Privacy Policy

Personal Data Protection Statement

1. Collection and Use
   • We only collect and use personal data which is relevant and required for the purpose of which you were informed and it was obtained.
   • If we were already in possession of your personal data prior to 2 July 2014, we may continue to use your personal data for the purposes for which the personal data was collected, subject to all applicable provisions under the PDPA.
   • If you provide us with any personal data relating to a third party (e.g. information of your dependent, spouse, children and/or parents), by submitting such information to us, you represent to us that you have obtained the consent of that third party to you providing us with their personal data.
2. Withdrawal of Consent
   • You may, at any time, withdraw your consent for the collection, use or disclosure of your personal data by giving reasonable written notice to our Data Protection Officer.
   • You should, however, take note that if you withdraw your consent, we reserve all rights arising from the withdrawal and will inform you of the likely consequences of your withdrawal.
3. Disclosure
   • We do not sell your personal data to any third party for any purpose, including marketing or commercial purposes.
   • We ensure only authorised employees will have access to your personal data, whereby they are required to abide by their contractual obligations to maintain confidentiality and privacy of your personal data.
   • We may also disclose your personal data in limited circumstances such as to regulatory authorities or law enforcement agencies, or in accordance with the applicable laws, to collect or report debts owed to us, to enforce and protect our rights, powers and remedies under our agreements, including loan and/or security documents and to other third parties for such purposes as we deem fit.
4. Access
   • Subject to the exceptions stated under the PDPA, you have the right of access to your personal data which is in our possession or under our control, or information which may have been used or disclosed by us within a year before the date of your request.
   • Your request for access must be made in writing to our Data Protection Officer and, depending on the complexity of your request, is subject to the payment of such fees as may be prescribed by us from time to time.
5. Correction
   • You shall ensure that the information provided to us by you is correct, accurate and complete at all times.
   • If you believe your records with us are inaccurate, incorrect, incomplete or not updated, please write to our Data Protection Officer.
   • We will promptly update your records accordingly within five (5) working days from the date of receipt of your written request.
   • If we do not agree that your information is inaccurate, incorrect, incomplete or out of date, we will write to you and inform you of the reason(s) why we do not agree with you. We will also tell you what you can do if you are not satisfied with our response.
6. Compliance by Third Parties
   • We may share your personal data with third parties, including those who provide support services or are acting as our agents, who must ensure that any personal data disclosed to them is kept confidential and secure, and used only according to our instructions and directions.
7. Security Measures
   • We store your personal data in hardcopy documents and/or electronically.
   • We practise physical security, such as locks and “restricted access” controls.
   • We further undertake administrative measures, such as requiring our employees to be bound by confidentiality obligations in their employment contracts.
   • We also maintain computer and network security and monitoring measures including:-
     • Personal passwords to control access to computer systems.
     • Firewalls, proxy servers and anti-virus protection systems to detect and prevent illegitimate activities and/or illegal intrusions of our network system.
     • Regular security reviews of our systems by our internal and external auditors.
     • Vigilant monitoring to detect any suspicious activities in our network system.
     • Continually exploring new technology to enhance our security system.
8. Cookies
   • Currently, we do not use cookies on our website.
9. Your Responsibility to Protect Your Personal Data
   • It is important that you do your part to ensure that any personal data provided to us via email or any other channels of communication is handled in a safe and secure manner.
   • If you wish to access our website, always directly enter our website address in the browser address bar. Do not access our website via any hyperlinks within emails.
   • Contact us immediately should you notice something suspicious or encounter any issues, difficulties or irregularities when accessing our website.
   • When using your personal computer, please ensure you observe any recommended security, preventive or “tips” measures, including those from your software and network security providers.
   • Email messages sent to us over the Internet containing your personal data cannot be guaranteed to be completely secure, and you assume all risks arising from, or in connection thereto, including the risk of access and interference by unauthorised third parties.
   • We will not be liable to you for any losses, damages, expenses, costs (including legal costs) and charges (whether direct or indirect, foreseeable or unforeseeable, special or consequential, or economic losses) incurred or suffered by you that arise out of you sending your personal data to us, including over the Internet.
10. Third Party Websites
    • This Policy applies only to our website and does not extend or cover any third party websites, which may be linked from and/or to our website. When visiting these third party websites, you should read their privacy policies.