Privacy Policy & Cookie Policy
1. Introduction
HiLe Packaging Solutions Pte Ltd (“HiLe”, “we”, “us”, “our”) takes personal privacy and data integrity seriously. This Privacy Policy explains how we collect, use, disclose, and protect personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.
This policy applies to all customers, suppliers, partners, students, job applicants, website visitors, and other stakeholders who interact with HiLe or access https://hilepack.com or any local HiLe website (together, the “Website”).
By accessing the Website or engaging with HiLe, you acknowledge that you have read and understood this Privacy Policy. Where conflict exists between applicable legal frameworks, the higher level of protection shall apply.
2. Data Controller Identity
The data controller responsible for your personal data is:
| Detail | Information |
| Company | HiLe Packaging Solutions Pte Ltd |
| Reg. No. | 200718373W |
| Address | 8 Boon Lay Way, #06-04, Tradehub 21, Singapore 609964 |
| General Email | contactus@hilepack.com |
| Website | https://hilepack.com |
For all data protection matters, please contact our designated Data Protection Officer (DPO) directly — see Section 17 below.
3. Personal Data We Collect
We collect only the minimum personal data necessary for the purposes described in this policy (data minimisation principle). The categories of personal data we may collect include:
3.1 Data You Provide Directly
- Name, email address, phone number, postal address
- Company name, job title, industry
- Login credentials (username and password — stored encrypted)
- Payment and billing information (processed via secure third-party payment processors)
- CV, work history, qualifications (for job applicants)
- Communications and correspondence you send to us
- Survey responses and feedback
3.2 Data We Collect Automatically
- IP address, browser type, device type, operating system
- Pages visited, time spent, referring URLs
- Cookie identifiers and analytics data (see Section 13 — Cookies)
- Session data and clickstream data
Note: IP addresses and cookie identifiers are considered personal data under GDPR and are treated accordingly under this policy.
3.3 Data From Third Parties
- Data shared by business partners, referrals, or recruitment platforms
- Publicly available professional data (e.g. LinkedIn) where relevant to a business relationship
4. Purposes of Processing
HiLe collects and uses your personal data only for the following specific, lawful purposes:
- To respond to and manage your enquiries, requests, or complaints
- To process and fulfil orders or service agreements
- To send marketing communications, newsletters, or event invitations—only with your prior consent (opt-in)
- To improve our Website and personalise your experience
- To process job applications and assess candidates
- To comply with applicable legal and regulatory obligations
- To conduct surveys or market research (where you have agreed to participate)
- To conduct security monitoring, fraud prevention, and audit activities
- To analyse website traffic and usage patterns (see Cookie Policy, Section 13)
We will not use your personal data for any new or incompatible purpose without informing you in advance and, where required by law, obtaining your consent.
5. Legal Basis for Processing
HiLe processes your personal data on the following legal bases under the PDPA and GDPR:
| Legal Basis | Application & GDPR Reference |
| Contractual Necessity | To fulfill requests such as responding to inquiries, processing orders, or managing job applications. (GDPR Art. 6(1)(b)) |
| Legitimate Interests | To improve our Website, analyze usage, personalize content, and send relevant marketing communications where you have not opted out. A Legitimate Interests Assessment (LIA) has been conducted and is available on request. (GDPR Art. 6(1)(f)) |
| Consent | For specific marketing purposes (e.g. newsletters), sharing data with third-party partners, or placing non-essential cookies. Consent is obtained via explicit opt-in and may be withdrawn at any time. (GDPR Art. 6(1)(a)) |
| Legal Obligation | To comply with applicable laws, such as retaining financial records, responding to regulatory requests, or reporting data breaches. (GDPR Art. 6(1)(c)) |
| Vital Interests | In exceptional circumstances where processing is necessary to protect life. (GDPR Art. 6(1)(d)) |
6. Data Minimisation & Accuracy
HiLe is committed to the principle of data minimisation. We collect only personal data that is adequate, relevant, and limited to what is necessary for the stated purposes.
We take reasonable steps to ensure personal data is accurate, complete, and up to date. If you believe any data we hold about you is inaccurate, please contact us to have it corrected (see Section 9 — Your Rights).
7. Automated Decision-Making & Profiling
Where HiLe uses analytics tools or personalisation features on the Website, this may involve automated processing of your data to tailor content or recommendations to your preferences. This constitutes profiling under GDPR Article 4(4).
HiLe does not make solely automated decisions that produce legal effects or similarly significantly affect you. All meaningful decisions involving your data are reviewed by a human.
You have the right to:
- Object to profiling for direct marketing purposes at any time (see Section 9)
- Request human review of any automated processing that affects you
- Obtain an explanation of any automated decision made about you
To exercise these rights, contact our DPO at dpo@hilepack.com.
8. Disclosure to Third Parties & Processors
HiLe does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described in this policy:
| Category | Examples & Purpose |
| IT & Cloud Infrastructure | Hosting providers, cloud storage, and IT support platforms (e.g. Microsoft Azure / Google Cloud) |
| Email & Marketing Platforms | Hosting providers, cloud storage, and IT support platforms (e.g. Microsoft Azure / Google Cloud) |
| Analytics | Website analytics tools (e.g. Google Analytics)—see Cookie section for details |
| Payment Processors | Third-party payment gateways for billing and invoicing (e.g. Stripe, PayPal) |
| Recruitment Platforms | Job board or HR platforms used for processing applications |
| Logistics & Fulfilment | Delivery and shipping partners for processing orders |
| Legal & Compliance | Professional advisers, including lawyers, auditors, and regulators where required by law |
| Social Media Platforms | Google, YouTube, LinkedIn, Twitter/X—via embedded content or advertising (see Cookie section) |
HiLe requires all third-party data processors to enter into written Data Processing Agreements (DPAs) that bind them to confidentiality obligations, data security standards, and compliance with the PDPA and all applicable data protection laws. Processors are permitted to use personal data only for the specific purposes authorized by HiLe.
9. Your Data Protection Rights
As a data subject under the PDPA and/or GDPR, you have the following rights regarding your personal data:
| Right | Description |
| Access | Request confirmation of whether we process your data and obtain a copy of it. |
| Rectification | Request correction of inaccurate or incomplete data. |
| Erasure | Request correction of inaccurate or incomplete data. |
| Restriction | Request that we limit the processing of your data in certain circumstances. |
| Portability | Receive your data in a structured, commonly used, machine-readable format, and transfer it to another controller. |
| Object | Object to processing based on legitimate interests or for direct marketing purposes—at any time, without needing to provide a reason for marketing objections. |
| Withdraw Consent | Withdraw consent at any time without affecting the lawfulness of prior processing. To unsubscribe from marketing emails, use the unsubscribe link in any email or contact us directly. |
| Automated Decisions | Request human review of automated decisions and profiling that significantly affects you. |
| Lodge a Complaint | File a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg (Singapore) or your relevant EU supervisory authority. |
To exercise any of the above rights, contact our DPO at dpo@hilepack.com or write to us at the address in Section 2. We will respond within 30 days of receipt (extendable by a further 30 days for complex requests, with notice to you).
10. Data Retention Periods
HiLe retains personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law. Specific retention periods are as follows:
| Data Category | Retention Period |
| Customer enquiries & communications | 3 years from last contact |
| Transaction & order records | 7 years from transaction date (statutory accounting & legal obligation) |
| Marketing / newsletter subscriptions | Until you unsubscribe or request deletion |
| Job applications | 12 months after recruitment decision, or longer with your explicit consent for future openings |
| Website analytics data | 26 months (aggregated and anonymised) |
| Security & incident logs | 3 years from date of incident or last access |
| Cookie consent records | 3 years from the date consent was given or withdrawn |
| Financial & tax records | 7 years in compliance with Singapore IRAS requirements |
At the end of each retention period, personal data is securely deleted or irreversibly anonymized. Anonymized data no longer constitutes personal data and may be retained for statistical analysis.
11. International Data Transfers
HiLe may transfer personal data to countries outside Singapore or the European Economic Area (EEA), including the United States and other jurisdictions where our service providers operate. Where such transfers occur, we ensure an equivalent level of protection through:
- Standard Contractual Clauses (SCCs) adopted by the European Commission, incorporated into our agreements with relevant service providers
- Data Privacy Framework (DPF) certification, where applicable and relied upon by participating service providers
- Binding Corporate Rules (BCRs) for intra-group transfers, where applicable
- PDPA adequacy assessments for transfers from Singapore to countries without equivalent protections
You may request further information about the specific safeguards in place for any international data transfer by contacting our DPO at dpo@hilepack.com.
12. Data Security
HiLe implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Encryption of personal data in transit (TLS/SSL) and at rest
- Role-based access controls limiting data access to authorised personnel only
- Regular security audits, vulnerability assessments, and penetration testing
- Staff training on data protection and security awareness
- Incident response procedures and a documented breach response plan
12.1 Data Breach Response
In the event of a personal data breach, HiLe will:
- Promptly assess the nature, scope, and impact of the breach
- Notify the Personal Data Protection Commission (PDPC) within 3 business days where the breach is notifiable under the PDPA
- Notify affected individuals without undue delay where the breach is likely to result in significant harm
- Where GDPR applies, notify the relevant supervisory authority within 72 hours of becoming aware
12.2 Your Responsibility
You are responsible for maintaining the confidentiality of your account credentials. HiLe will never ask for your password by email or phone. If you believe your account has been compromised, contact us immediately at contactus@hilepack.com.
13. Cookie Policy
HiLe uses cookies on https://hilepack.com and all local HiLe websites to optimise your experience and usage of the Website.
13.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites function more effectively and provide us with information about how visitors use the site. HiLe uses both session cookies (deleted when you close your browser) and persistent cookies (stored for a set period).
13.2 Cookie Consent
When you first visit our Website, a cookie consent banner is presented. You may:
- Accept all cookies (including analytics and marketing cookies)
- Accept only strictly necessary cookies
- Customise your preferences by cookie category
Your consent choice is recorded and stored for 12 months. You may change your cookie preferences at any time by accessing the cookie settings on our Website or clearing your browser cookies. Withdrawing consent does not affect any lawful processing carried out before withdrawal.
Strictly necessary cookies do not require consent, as they are essential for the Website to function. All other cookie categories require your prior consent.
13.3 Types of Cookies We Use
| Cookie Type | Purpose |
| Strictly Necessary | Essential for the Website to function. Cannot be disabled. Examples: session management, security tokens, load balancing. |
| Analytics & Performance | Help us understand how visitors use the Website. Data is aggregated and anonymised. Example: Google Analytics. |
| Functional | Remember your preferences and choices to personalise your experience. Example: language settings, form autofill. |
| Marketing & Targeting | Used by us and third parties to deliver relevant advertising. Require explicit opt-in consent. Examples: Google Ads, LinkedIn Ads. |
13.4 Third-Party Cookies
Our Website uses third-party cookies from the following platforms. We do not control these cookies. Please refer to each provider’s privacy policy for further information:
- Google Analytics — Google Privacy Policy: policies.google.com/privacy
- YouTube — Google Privacy Policy: policies.google.com/privacy
- Google Maps — Google Maps Terms: maps.google.com/help/terms_maps
- LinkedIn — LinkedIn Privacy Policy: linkedin.com/legal/privacy-policy
• Twitter/X — Twitter Privacy Policy: twitter.com/privacy
13.5 How to Block Cookies
You may block or delete cookies at any time through your browser settings. Note that blocking certain cookies may affect the functionality of parts of the Website. You may also install the Google Analytics Opt-Out Browser Add-On available at tools.google.com/dlpage/gaoptout.
14. Children’s Privacy
HiLe’s Website and services are not directed at children under the age of 16. We do not knowingly collect personal data from individuals under this age.
If we become aware that we have inadvertently collected personal data from a child under 16 without verified parental consent, we will delete such data promptly.
Parents or legal guardians who believe their child has provided personal data to HiLe should contact us immediately at contactus@hilepack.com or dpo@hilepack.com.
15. Do Not Call (DNC) Registry — Singapore
HiLe complies with the Do Not Call (DNC) provisions under Part IX of the PDPA. Before conducting any telemarketing calls, SMS, or fax marketing to Singapore telephone numbers, HiLe checks the DNC Registry to ensure compliance.
If you have registered your Singapore telephone number on the DNC Registry, you will not receive unsolicited telemarketing communications from HiLe unless you have given us clear written consent to contact you for marketing purposes.
To stop receiving marketing calls or SMS from HiLe, contact us at contactus@hilepack.com or reply STOP to any marketing SMS.
16. B2B & Employee Data
If you communicate with HiLe as an employee, representative, or agent of one of our customers, suppliers, or partners, please be aware that:
- HiLe collects and processes your professional contact details and communications for the purposes of managing the business relationship with your employer or organisation.
- The legal basis for such processing is typically contractual necessity or legitimate interests of HiLe in managing its commercial relationships.
- Special terms and conditions may apply as set out in the written agreement signed between HiLe and your employer.
- If you have questions about how your data is handled in a B2B context, please contact your employer’s privacy representative or our DPO directly.
17. Intellectual Property
All materials on the Website, including text, images, trademarks, designs, and graphic profiles, are the property of HiLe or our licensed partners. All use, except as required to use the Website, requires HiLe’s prior written approval.
Any use in violation of these terms may result in legal sanctions under applicable intellectual property laws.
18. Third-Party Website Links
The HiLe Website may contain links to third-party websites for your convenience and information. HiLe does not control those websites, their content, or their privacy practices. We recommend reviewing the privacy policy of any third-party website you visit.
HiLe is not responsible for the privacy practices or data protection standards of any linked third-party website.
19. Applicable Law & Jurisdiction
This Privacy Policy is governed by the laws of Singapore, including the Personal Data Protection Act 2012 (PDPA). Any disputes arising in connection with this policy shall be resolved in the general courts of Singapore, excluding its conflict of law rules.
Where HiLe processes personal data of individuals in the European Union or European Economic Area, HiLe additionally complies with the General Data Protection Regulation (EU) 2016/679 (GDPR), including upholding all applicable data subject rights. In cases of conflict between the PDPA and GDPR, the higher level of protection shall apply.
20. Policy Updates & Notifications
HiLe reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or business operations.
For material changes — including changes to the purposes of processing, legal bases used, or data subject rights — HiLe will:
- Provide advance notice of at least 14 days via email to affected data subjects
- Display a prominent notice on the Website homepage
- Update the version number and effective date at the top of this policy
For minor, non-material changes (such as formatting or clarifications), the updated policy will be published on the Website without prior notice. Continued use of the Website after the effective date of any update constitutes acceptance of the revised policy.
| Item | Details |
| Current Version | 2.0 |
| Effective Date | 22 June 2026 |
| Previous Version | 1.0 (March 2026) |
| Next Scheduled Review | June 2027 (annual review) |
21. Data Protection Officer (DPO)
HiLe Packaging Solutions Pte Ltd has designated a Data Protection Officer (DPO) in accordance with the PDPA and GDPR requirements.
| Detail | Information |
| DPO Name | Aaron Ng |
| Job Title | Data Protection Officer |
| dpo@hilepack.com | |
| Postal Address | 8 Boon Lay Way, #06-04, Tradehub 21, Singapore 609964 |
| Response Time | Within 5 business days of receipt of your enquiry |
The DPO is responsible for overseeing HiLe’s data protection strategy, monitoring compliance, conducting Data Protection Impact Assessments (DPIAs), and serving as the primary point of contact for data subjects and supervisory authorities.
For all data access requests, erasure requests, consent withdrawal, or complaints—please contact the DPO directly at dpo@hilepack.com rather than the general contact email.
22. General Contact
For general enquiries or feedback about this Privacy Policy:
| Channel | Details |
| contactus@hilepack.com | |
| Postal Address | 8 Boon Lay Way, #06-04, Tradehub 21, Singapore 609964 |
| Website | https://hilepack.com |
To file a complaint with the Singapore data protection regulator:
- Personal Data Protection Commission (PDPC) — www.pdpc.gov.sg
- Advisory hotline: 1800-PDPC-INQ (1800-7372-465)