Privacy Policy

1. Introduction

RockTainer (“we”, “us”, or “our”) is committed to protecting the privacy and personal data of our clients, partners, website visitors, and any other individuals who interact with us. This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and other applicable laws.

By using our website at www.rocktainer.com, engaging our services, or communicating with us, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are & How to Contact Us

RockTainer is a container trading and logistics company registered in Singapore. We are the data controller responsible for your personal data collected through our business operations.

3. Personal Data We Collect

We collect only the personal data necessary for the purposes described in this Policy. This may include:

3.1 Identity & Contact Information

• Full name, job title, and company name
• Business email address and telephone number
• Business postal address

3.2 Transaction & Commercial Data

• Order history, quotation requests, and contract details
• Billing and payment information (we do not store full card details)
• Container and cargo specifications provided for service purposes
• Shipping routes, depot locations, and logistics instructions

3.3 Communications Data

• Emails, messages, and correspondence sent to or received from us
• Records of telephone calls where permitted by law
• Enquiries submitted via our website contact form

3.4 Website & Technical Data

• IP address, browser type, and operating system
• Pages visited, time spent on site, and referring URLs
• Cookie identifiers and session data (see Section 9 on Cookies)

3.5 Data We Do Not Collect

We do not knowingly collect sensitive personal data such as national identity numbers, biometric data, health information, or data from individuals under the age of 18, unless specifically required by law and with appropriate safeguards.

4. How We Collect Your Data

• Directly from you — when you submit an enquiry, request a quote, sign a contract, or communicate with our team.
• Automatically — when you visit our website, through cookies and analytics tools.
• From third parties — including business directories, referrals from partners, shipping agents, or depot operators acting on your behalf.
• From public sources — such as company registries, trade publications, or LinkedIn, where relevant for business purposes.

5. How We Use Your Personal Data

We use personal data only for legitimate, specified purposes. The table below sets out our primary uses and the legal basis for each:

6. How We Share Your Data

We do not sell, rent, or trade personal data to any third party for marketing purposes. We may share data with the following categories of recipients, strictly on a need-to-know basis:

6.1 Service Partners

Depot operators, freight agents, rail carriers, customs brokers, and logistics partners who assist in delivering our services. These parties are bound by confidentiality obligations and are only permitted to process data as instructed by us.

6.2 Professional Advisors

Lawyers, accountants, insurers, and auditors where necessary for compliance, risk management, or dispute resolution.

6.3 Regulatory & Government Authorities

Customs authorities, port operators, trade regulators, or law enforcement where required by applicable law or court order.

6.4 Technology Providers

Cloud hosting, email, CRM, and analytics platforms that process data on our behalf under data processing agreements ensuring equivalent protection standards.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

7. International Data Transfers

RockTainer operates a global network spanning Europe, North America, South America, the Far East, South East Asia, Africa, the Middle East, and Oceania. Data may be transferred to and processed in countries outside Singapore in connection with service delivery.

Where we transfer personal data internationally, we ensure that appropriate safeguards are in place, such as contractual data protection clauses, to protect your data to a standard equivalent to that required under Singapore law.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

• Client transaction records: 7 years from the date of the last transaction (for tax and legal compliance)
• Contract documents: Duration of the contract plus 7 years
• General correspondence: 3 years from the date of last contact
• Website analytics data: 24 months on a rolling basis
• Marketing contact lists: Until consent is withdrawn or 2 years of inactivity, whichever is earlier

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Cookies & Website Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytics. The types of cookies we use include:

• Essential Cookies: Required for the website to function correctly. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our site (e.g. page visits, time on site). We use anonymised data only.
• Preference Cookies: Remember your settings and preferences for future visits.

You may control or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect website functionality. We do not use cookies for targeted advertising or profiling.

10. Your Rights Under the PDPA

Under the Singapore Personal Data Protection Act and applicable laws, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact us at info@rocktainer.com. We will respond within 30 days. We may need to verify your identity before processing your request.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• Encrypted transmission of data using TLS/SSL protocols on our website
• Access controls ensuring that personal data is accessible only to authorised personnel with a legitimate need
• Regular review of our data handling practices and security posture
• Confidentiality obligations for all employees and contractors who handle personal data

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to contact us promptly if you believe your personal data may have been compromised.

12. Third-Party Links

Our website may contain links to external websites operated by third parties. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit, as we have no control over their data practices and accept no responsibility for them.

13. Marketing Communications

With your consent, we may send you stock reports, market updates, service announcements, and promotional information by email. You may unsubscribe from these communications at any time by clicking the unsubscribe link in any email or by writing to info@rocktainer.com.

We will not use your personal data for unsolicited marketing or share it with third parties for their own marketing purposes.

14. Data Breach Notification

In the unlikely event of a data breach that is likely to cause significant harm to affected individuals, we will notify the Personal Data Protection Commission (PDPC) and the affected individuals within the timeframes prescribed under the PDPA Mandatory Data Breach Notification obligation. We will also take prompt steps to contain, assess, and remediate any breach.

15. Children's Privacy

Our services are intended for business use only and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it promptly.

16. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The latest version will always be available at www.rocktainer.com. We encourage you to review this page periodically. Where changes are material, we will notify affected individuals by email or a prominent notice on our website.

Continued use of our services after publication of an updated Policy constitutes your acknowledgement of the changes.