Last updated: 23 October 2026
Hello! This page explains what personal data Enoch Surfaces collects when you visit enochsurfaces.com, fill in one of our lead forms on Facebook or Instagram, or get in touch with us. It also explains why we collect it and the choices you have. We’ve tried to keep it short and in plain English. If anything is unclear, just ask us. Our contact details are at the end.
We follow Singapore’s Personal Data Protection Act 2012 (PDPA).
1. Who we are
Enoch Surfaces Pte. Ltd. (“Enoch Surfaces”, “we”, “us”)
Registered office: 8 @ TradeHub 21, 8 Boon Lay Way, #11-14, Singapore 609964 (showroom at #11-15)
Email: info@enochsurfaces.com
Phone / WhatsApp: +65 8918 2084
UEN: 202519923C
2. What we collect
When you fill in an enquiry form on our website
Our enquiry forms are on the homepage, Contact, Homeowners, Our Work and Space Calculator pages. They ask for:
- your name (first and last)
- your email address
- your phone number
- “I’m a…”, on the homepage and Space Calculator forms only: homeowner, interior designer, contractor or other trade
- “How did you find out about us?”: Instagram, Facebook, Google, referred, or others
- “Tell us more about your project”: anything you choose to tell us, such as the area, rooms or timing
Our Trade page has a trade enquiry form. It asks for your name, email address, WhatsApp number, your role, the approximate area in sqft, how you found us, and a message.
Each form also sends us a hidden “campaign attribution” note. It records how you reached our website, for example “Google Ads, campaign X, keyword Y”, along with the page you first landed on and the website that referred you. It doesn’t contain anything you type.
Please don’t include sensitive information, such as NRIC numbers or health details, in the message box. We don’t need it.
When you fill in a lead form on Facebook or Instagram
Some of our ads on Facebook and Instagram have a short form you can fill in without leaving the app. When you submit one, Meta passes us:
- the contact details in the form: your name and phone number (Meta may pre-fill these from your profile, and you can change them before you submit)
- your answers to our questions, such as your property type, the area to be floored and when your renovation starts
- which ad and form you used, and when you submitted it
The form runs on Meta’s platform, so Meta also handles this information under its own privacy policy. Meta knows that you submitted the form and uses that to report to us on how our ads performed.
When you message, call or email us
- WhatsApp: our WhatsApp number is +65 8918 2084. The WhatsApp buttons on our site open WhatsApp with a ready-made message. It ends with a short code in brackets, such as “(G1)”. The code tells us roughly how you found us (for example G = Google Ads, S = a search engine, D = typed in directly) and which page you were on. If you tap “Ask about this estimate on WhatsApp” on our Space Calculator, the ready-made message also includes your estimate: the product, the area and the estimated cost. You can delete or change the message before you send it. Once you send it, we receive your WhatsApp name, number and anything you write or send us, such as photos or floor plans.
- Phone and email: if you call or email us, we receive your number or email address and whatever you tell us.
- When you tap a WhatsApp, phone or email link, our website notes that a tap happened, along with the page and how you reached the site. It doesn’t record who you are. See “Click Log” below.
When you browse the website
We, and the services we use, collect some technical information automatically:
- the pages you visit, how long you stay, and the buttons you tap
- your device type, browser, screen size and approximate location (country or city)
- how you arrived: the website, search engine or ad that brought you, including campaign and keyword details from ad links
- an ad click reference (a “click ID” such as a Google
gclid) if you arrived from one of our ads
We collect most of this through cookies and similar technologies. Section 8 lists them.
Online orders and accounts
Our product pages are a catalogue. You can’t currently buy or pay online through the website, and we don’t collect payment card details on it. The website has a “My account” sign-in page, but you don’t need an account to browse or send us an enquiry.
3. Why we use it
We use your personal data to:
- reply to your enquiry, however you sent it (website form, Facebook or Instagram lead form, WhatsApp, phone or email), prepare quotes, arrange samples or showroom visits, and follow up on that enquiry and your project
- deliver what you asked for, such as quotes, supply, delivery and installation. Where needed, we may share the relevant details with an approved installer or delivery partner (see section 5)
- keep a record of enquiries, in a private lead record (a spreadsheet in our Google account), so we can track each enquiry and make sure nobody is missed
- understand which of our ads, pages and channels bring enquiries, so we spend our advertising budget sensibly and improve the website. Our ad platforms (Google and Meta) may receive limited signals that an enquiry came from one of their ads, such as a Google click ID or the fact that a lead form was submitted. We don’t send them your messages
- keep our website working and secure, and prevent spam
- meet legal and accounting obligations
We don’t sell your personal data.
Marketing messages: we only contact you to reply to your enquiry and help with your project. We don’t send newsletters or promotional WhatsApp or SMS messages, and we won’t send you marketing messages unless you agree to receive them. Filling in a form or messaging us doesn’t sign you up for anything. If we ever start sending marketing messages, we’ll ask for your consent first and follow Singapore’s Do Not Call rules.
4. Your consent, and how to change your mind
- When you send us a website form, a Facebook or Instagram lead form, a message, a call or an email, you agree to us using your details to respond to you and handle your enquiry or project.
- Website measurement: when you first visit, a small notice at the bottom of the screen explains that we use cookies to see how you found us.
- Measurement is on unless you tap “No thanks”.
- Tapping “OK” or closing the notice just hides it.
- Tapping “No thanks” deletes our “how you found us” record from your browser and stops us saving a new one. It also tells Google’s tags not to use advertising or analytics cookies for you.
- We remember your choice for 12 months. After that, the notice appears again.
- You can change your choice at any time with the “Cookie choices” link at the bottom of each page, or by clearing your browser’s cookies for our site.
- Withdrawing consent: you can withdraw consent for any use of your personal data by emailing info@enochsurfaces.com, addressed to our Data Protection Officer, or by messaging us on WhatsApp at +65 8918 2084. We’ll confirm and act on it within a reasonable time. If you withdraw consent, we may not be able to keep helping with your enquiry or project, and we’ll tell you if that’s the case. Withdrawing doesn’t affect anything we did before.
5. Who we share it with
We share personal data only with service providers who help us run our business, and only as much as they need:
| Provider | What for | Where data may be processed |
|---|---|---|
| Google (Google Workspace email, Google Analytics 4, Google Ads, Google Tag / Site Kit, Google Sheets, Google Fonts) | Receiving form notifications and emails; website analytics; measuring which ads lead to enquiries; keeping our lead record and click log; showing our website fonts | Singapore and other countries, including the USA |
| Meta (Facebook, Instagram and WhatsApp) | Lead forms you fill in on Facebook or Instagram; measuring how our Facebook and Instagram ads perform; messages you send us on WhatsApp | Other countries, including the USA |
| Crazy Egg | Heatmaps and usage analytics, to understand how visitors use our pages (for example, where people tap and how far they scroll) | USA |
| Vodien (website hosting) | Hosting our website, its database and backups | Singapore |
| WordPress plugins that run on our own website (WPForms, WooCommerce, WP WhatsApp) | Running the forms, catalogue and WhatsApp button | On our hosting server, and if form-entry backup is enabled, by WPForms (USA) |
Meta handles lead forms and WhatsApp messages under its own privacy policies: Meta Privacy Policy and WhatsApp Privacy Policy.
We may also share personal data:
- with approved installers or delivery partners, only the details they need (such as your name, phone number and site address) and only when that’s needed for your enquiry, such as a quote, delivery or installation
- with our professional advisers (e.g. accountants, lawyers)
- where the law requires it, or to protect our rights
We do not use a Meta (Facebook/Instagram) advertising pixel, TikTok pixel or similar on this website. Our Facebook and Instagram lead forms run inside Meta’s apps, not on this website. The Facebook, Instagram and TikTok icons on our site are plain links to our pages.
6. Sending data overseas
Some of our providers (such as Google, Meta and Crazy Egg) store or process data outside Singapore. When this happens, we take reasonable steps to make sure your data stays protected to a standard comparable to the PDPA, for example by relying on the providers’ standard data protection terms.
7. How long we keep it
We keep personal data only for as long as we need it for the purposes above, or as the law requires. Then we delete it or make it anonymous.
| Data | How long |
|---|---|
| Enquiries (website forms, Facebook and Instagram lead forms, WhatsApp chats, emails, and their entries in our lead record) that don’t become a project | 2 years after our last contact |
| Customer and project records, invoices | 5 years after the project, for tax and accounting |
| “How you found us” record in your browser | 90 days from your first visit (or until you tap “No thanks” or clear your browser) |
| Click Log (taps on WhatsApp/phone/email from Google Ads visitors) | 24 months |
| Google Analytics data | As set in Google Analytics (up to 14 months) |
Meta keeps its own copy of lead form submissions and WhatsApp messages under its own policies.
8. Cookies and similar technologies
Cookies are small files that a website saves in your browser. “Local storage” and “session storage” work in a similar way. Here’s what we found on our website on 21 October 2026:
| Name | Set by | What it does | How long |
|---|---|---|---|
enoch_campaign_session (local storage, with a session-storage copy) | Enoch Surfaces | Remembers how you first found us (e.g. Google Ads, campaign, keyword, search engine, another website), so we can tell which channels bring enquiries. It’s replaced only if you arrive from a new ad click. Not stored if you tap “No thanks”. | 90 days |
enoch_consent | Enoch Surfaces | Remembers your choice on the cookie notice (“OK” or “No thanks”) | 12 months |
_ga, _ga_9C1KNLXXJP | Google Analytics 4 | Count visits and see how visitors use the site, using a random ID (not your name) | Up to 13 months (400 days) |
_gcl_aw, _gcl_ls (local storage) | Google Ads / Google tag | Remember a Google Ads click, so an enquiry can be credited to the ad that led to it | 90 days |
_gcl_au | Google Ads | Measure ad conversions | 90 days |
_ce.s and possibly other _ce.* or cebs cookies | Crazy Egg | Group your page views into one visit, for heatmaps and usage analytics | Up to 12 months (365 days) |
sbjs_migrations, sbjs_current, sbjs_current_add, sbjs_first, sbjs_first_add, sbjs_udata | WooCommerce (order attribution) | Note the source of a visit, in case an order is placed | End of browser session |
sbjs_session | WooCommerce (order attribution) | Marks an active visit | 30 minutes |
wpEmojiSettingsSupports (session storage) | WordPress | Checks whether your browser can show emoji | End of browser session |
wordpress_*, wp-settings-*, woocommerce_*, wp_woocommerce_session_* | WordPress / WooCommerce | Keep you logged in, or remember a cart, only if you sign in or use the cart | Session to 2 days, or longer if you tick “Remember me” |
Our website also loads fonts from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google.
Your choices:
- tap “No thanks” on our cookie notice
- block or delete cookies in your browser settings (the site still works, but we won’t know how you found us)
- use Google’s opt-out tools: Google Analytics opt-out add-on and My Ad Center
- for Facebook and Instagram ads, use your ad preferences in your Facebook or Instagram settings
The Click Log
When a visitor who arrived from one of our Google Ads taps a WhatsApp, phone or email link, we add a line to a private spreadsheet. The line records:
- the time
- the channel (WhatsApp, phone or email)
- the source code (e.g. G1)
- the traffic source
- the ad campaign and keyword
- the page
- whether a Google click ID was present (“Y” or “N”)
It does not record your name, number, email, IP address or messages. We use it to match enquiries to the ads that led to them, so we know which ads are worth paying for. A copy is kept on our website server, and the spreadsheet is in our Google account.
9. Keeping your data safe
We take reasonable security measures to protect personal data:
- our website uses HTTPS encryption
- access to our email, website and spreadsheets is limited to staff who need it, and protected by passwords and, where available, two-step verification
- our forms have spam protection
No method of sending or storing data is 100% secure, but we work hard to protect yours. If a data breach is likely to cause you significant harm, we’ll notify you and the Personal Data Protection Commission as the PDPA requires.
10. Seeing, correcting or deleting your data
You can ask us:
- for a copy of the personal data we hold about you, and how we’ve used or disclosed it in the past year
- to correct anything that’s wrong or out of date
- to delete your personal data. We’ll delete it unless we need to keep it by law (for example, invoices for tax), and we’ll tell you if that’s the case
Email info@enochsurfaces.com with your request, addressed to our Data Protection Officer. You can also message us on WhatsApp at +65 8918 2084 to ask. We may need to check your identity first. We’ll reply within 30 days. If we need longer, we’ll tell you when to expect a response. For access requests, we may charge a reasonable fee to cover our costs, and we’ll tell you the amount before we proceed. There’s no fee for corrections.
If you filled in a Facebook or Instagram lead form, deleting the details we hold doesn’t delete Meta’s copy. You can manage that through your Facebook or Instagram settings and Meta’s privacy policy.
11. Children
Our website and services are meant for adults. We don’t knowingly collect personal data from children under 13. If you think a child has sent us their details, please let us know and we’ll delete them.
12. Changes to this policy
We may update this policy from time to time, for example when we change how our website works. The “Last updated” date at the top will always show the latest version. If the changes are significant, we’ll make them clear on our website.
13. Contact us / Data Protection Officer
If you have any questions about this policy or your personal data, or want to make a request or complaint, please contact our Data Protection Officer:
Data Protection Officer, Enoch Surfaces Pte. Ltd.
Email: info@enochsurfaces.com
Phone / WhatsApp: +65 8918 2084
Address (registered office): 8 @ TradeHub 21, 8 Boon Lay Way, #11-14, Singapore 609964 (showroom at #11-15)
If you’re not satisfied with our reply, you can contact Singapore’s Personal Data Protection Commission at www.pdpc.gov.sg.