable format;
• withdraw your consent at any time.

To use any of these rights, email sales@cathayseal.com.sg. We will respond within one month. We may ask you to confirm your identity first.

If you are unhappy with how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to a data protection authority: in the EU or EEA, the authority in the country where you live or work; in Singapore, the Personal Data Protection Commission (PDPC).

8. Security

We use appropriate technical and organisational measures to protect personal data, and our website is served over an encrypted connection (HTTPS). No method of transmission over the internet is completely secure, but we work to protect your data against loss, misuse and unauthorised access.

9. Children

Our website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes to how we use cookies, we will ask for your consent again.