Who we are
[Singapore entity and UEN] processes personal data of individuals in Singapore as described in our Global Privacy Policy. If there is no Singapore entity, the entity on your proposal is responsible.
Consent and purposes
We collect, use and disclose your personal data with your consent, or where the PDPA allows without consent (for example business improvement or legitimate interests), for the purposes listed in the Global Privacy Policy. You may withdraw consent at any time by contacting our Data Protection Officer; we will tell you what withdrawal means for any service.
Access and correction
You may ask for your personal data and how it has been used or disclosed in the past year, and ask us to correct it. We reply within 30 days, or tell you when we will.
Transfers outside Singapore
When we transfer personal data outside Singapore, we make sure the recipient protects it to a standard comparable to the PDPA, through contracts or the recipient's certification.
Do Not Call
We check Singapore telephone numbers against the Do Not Call Registry before sending marketing calls, SMS or messaging-app messages, unless you have given us clear and unambiguous consent.
Breaches
If a breach is likely to cause significant harm or affects 500 or more people, we notify the PDPC within 3 calendar days after assessing that it is notifiable, and tell affected individuals as soon as practicable.
Retention
We keep personal data only as long as needed for the purpose or for legal and business reasons, as set out in the Retention Schedule.