Privacy Policy

How Sohwatt LLP handles your personal data when you enquire about, or use, our hosting and IT services.

Last updated: 2 November 2026

Who we are

Sohwatt LLP is a Singapore-based professional IT services provider, founded in 2019. We provide Managed Domain Hosting, Personalized Email Hosting, Web Hosting, Cloud Backup Hosting, MacOS / iOS and Windows OS support, and Web Design & Development.

This policy covers two different kinds of information, and it helps to keep them apart. The first is information about you as our customer, such as your name and billing details, which we need to run your account. The second is content you store in services we provide, such as emails and backup files. That content remains your data. We access or process it only as necessary to provide the services you have requested.

Data Protection Contact

For privacy and data-protection matters, please contact:

Data Protection Contact
Sohwatt LLP
privacy@sohwatt.com.sg

Privacy-related requests, including access and correction requests, should be sent to this address.

What information we may collect

We may collect information that is necessary to provide and administer our services, including:

• your name;
• your email address;
• your telephone or other contact information;
• billing and transaction information;
• company or organisation information, where applicable;
• information required for domain registration;
• technical information you supply during a support request; and
• information generated when you interact with our website or services.

We do not store credit or debit card details.

Why we use your information

We use personal information for legitimate purposes associated with providing our services, including:

• creating and administering customer accounts;
• providing the services you have purchased or requested;
• domain registration;
• billing and payment administration;
• technical support;
• communicating with you about your services;
• maintaining service security and reliability;
• troubleshooting;
• fulfilling legal and regulatory obligations; and
• maintaining necessary business and accounting records.

Domain registration and NRIC numbers

We may ask for your NRIC number only where it is necessary for domain registration or to satisfy an applicable domain registry requirement. For example, a .SG domain requires a Singaporean or Singapore-registered company, and a .COM.SG domain requires a Singapore-registered company.

We do not collect or retain photocopies or photographs of NRICs for this purpose. An NRIC number, where collected, is used only for the registration process, and we do not retain it after it is no longer required for that purpose. NRIC numbers do not form part of our normal customer records.

Email and content you host with us

We provide email services through different service providers. Your mailbox contents are not routinely accessed by our personnel.

Our personnel may access your mailbox only when you explicitly authorise the access for support or troubleshooting, and you provide any credentials required to perform the requested work. More generally, content you store in email, hosting or backup services remains your data, and we access or process it only as necessary to provide the requested services.

Backup services and encryption

Our Cloud Backup Hosting service provides daily offsite backups. Backup infrastructure may be located in the United States.

If you encrypt backup data at source on your own server and we do not possess the encryption keys, our personnel cannot decrypt the contents of those backups. This does not mean encrypted backup data falls outside privacy and data-protection requirements: we still handle it as customer data and protect it as described in this policy.

Overseas processing

Your personal data and customer data may be processed or stored outside Singapore, including in the United States. Where we transfer personal data overseas, we take appropriate steps to ensure it receives a standard of protection comparable to that required under Singapore's Personal Data Protection Act (PDPA).

Remote technical support

When you ask us for technical support, we may remotely access your computer or device, with your permission. During a support session, our personnel may be able to view information displayed on, or accessible from, your device. We use that access only as necessary to provide the support you requested.

Our website and analytics

Our website uses Cloudflare for website infrastructure and analytics (Cloudflare Analytics). When you visit our website, technical information relating to your visit may be processed, such as IP and network information, browser and device information, pages visited, and similar technical information, where applicable. This information is used to run and understand the website. It is not used for behavioural advertising, and we do not use customer information for behavioural advertising.

Marketing

We do not currently send promotional or marketing emails, SMS or WhatsApp messages to customers or prospects.

How long we keep information

We keep personal data only for as long as needed for the purposes described in this policy, or as required by law.

When a service is terminated, active customer and service data will be removed as soon as reasonably practicable when it is no longer required. Residual copies may continue to exist within backup systems. Those copies are not kept deliberately for a set period after termination; they age out automatically as part of our normal backup rotation. Depending on the backup cycle, complete removal from backup systems may take up to 12 months.

If you require deletion by a particular date, you may submit a written request to privacy@sohwatt.com.sg. Such requests will be assessed based on technical feasibility, applicable legal or regulatory requirements, and legitimate business or record-retention requirements. We cannot promise guaranteed immediate deletion in every case.

Accounting and customer records

Invoices, transaction records and other records required for accounting or audit purposes may continue to be retained after a service ends. Relevant accounting records will generally be retained for at least five years where required by Singapore law or regulatory requirements. This does not mean all of your information is automatically retained for five years; it applies only to records we have a legitimate or legal reason to retain.

Security

Sohwatt uses reasonable administrative, technical and organisational measures to protect personal data in its possession or control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. No system can be guaranteed completely secure, and we do not claim otherwise.

Access and correction

Under Singapore's PDPA, you may contact us about your personal data, including asking to access or correct personal data we hold about you, where applicable. Please send requests to privacy@sohwatt.com.sg. Requests will be handled in accordance with applicable law, and not every request can automatically be fulfilled, for example where we are required by law to retain certain records.

Changes to this policy

We may update this policy when our services, practices or legal obligations change. The version published on this page is the current version.