Legal

Data Protection

Section 11(3) of the PDPA requires every organisation in Singapore to appoint at least one individual responsible for ensuring compliance, and to make that person's business contact information publicly available. Ours is set out below.

Making an access or correction request

Tell us who you are, what personal data your request concerns, and whether you are asking for access, correction, or withdrawal of consent. We may ask for proof of identity before releasing data. We respond within 30 days where practicable; where we cannot, we will tell you the date by which we will respond, as required under the PDPA.

Our obligations

We operate under the PDPA's obligations covering consent, purpose limitation, notification, access and correction, accuracy, protection, retention limitation, transfer limitation, data breach notification and the Do Not Call provisions. Where we act as a data intermediary for a client during an engagement, we process personal data only on that client's documented instructions.

Do Not Call Registry

We do not send marketing messages to Singapore telephone numbers. Should we ever do so, we will check the relevant Do Not Call Registers beforehand and identify ourselves clearly in every message, as required by Part 9 of the PDPA.

Escalation

If our response does not resolve your concern, you may raise the matter with the Personal Data Protection Commission of Singapore.