Privacy notice

1. Who we are

RLG Global Pte. Ltd. is a private limited company registered in Singapore at 190 Woodlands Industrial Park E5, #10-06, Woodlands BizHub, Singapore 757516. We supply analytical reagents, advanced materials and laboratory consumables to research and industrial customers worldwide. Where this notice refers to a "Data Protection Officer", you can reach us at dpo@chem-end.com.

2. Information we collect

Information you provide. We collect data you give us directly — for example when you create an account, place an order, submit a sample request, contact sales, post a review, or ask a question. This typically includes: your name, work email, company, phone number, shipping and billing address, country, the use case for any sample, and any free-text content you submit.

Information collected automatically. When you use the site we record limited technical data: IP address, browser type and version, referring URL, pages viewed, and a small set of cookies required for the cart, sign-in session and admin login throttling. We do not currently run third-party analytics or advertising pixels. If we introduce them, we will list them here and seek consent where required.

Information from payment processing. We use Stripe for card processing. Card numbers are entered on Stripe's hosted page and never touch our servers; we receive only metadata (order ID, transaction status, the last four digits of the card, billing country, etc.).

3. How we use your information

• To create and operate your account, including magic-link sign-in.
• To fulfil orders, ship products, and provide certificates and documents.
• To review and respond to sample requests and customer enquiries.
• To publish reviews and Q&A you choose to submit (your name is shown; email and address are kept private).
• To protect against fraud, abuse and unauthorised admin access (login attempts are logged with IP).
• To meet legal, accounting, customs and dangerous-goods reporting obligations.
• To improve the catalogue and service quality based on aggregated, non-identifying usage patterns.

4. Who we share data with

We do not sell your personal data. We share it only with the following categories of recipients, and only to the extent needed to deliver our service:

• Payment processors — Stripe Singapore Pte. Ltd. for checkout and refunds.
• Infrastructure and storage — Alibaba Cloud (Singapore region) for database, object storage and email delivery; the database, uploaded files (CoA / SDS / product images) and outbound mail logs reside on these services.
• Shipping carriers and freight forwarders — for delivering ordered goods, including those carrying dangerous-goods classifications.
• Regulatory and customs authorities — where disclosure is legally required for export, REACH registration, hazardous-material declarations or tax filings.
• Professional advisers — auditors, lawyers and accountants, bound by confidentiality.

5. Cookies and similar technologies

We use a minimal set of first-party cookies — none for advertising:

• chemend_cart — stores the items in your shopping cart so they survive page reloads (~30 days).
• chemend_session — stores your signed-in session token after you click a magic link (default 30 days, HTTP-only).
• chemend_admin — only set if you sign in to the back office.

You can clear or block these cookies in your browser settings. Blocking chemend_session will sign you out; blocking chemend_cart will reset your shopping cart between visits.

6. International transfers

Our servers are located in Singapore. If you access the site from the European Economic Area, the United Kingdom, the United States or elsewhere, your data is transferred to and processed in Singapore. Singapore is recognised as providing a comparable level of data protection under the PDPA. Where data is shared with processors located in other jurisdictions, we put in place contractual safeguards equivalent to PDPA requirements (and the EU Standard Contractual Clauses where applicable).

7. How long we keep your data

We keep personal data only as long as necessary to provide the service and to meet legal, accounting and tax requirements. Typical retention periods are: orders and invoices — 5 years (Singapore tax records); marketing communications — until you unsubscribe; admin login logs — 12 months; sample requests — 24 months; reviews and Q&A — until you ask us to remove them, then deleted within 30 days.

8. Your rights

Under the PDPA and comparable laws, you may:

• request a copy of the personal data we hold about you;
• ask us to correct inaccurate or outdated information;
• withdraw consent for any processing based on consent;
• ask us to delete your data, subject to legal retention requirements (we cannot delete order records still within the statutory accounting window).

To exercise any of the above, email dpo@chem-end.com. We will respond within 30 days. If we cannot fulfil your request, we will explain why.

9. Security

We use TLS for all data in transit, store passwords as one-way hashes (where applicable), use signed JWTs for session cookies, and rate-limit admin login attempts. Database backups are encrypted at rest. No system is perfectly secure, however; if we become aware of a breach affecting your personal data we will notify you and the Personal Data Protection Commission as required under section 26D of the PDPA.

10. Children

Our products are intended for business customers and qualified researchers. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this notice

We may update this notice from time to time. Material changes will be flagged on the site and the "Last updated" date at the top will change. Continued use of the site after a change means you accept the updated notice.

12. How to contact us

Privacy enquiries: dpo@chem-end.com.
General enquiries: sales@chem-end.com.
Postal: RLG Global Pte. Ltd., 190 Woodlands Industrial Park E5, #10-06, Woodlands BizHub, Singapore 757516.