Last updated: 29 October 2025

---

1. Introduction

Aquatic Facilities Services Pte Ltd (“we”, “us”, “our”) operates igarden.com.sg and related mobile or web-based services (collectively, the “Platform”). We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (Singapore) (“PDPA”) and the General Data Protection Regulation (EU) (“GDPR”), where applicable.

By accessing or using our Platform, registering an account, purchasing products, or interacting with iGarden smart devices, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

---

2. Personal Data We Collect

We collect the following categories of data:

2.1 Information You Provide Directly

• Name, email address, phone number

• Billing and shipping address

• Payment information (processed via third-party gateway HitPay)

• Warranty registration details

• Account login credentials

• Enquiry or support messages via forms, HubSpot CRM or WhatsApp Business

• Marketing subscription data

2.2 Automatically Collected Data

• IP address, browser details, device identifiers

• Usage patterns (via Google Analytics, Meta Pixel)

• Cookies and tracking technologies

• Preference settings and session data

2.3 IoT & Smart Device Data

When using iGarden smart pool systems, we may collect:

• Equipment runtime parameters, operational logs

• Sensor data (e.g., water chemistry, pressure, temperature)

• Diagnostic and performance analytics

• Remote control actions through the mobile app

• Location or time-zone for automation functions

Note: Some IoT data may be hosted securely in Singapore or China by our manufacturing partners, strictly for device functionality and performance enhancements.

---

3. Legal Basis for Processing (PDPA & GDPR Compliance)

We process data on the following legal bases:

• Performance of Contract – to fulfil orders, provide device functionality and warranty services.

• Legitimate Interests – to improve our website, products, customer support and user experience.

• Consent – required for email marketing, tracking cookies, WhatsApp notifications.

• Legal Obligations – to comply with tax, regulatory, and safety requirements.

Users located in the EU will be asked to explicitly consent where required.

---

4. How We Use Your Data

Your personal data is used to:

• Process and fulfill purchases

• Provide customer service and respond to enquiries

• Register and manage IoT smart device functionality

• Send maintenance alerts, diagnostics, or warranty reminders

• Provide marketing communications (only if you opt-in)

• Improve website performance via analytics

• Comply with legal, regulatory, or law enforcement requirements

We do not sell personal data under any circumstances.

---

5. Sharing of Data

We may share your data with:

All transfers are protected with contractual safeguards and encryption.

---

6. Cookies & Tracking Technologies

We use cookies to:

• Keep you logged in

• Remember your preferences

• Measure website performance

• Deliver relevant ads

---

7. Marketing and Communications

By subscribing via our website or WhatsApp Business channel, you consent to receive marketing content. You may withdraw consent at any time by:

• Clicking “unsubscribe” in email

• Emailing info@aquatic.asia

• Sending “STOP” in WhatsApp

We fully comply with Singapore Spam Control Act and GDPR marketing consent rules.

---

8. International Data Transfers

Your data may be transferred to servers outside your country of residence, including Singapore, China, the United States, or the European Union. Where such transfers occur, we implement legally mandated safeguards such as standard contractual clauses (SCCs).

---

9. Data Retention

We retain your personal data only for as long as necessary:

• Customer account data: until account is deleted

• Order records: 7 years (legal requirement)

• IoT operational data: retained for active functionality and anonymized thereafter

• Marketing data: until consent is withdrawn

---

10. Your Rights

Under Singapore PDPA:

• Right to access and correct your personal data

• Right to withdraw consent

Under GDPR (for EU users):

• Right to erasure (“right to be forgotten”)

• Right to restrict processing

• Right to data portability

• Right to object to automated decision-making and profiling

You may exercise your rights by contacting info@aquatic.asia.

---

11. Data Security

We implement encryption, access control, firewalls, and regular audits to protect your data against loss, theft, or unauthorized access.

---

12. Contact Information

Data Protection Contact

Aquatic Facilities Services Pte Ltd

Email: info@aquatic.asia

Website: www.aquatic.asia

---

13. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted with an updated effective date.