Privacy Policy
1. Who we are
ALT TAB SOLUTIONS PTE. LTD. ("we", "us") runs Innovative Design Studio by ALT TAB. We are responsible for the personal data described here. This policy explains what we collect, why, who sees it and what your choices are, in line with the Personal Data Protection Act 2012 of Singapore (the "PDPA").
Data Protection Officer: [name or title], [Contact email: set in the admin panel].
2. What we collect
- Account and booking details: your name, email address, telephone number and the number of people you book for.
- Order details: what you ordered, the delivery address you give (Singapore only), quotes, invoices and messages with us.
- Messages you send us: what you write in the contact form: your name, email address, telephone number, topic and message.
- Files you upload: 3D model files and notes, and the measurements and print settings we work out from them.
- Payment details: payment is taken by HitPay on its own page. Your card details go to HitPay and never reach us. We keep the payment reference and amount so an order can be matched to its payment.
- Technical details: your address on the network, browser type, pages visited, the time, and error reports. We use these to run, secure and fix the website.
- Partner details (if you apply to sell with us): business name, contact person, bank details for payouts, and the designs you submit.
We do not ask for more than we need. Do not send us government ID numbers or card numbers by email or in notes.
3. Why we use it
- to take your booking or order, make it, deliver it and look after you afterwards;
- to take payment, issue invoices and keep accounts;
- to contact you about your order, for example if a session is moved or a file has a problem;
- to keep the website safe, stop abuse and fix faults;
- to meet our legal duties, and to establish or defend a legal claim;
- to send you news or offers, only if you have agreed. You can withdraw at any time.
4. Consent and other bases
Under the PDPA we collect, use and disclose your data with your consent, or where the law allows it without consent, for example to carry out a contract with you, where it is necessary for a legitimate interest that is not outweighed by harm to you, or where the law requires it. By giving us your data for a purpose you can see, you consent to that purpose. You may withdraw consent by contacting us; we will tell you what that means for the service we can give you.
5. Who we share it with
We do not sell your data. We share it only with the relevant parties who help us run the service, and only what each one needs:
- HitPay, to take payment;
- Cloudflare, which carries traffic to the website and runs the human check on our forms;
- our hosting and email providers, to run the website and send you messages about your order;
- couriers, only your name, address and telephone number, to deliver an order;
- our professional advisers, auditors and insurers, where needed;
- the authorities, only where the law requires it or the government authorises it.
These providers may handle data outside Singapore. Where they do, we take steps to make sure it is protected to a standard comparable to the PDPA.
6. How long we keep it
We keep data only as long as we need it for the purposes above or the law requires. As a guide: [account and booking records for X years]; [accounting records for 5 years]; uploaded model files until you ask us to delete them; [error reports for X days]. After that we delete or anonymise it.
7. Security
We keep data in our own database on systems we control, protect sign-in with limits and a human check, and let staff see only what their job needs. No system is perfectly secure. If a data breach is likely to cause you significant harm, we will tell you and the Personal Data Protection Commission as the PDPA requires.
8. Your rights
You may ask us to:
- tell you what personal data we hold about you and how it has been used;
- correct it if it is wrong;
- delete it or stop using it, where we do not have to keep it;
- withdraw your consent.
We may need to check who you are first. We will answer within the time the PDPA gives us [30 days]. We may charge a reasonable fee for an access request, and will tell you the amount before we act.
9. Cookies
See the Cookie Policy.
10. Children
The website is not meant for children under 13, and we do not knowingly collect their data. A parent or guardian should make bookings for them. If you think a child has given us data, contact us and we will delete it.
11. Changes and contact
We will post changes here with a new date. To ask a question, use a right above or make a complaint, contact our Data Protection Officer at [Contact email: set in the admin panel] or [Studio address: set in the admin panel]. If we do not resolve it, you may complain to the Personal Data Protection Commission of Singapore.
Last updated: 30 October 2026.
