Data Protection

Applicable requirements and roles

ACE Peripherals Pte Ltd is established in Singapore. Singapore’s Personal Data Protection Act applies where relevant. Other privacy laws, including the EU GDPR or UK data-protection law, apply only where their legal scope is met.

We handle personal data for our own business purposes, including orders, customer support, credit assessment and warranty administration. For a service in which we process personal data solely on a business customer’s instructions, the roles, permitted processing and any required data-processing agreement should be agreed in writing before work starts. This public page does not replace a signed service agreement or a required data-processing agreement.

Information supplied through customer tools

• Credit Application: provide authorised company/contact information and only the supporting documents requested for Finance assessment. Submission and upload confirmation do not grant credit.
• Warranty Registration: provide accurate product serials and relevant purchase evidence. Mixed-device submissions may require individual checks; records or coverage are not approved merely because the upload succeeds.
• Warranty Check: serial-based results are intended to provide limited coverage information. Access to customer-specific records requires appropriate verification of identity or authority.
• RAID and NVR Calculators: provide only the configuration and contact details needed for the result or enquiry. Avoid putting personal or confidential information in free-text fields unnecessarily.

Customers remain responsible for their authority to disclose third-party information. Redact unrelated information from invoices, screenshots and attachments, and use the agreed secure route for any sensitive material.

Handling, safeguards and service providers

Personal data should be collected for notified, reasonable purposes and used or disclosed on a lawful basis. Relevant records should be accurate, with reasonable arrangements to protect against unauthorised access, disclosure, alteration or loss. Access should be limited to the people and providers who need the information for an authorised task.

Service providers may support commerce, payments, delivery, communications and business systems. Where an overseas transfer is subject to the PDPA, comparable-protection requirements apply. Retention should be linked to the purpose and applicable business or legal requirements, followed by deletion or anonymisation when those needs end.

Suspected incidents must be assessed and any required notifications made within the applicable legal timeframe. These principles do not amount to a claim of a particular security certification, uninterrupted availability or absolute protection against every incident.

Requests and business due diligence

For access, correction, consent withdrawal, a privacy concern or a request about processing roles, contact finance@aceperipherals.com. Include the relevant order, request or service reference without sending unnecessary identity documents. We may verify the requester’s identity and authority before providing information.

If your organisation requires a data-processing agreement, supplier security assessment, particular storage location or retention schedule, raise it before commissioning the service. Any additional commitment takes effect only when we expressly agree it in writing. We do not certify an arrangement solely through a website statement.

Read our Privacy Policy for information about data categories, purposes, recipients, retention, overseas processing and individual requests. Applicable rights and regulatory obligations remain unaffected.