Privacy Policy — HCS Scientific
Last updated: August 2026
HCS Scientific & Chemical Pte Ltd (UEN: 200305150H) runs this website and the Customer Portal. This policy explains, in plain English, what we collect, why, and what you can say no to.
We only collect what we need to run your account. We do not sell your data, we do not use advertising cookies, and we do not share your data with third parties for marketing.
What we collect and why
| Data | Purpose | Can you decline? |
|---|---|---|
| Session token | Keep you logged in | No — portal requires this |
| Login time and IP address | Fraud detection and security | No — security essential |
| Password change events | Account security audit | No — security essential |
| Page visits within portal | Improve our service | Yes — choose "Essential only" on cookie banner |
| Document downloads | Improve our service | Yes — choose "Essential only" |
How long we keep it
Security logs (login events, IP addresses): 12 months.
Login sessions: expire after 12 hours.
Orders and documents: 7 years, as Singapore business record rules require.
Cookies
hcs_sc_session — strictly necessary. Keeps you logged in.
hcs_consent — remembers your privacy choice so we don't ask again. Change it anytime with "Cookie Settings" in the footer.
Choosing "Essential only" never breaks the Portal — it just switches off optional usage analytics.
Your rights (PDPA)
Under Singapore's Personal Data Protection Act you can ask to see the personal data we hold about you, ask us to correct it, or withdraw your consent for optional uses.
Email our Data Protection Officer at dpo@hcs-lab.com. We aim to respond within 30 days.
Full portal conditions are in our Terms of Use.