GDPR Statement

Spex Asia GDPR Privacy Notice

1. Introduction / Who We Are

Spex-Asia Ltd (“we”, “us”, “our”) is committed to protecting the personal data of individuals in the European Union (EU) and European Economic Area (EEA), and to fulfilling our obligations under the General Data Protection Regulation (GDPR).

2. What Personal Data We Collect

We may collect the following personal information:

  • Name
  • Job title
  • Business email address
  • Business telephone number
  • Company name
  • Other information you may provide when contacting us (e.g. inquiry details)

We generally do not collect sensitive data (e.g. health, race, religion) unless explicitly provided.

3. Legal Bases for Processing

We process personal data only when we have a valid legal basis, including:

  • Consent — when you sign up, opt in to receive marketing or communications.
  • Legitimate Interest — for B2B outreach or cold contact, provided that we conduct a balancing
    test ensuring your rights are respected.
  • Performance of Contract / Pre-contractual Steps — if you engage us for services.
  • Legal Obligation — when required by applicable laws.

4. Purposes of Processing

We use personal data for:

  • Providing information, support, proposals, and responses to inquiries
  • Marketing and business development
  • Sending newsletters, marketing emails (where consent is given)
  • Improving our website, services, and user experience
  • Legal, compliance, or audit obligations

5. Recipients / Sharing with Third Parties

We may share data with:

  • Service providers (e.g. email systems, CRM, hosting) under confidentiality
  • Affiliates or partners when necessary
  • Authorities, if required by law

We do not sell your personal data to third parties.

6. International Transfers

If we transfer your data outside the EU/EEA, we will use appropriate safeguards (e.g. standard
contractual clauses) in accordance with GDPR.

7. Retention

We retain personal data only for as long as necessary to fulfill the purposes above or as required by law. When no longer needed, data is securely deleted or anonymized.

8. Your Rights Under GDPR

You have the following rights:

  • Right to access your personal data
  • Right to rectify (correct) inaccurate data
  • Right to erase (delete) your data, in certain circumstances
  • Right to restrict processing
  • Right to object to processing (especially marketing)
  • Right to data portability (receive your data in a machine-readable format)
  • Right to withdraw consent at any time (for processing based on consent)

To exercise these rights, you may contact us via:
Email: [your GDPR contact email]
Address: [address / legal office]

9. Marketing & Direct Contact (Cold Emails / Cold Calls)

If you have questions or concerns, reach out to our Data Protection Officer:
📧 Email: dpo@spex-asia.com
You can also contact your local data protection authority if needed.

If we contact you for marketing or sales:

  • We will clearly identify ourselves and the reason for contacting you
  • We will explain how we obtained your contact information
  • We will provide an easy method to opt-out or object
  • We will ensure we do not continue to contact you once you opt out

10. Security Measures

We implement technical and organizational measures to protect your personal data from unauthorized access, loss, or alteration. Access is limited to personnel who need it. We conduct regular security
reviews.

11. Changes to This Notice

We may update this Privacy Notice from time to time. Material changes will be communicated (e.g. via website notice). The effective date will always be listed at the top.

12. Contact / Complaints

If you have questions, complaints, or wish to exercise your rights, you may contact:

Email: dpo@spex-asia.com
You may also lodge a complaint with your local data protection authority.