Privacy policy

Starlit Energy Pte. Ltd. ("Starlit", "we") runs starlitenergy.com. This policy explains what personal data we collect through this website, why, and the choices you have. It is written to meet Singapore's Personal Data Protection Act 2012 (PDPA), Australia's Privacy Act 1988 and Australian Privacy Principles, and the EU and UK General Data Protection Regulation (GDPR).

Who is responsible

Starlit Energy Pte. Ltd. (UEN 201924700Z), Singapore, decides how this data is used (the "controller" under the GDPR). Our Data Protection Officer answers every privacy question and request: [email protected].

What we collect

Contact and quote forms: your name, organisation, email address or WhatsApp number, country and the message you type. Report requests from our free tools: your email address, the tool you used and its inputs and results. If you tick the box for product news, we record that consent and its date.

Our free tools run in your browser. Nothing you enter is sent to us unless you ask for a report or a quote. A share link holds your inputs in the address itself, so only people you send it to can see them.

When you visit, our host Cloudflare processes technical data needed to deliver and protect the site: IP address, browser type, pages requested and time. Our visitor statistics are cookieless and count visits in aggregate; they do not identify you or follow you to other sites.

Why we use it, and on what basis

To answer your request and prepare a quote, which are steps you ask us to take before a possible contract. To send product news, only if you opted in; you can withdraw at any time. To keep the site secure, stop spam and understand which pages are useful, which is our legitimate interest. To meet legal, tax and accounting duties. We never sell your data and we do not use it for advertising or automated decisions about you.

Who handles it for us

Cloudflare, Inc. hosts the site and provides security, spam protection (Turnstile) and visitor statistics. EmailJS, Inc. delivers report and form emails. Our business email provider stores our correspondence. Each acts only on our instructions under a data processing agreement. We share data with authorities only where the law requires it.

Transfers outside your country

We are based in Singapore and our service providers may process data in Singapore, the United States, the European Union and other countries. Where data leaves the EU, UK or Australia, we rely on safeguards the law recognises, such as the European Commission's standard contractual clauses and contractual protections comparable to the PDPA and the Australian Privacy Principles.

How long we keep it

Enquiries and quote requests: up to two years after our last contact, unless they lead to a contract. Contract and invoice records: as long as tax and company law require, usually five to seven years. Product news consent: until you withdraw it. Report emails: up to one year. Security logs: for the short periods Cloudflare sets.

How we protect it

The site runs on encrypted connections only (HTTPS with HSTS). Access to our mailboxes and providers is limited to the people who need it and protected by multi-factor sign-in. If a data breach is likely to harm you, we will notify you and the relevant authority as the law requires.

Your rights

You can ask to access your data, correct it, delete it, restrict or object to how we use it, receive a copy in a common format, and withdraw consent. You can also contact us without giving your name, where that is practical. We reply within 30 days and do not charge for reasonable requests. Write to [email protected].

If you are not satisfied with our answer, you can complain to Singapore's Personal Data Protection Commission (pdpc.gov.sg), the Office of the Australian Information Commissioner (oaic.gov.au), or the data protection authority where you live or work in the EU or UK.

Cookies

We set no advertising, tracking or profiling cookies, so you will not see a cookie banner. Cloudflare may set strictly necessary security cookies to tell people from bots and to protect our forms. These do not identify you and are exempt from consent under EU and UK law.

Marketing messages

We send product news only to people who opted in, and every message has a way to stop. We do not send marketing to Singapore telephone numbers without consent, in line with the PDPA Do Not Call rules.

Children

This website is for businesses and public bodies. It is not aimed at people under 18 and we do not knowingly collect their data.

Changes

We will post any change on this page with a new date. This policy is published in English; translations of the site do not change it.

Last updated 16 October 2026.