Last updated: 11 August 2026
The short version. We collect only what we need to diagnose your device and contact you about it. We do not sell your data. We do not look through recovered files beyond what is needed to verify a recovery. When a job closes, your media and any working copies are returned to you or securely destroyed.
1. Who we are
This policy explains how CBL Data Recovery Singapore ("CBL", "we", "us") handles personal data, in line with Singapore's Personal Data Protection Act 2012 (PDPA).
CBL Data Recovery Singapore
6 Harper Road, Leong Huat Building #05-02, Singapore 369674
Telephone: +65 6588 0261
Email: [email protected]
2. What we collect
2.1 Information you give us
When you submit an enquiry, call us, or bring in a device, we collect your name, phone number, email address, the type of media, a description of the problem, your preferred contact time, and any comments you add.
2.2 Data held on your storage media
This is the part that matters most. A device brought to us for recovery will usually contain your personal files — documents, photographs, messages, financial records, and sometimes the personal data of other people.
- We access this data only so far as needed to diagnose the fault, carry out the recovery, and verify that recovered files open correctly.
- We do not read, copy, index, or extract your files for any other purpose.
- We do not use your data to train any system, and we do not disclose it to third parties for marketing.
2.3 Website data
Standard server logs (IP address, browser type, pages requested) may be retained for security and diagnostics.
This site also uses two Google services:
- Google Analytics — measures how the site is used: which pages are viewed, how you arrived (search, a link, or an advert), your approximate location at city level, and your device and browser type. We use it to understand which pages genuinely help people and which do not. We do not use it to identify you.
- Google Ads conversion tracking — tells us when an enquiry or a phone call came from one of our adverts, so we know which adverts are worth paying for. If you submit the enquiry form, your email address and phone number are converted by Google's tag, in your browser, into an irreversible code before being sent — so a conversion can be matched without your details leaving this site in readable form.
Both services set cookies in your browser. You can block or delete them in your browser settings, or install Google's opt-out add-on, and every part of this site will continue to work normally. Data collected by these tools is processed by Google under Google's privacy policy.
Neither tool has any access to the contents of a device you send us for recovery. That is governed entirely by section 2.2, and nothing on your media is ever passed to an analytics or advertising system.
3. How we use it
- To diagnose your device and quote for the work
- To contact you about your job, including the outcome of the free diagnosis
- To return your data and media to you
- To keep records required for accounting, warranty and legal purposes
We rely on your consent, given when you submit an enquiry or hand over a device. You may withdraw consent at any time (see section 7), though we may then be unable to continue the work.
4. Who has access
Access is limited to CBL engineers and staff working on your job. Where a recovery needs a specialist process we do not perform in-house, we will tell you before your media leaves our lab, and any such partner is bound by equivalent confidentiality obligations.
We may disclose data where we are legally required to — for example under a court order or a lawful request from Singapore authorities.
5. Retention and destruction
- Recovered data is held on our systems only for as long as you need to collect it and confirm it is complete.
- Unless you ask us in writing to hold it longer, working copies are securely erased after the agreed collection period.
- Your original media is returned to you, or destroyed at your written request.
- Enquiry and job records are retained for as long as needed for business and statutory purposes, then deleted.
6. Security
Media and recovered data stay within our premises at 6 Harper Road. Access is restricted to authorised staff. Work is carried out on isolated systems, and recovered data is not placed on public cloud storage without your instruction.
No system is perfect. If a breach occurs that is likely to result in significant harm, we will notify you and the Personal Data Protection Commission as required under the PDPA.
7. Your rights under the PDPA
You may ask us to:
- Tell you what personal data we hold about you and how it has been used
- Correct anything inaccurate
- Withdraw your consent to our continued use of your data
- Delete data we no longer need to retain
Send any request to [email protected] or call +65 6588 0261. We will respond as soon as reasonably possible.
8. Ownership of the data on your device
We work only on media you own or are authorised to access. We may ask for proof of ownership, particularly for encrypted, locked, or account-protected devices, and we will not help anyone access a device that appears to belong to someone else.
9. Changes
If this policy changes, the revised version will be posted here with a new "last updated" date.
10. Contact
Questions about this policy, or about how your data was handled, can go to our data protection contact:
CBL Data Recovery Singapore
6 Harper Road, Leong Huat Building #05-02, Singapore 369674
Telephone: +65 6588 0261
Email: [email protected]