Contents
- Introduction
- Scope of this policy
- Who is responsible
- Information we collect
- How we collect information
- Why we use information
- Legal bases for processing
- Control room records
- When we share information
- Service providers and processors
- International transfers
- Retention and deletion
- Security measures
- Cookies and similar technologies
- Your rights
- Privacy for Children
- Marketing and communications
- Third party links
- Changes to this policy
- How to contact us
Introduction
This Privacy Policy explains how NEC Networks, the developer name used by the control room integration practice of NEC Networks & System Integration Corporation (Singapore Branch), handles personal information. NEC Networks & System Integration Corporation (Singapore Branch) operates the Paya Lebar control room at 140 Paya Lebar Rd, #08-14 A-Z Bldg, Singapore 409015, Singapore (SG) and provides integration sheet, relay check and handover note services to clients across computer systems design and related professional, scientific and technical services.
Privacy matters to us because our work is built on trust. When a client shares the details of a control wall, the people who read it, and the systems it connects, they are trusting the duty team with information that belongs to their organisation. This policy sets out in plain English what we collect, why we collect it, how we protect it, and what choices you have. We have written it to be read, not merely stored, and we have kept the language direct so that a busy reader can understand our practice without a legal dictionary.
We follow a simple principle in everything we do at the Paya Lebar room. We collect only the information we need to deliver the service, we keep it only for as long as the service and the law require, and we never sell it to anyone. If a question about your personal information is not answered here, you are welcome to contact customercare@nesic-ipo.com or call +14093341347 and the duty team will help.
Scope of this policy
This policy applies to personal information that we collect through this website, through enquiries sent to our contact email and phone number, through visits to the Paya Lebar control room, and through the integration, relay check, watch window and handover work that we deliver to clients. It applies to information about individuals, including client staff, visitors, suppliers and other people who interact with our practice.
This policy does not cover information that is not personal, such as the technical drawings of a control wall, the contents of an integration sheet as a document, or the general business information of an organisation. Where a client shares personal information with us as part of a project, that client may also have its own privacy policy and its own instructions for how that information should be handled. Where there is a conflict between our policy and a written agreement with a client, the written agreement takes priority for the specific information it covers.
Some of our work involves systems owned by our clients. This policy does not govern how those clients handle information in their own systems, and it does not govern the policies of any third party whose systems connect to a wall we have integrated.
Who is responsible
The entity responsible for the personal information described in this policy is NEC Networks & System Integration Corporation (Singapore Branch), located at 140 Paya Lebar Rd, #08-14 A-Z Bldg, Singapore 409015, Singapore (SG). When we process personal information on behalf of a client as part of an integration project, the client remains the party that decides the purpose of the processing, and we act on that client instructions.
The duty team at the Paya Lebar control room is the first point of contact for privacy questions. You can reach the team by email at customercare@nesic-ipo.com or by phone at +14093341347 during business hours. The team is trained to recognise a privacy enquiry, to log it, and to pass it to the person responsible for the response within our organisation.
If you are unsure whether a question should go to us or to the client whose wall we integrated, send it to us anyway. We would rather route a question correctly than leave it unanswered.
Information we collect
We collect several categories of personal information. The first category is contact information, which includes your name, email address, phone number, employer, job title and the preferred method by which you wish to be reached. We collect this when you write to us, call us, complete our contact form, or attend a cut-over sitting.
The second category is enquiry and project information, which includes the subject of your message, the description of the wall you have, the systems you would like integrated, the watch windows you would like to schedule, and any notes taken during a site survey review round. This category may contain personal information when a person is named as the operator of a system or the recipient of a handover note.
The third category is duty log information, which includes the records our duty engineers keep during relay check runs and uptime watch windows. These records usually concern equipment rather than people, but they can include the name of the engineer on duty, the time of a shift, and any communication with a client contact during a window.
The fourth category is website information, which includes the technical data described under cookies and similar technologies below. This data is limited to what a standard web server and analytics tool would record, and we do not use it to build a profile of any individual.
We do not seek sensitive categories of personal information such as health data, biometric data or data about political opinions. If such information reaches us in a message, we will handle it carefully and delete it when it is no longer needed for the purpose for which it was sent.
How we collect information
Most of the information we hold arrives directly from you. You may send an email to customercare@nesic-ipo.com, call the phone number +14093341347, complete the form on our contact page, or speak with a duty engineer at the Paya Lebar room. Some information arrives from the client organisation when a project begins, such as the list of people who will attend a cut-over sitting.
A smaller amount of information is collected automatically when you use this website. Our web server records standard technical data such as the type of browser used, the pages visited and the time of the visit. We use this data only to keep the site working and to understand which pages are useful. We do not attempt to identify individual visitors from this data.
We may also receive information from suppliers or partners who are involved in a project, for example when a site survey is arranged with a building manager. In every case, we ask that only the information needed for the task is passed to us, and we record where it came from.
Why we use information
We use personal information for a small number of clear purposes. We use it to answer enquiries, prepare quotations, schedule site survey review rounds, write integration sheets, run relay checks, book uptime watch windows, prepare handover notes and hold cut-over sittings. Each of these purposes is directly connected to the service you have asked us to provide.
We use information to keep our records accurate, to follow up on a question that was not fully answered in the first conversation, and to send you an update about a watch window or a sitting that you have booked. We use it to meet our legal and accounting obligations, including the retention of invoices and duty logs for the period required by law.
We use information to protect the room and the people in it, for example by keeping a record of who visited the Paya Lebar room and when, and by reviewing access to systems that support the control wall. We use it to improve our service, by reviewing anonymised patterns in the enquiries we receive and the questions clients ask most often.
We do not use your personal information for any purpose that is incompatible with the purpose for which it was collected. If we wish to use information for a new purpose, we will tell you first and, where required, ask for your consent.
Legal bases for processing
Where the law requires us to identify a legal basis, we rely on one or more of the following. We rely on the performance of a contract when we process information in order to deliver a service that you or your organisation has engaged us to provide. We rely on our legitimate interests when we process information to run our business, answer enquiries, keep the control room secure and improve our service, provided that those interests are not overridden by your rights.
We rely on consent when we send you marketing communications, when we use non-essential cookies, and when we process any information that the law requires us to collect with explicit consent. You can withdraw consent at any time by contacting customercare@nesic-ipo.com, and withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
We rely on legal obligation when we keep records for tax, accounting or regulatory purposes, and when we respond to a lawful request from a public authority. We rely on the protection of vital interests in the rare situation where processing is necessary to protect someone from serious harm.
Control room records
The Paya Lebar control room keeps records that are central to our service. These records include integration sheets, relay check logs, watch window summaries, handover notes and visitor entries. Some of these records contain the names of the people who attended a sitting or the engineers who ran a check, and they are treated as personal information where that is the case.
We keep control room records so that a wall can be defended in detail long after it was integrated. If a lamp behaves unexpectedly, the duty log and the sheet are the first places we look. Clients may also need the record for their own audits, and we share the relevant parts on request where we are permitted to do so.
Access to control room records is limited to the duty team and to the managers who supervise the room. The records are stored in a way that separates client projects from one another, and they are reviewed at intervals so that information no longer needed can be deleted.
Service providers and processors
We use a small number of service providers to support the practice. These include email hosting, website hosting, accounting software and IT support. Each provider is chosen for its reliability and its security practice, and each is bound by a written agreement that limits how it may use the information we share and requires it to protect that information.
Where a provider processes personal information on our behalf, it acts as our processor and does not decide the purpose of the processing. We remain responsible to you for how the provider handles the information. We review our providers at intervals and we end arrangements that do not meet our expectations.
We do not allow a provider to use personal information for its own marketing, and we do not allow a provider to combine our information with information from other customers to build profiles. If a provider needs access to the control room systems for support, the access is supervised by the duty team and is logged.
International transfers
Our practice is based in Singapore, and most of our processing takes place there. Some of our service providers operate in other countries, and information may be transferred to those countries when a provider stores or supports the data we share. We take reasonable steps to ensure that any transfer is protected by an appropriate safeguard, such as a contract that requires the recipient to protect the information to a standard consistent with the law that applies to us.
When a client asks us to work with a system in another country, we may need to transfer information to that country as part of the project. We tell the client before this happens and we record the transfer in the project file. We do not transfer personal information abroad for any purpose unrelated to the service we have been asked to provide.
If you would like to know more about the safeguards that apply to a particular transfer, contact customercare@nesic-ipo.com and we will explain the position for your project.
Retention and deletion
We keep personal information only for as long as it is needed for the purpose for which it was collected, and for any additional period that the law requires. Enquiries that do not lead to a project are usually deleted within twelve months. Project records, including integration sheets and handover notes, are kept for the period during which the client may reasonably need them and for the period required by accounting and record keeping law.
Duty logs and watch window summaries are kept for as long as the wall remains in our care and for a reasonable period afterwards. When a client moves to another provider, we return the records that belong to the client and delete the copies we no longer need to keep.
When information reaches the end of its retention period, it is deleted or anonymised in a way that means it can no longer be linked to an individual. If deletion is not possible for a technical reason, for example because the information sits in a backup, we isolate it and delete it when the backup is next refreshed.
Security measures
We protect personal information with technical and organisational measures that are appropriate to the risk. Access to our systems is limited to the people who need it for their work, and access is reviewed when a person joins, changes role or leaves. Passwords are managed carefully, and staff are trained to recognise a suspicious message before they open an attachment or follow a link.
The Paya Lebar control room is a controlled space. Visitors are recorded, access to the room is supervised, and the records of the room are kept separately from the systems that run the wall. We keep backups of important records and we test that those backups can be restored.
No system is completely secure, and we cannot promise that a breach will never happen. If a breach occurs that is likely to affect your rights, we will notify the relevant authority and the affected people without undue delay, in the manner required by law, and we will explain what happened and what we are doing about it.
Your rights
Depending on where you live, you may have a number of rights in relation to your personal information. These can include the right to be informed about how your information is used, the right to access a copy of the information we hold, the right to correct information that is inaccurate, and the right to ask for information to be deleted in certain circumstances.
You may also have the right to restrict how we use your information, the right to object to a particular use, the right to receive your information in a portable format, and the right not to be subject to a decision made solely by automated means. We do not currently make decisions about individuals by automated means in a way that has a legal or similarly significant effect.
To exercise any of these rights, write to customercare@nesic-ipo.com or call +14093341347. We will respond within the period required by the law that applies to us, and we may ask you to confirm your identity before we act so that we do not disclose information to the wrong person. If we cannot meet a request, we will explain why and tell you how to complain.
Privacy for Children
Our service is provided to organisations in the professional, scientific and technical sector, and it is not directed at children. We do not knowingly collect personal information from a child in the course of our normal business. If a child sends us a message, we will respond only to the extent needed to explain that the service is not intended for children, and we will delete the information unless we are required to keep it.
If you believe that a child has provided personal information to us, please contact customercare@nesic-ipo.com so that we can investigate and, where appropriate, delete the information. We take this responsibility seriously and we would rather remove information that should not be held than keep it for completeness.
Where a site visit or a cut-over sitting takes place at a location where children may be present, we ask that the client arranges supervision and that no personal information about a child is shared with the duty team unless it is strictly necessary and lawful.
Marketing and communications
We send marketing communications only where we have a lawful basis to do so. If you are an existing client, we may send you an update about a service that is closely related to the work we have already done for you, and you can opt out at any time. If you are not an existing client, we send marketing only with your consent.
Every marketing message includes a way to unsubscribe, and we honour an unsubscribe request promptly. We do not pass your contact details to another organisation for its own marketing. Service messages, such as a confirmation of a watch window or a reminder of a cut-over sitting, are not marketing and are sent as part of the service you have asked for.
If you would prefer to receive fewer messages, or to receive them by a different method, tell the duty team and we will update your preferences.
Third party links
This website may contain links to other websites that we do not control. This policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to read the privacy policy of any website you visit before you share personal information with it.
Where we link to a supplier or a partner, the link is provided for convenience rather than as an endorsement of that organisation privacy practice. If you are concerned about a link on our site, tell the duty team and we will review it.
Some of our clients may link to us from their own websites. In that case, the client website privacy policy governs the information that the client collects, and our policy governs the information that reaches us directly.
Changes to this policy
We review this policy at intervals and we update it when our practice changes or when the law requires it. When we make a material change, we will update the date at the foot of this page and, where appropriate, tell clients directly. We encourage you to check this page from time to time so that you are aware of the current version.
If a change affects how we use information that we already hold, we will explain the change and, where required, ask for your consent before the new use begins. We will not apply a new purpose to old information without a lawful basis to do so.
Older versions of this policy are kept in our records so that we can show what applied at a particular time. You can ask the duty team for a copy of an earlier version if you need one.
How to contact us
If you have a question about this policy or about how we handle your personal information, please contact us. The duty team at the Paya Lebar control room is the first point of contact, and the team will route your question to the person responsible for the response.
140 Paya Lebar Rd, #08-14 A-Z Bldg, Singapore 409015, Singapore (SG)
Email: customercare@nesic-ipo.com
Phone: +14093341347
If you are not satisfied with our response, you may have the right to complain to a data protection authority in the country where you live or work. We would welcome the chance to resolve the matter with you first, and we will cooperate fully with any authority that investigates a complaint.
This policy was last reviewed in 2026. It is provided in English, and the English version is the authoritative version.