The Aven & Bill Associates (hereinafter “A&B”) is an accounting firm with a history of over 16 years. A&B is committed to protecting the personal data and respects the privacy and importance of proper protection of the personal data you entrusted us with. As such we would like to inform you of how we process your personal data when you interact with us. Personal Data (as defined hereinafter) will generally only be collected, used and disclosed for A&B’s administrative, business and statutory requirement purposes as further set out in this policy and only to the extent necessary to achieve those purposes.
If you have any questions, remarks or comments on this policy or any other queries in relation to how we may manage, collect, use, disclose and/or process your personal data, please do not hesitate to contact our Data Protection Officer at firstname.lastname@example.org
1. DEFINITIONS AND INTERPRETATION
The following terms shall have the following meanings:
means a natural person, whether living or deceased and in any event, the clients of A&B and the staff of A&B as the case may be;
means any individual, company, association or body of persons, corporate or unincorporated, whether or not formed or recognised under the law of Singapore; or resident, or having an office or a place of business in Singapore, as defined under section 2 of the PDPA;
means the data whether true or not, about an individual who can either be identified from that data; or from that data and other information to which A&B has or is likely to have access, as defined under section 2 of the PDPA;
PURPOSE OF THE COLLECTION, USE, DISCLOSURE OF THE PERSONAL DATA
- A&B respects all Individuals‘ privacy and generally collects Personal Data for administrative and security purposes, necessary to maintain the records of its clients and its staff. A&B will collect, use and disclose your personal data in accordance with the Personal Data Protection Act 2012 (“PDPA”).
- From time to time, A&B may need to collect, use and/or disclose Personal Data for its activities and functions which are held for the benefit of the relevant Individual. Where appropriate, A&B shall take reasonable steps to inform and obtain consent from the respective Individual and safeguard the integrity of the Personal Data.
- Depending on your relationship with A&B (e.g. as Clients’ application, vendor, service provider, Job applicant or other person relating to our organization ), the personal data which A&B collect from you may be collected, used and/or disclosed for the following purposes:
- Personal Data for Administrative Purposes e.g.:
- Private contact details
- Emergency contact data
- Date of birth
- Immigration details
- Passport details
- Family details
- Any related party details
- Education history and records
- Processing client’s incorporation applications
- Processing client’s share allotments
- Data for Security Purposes e.g.:
- Video surveillance data from A&B premises
- Data for other purposes e.g.:
- Companies incorporation
- Appointment or cessation of the company’s officers
- Shares allotments
- Photographs, videos and other forms of multi-media
- The Above-mentioned purposes are examples of personal data which A&B typically collects, uses, and discloses (where appropriate and necessary) and are not intended to be exhaustive. These purposes and any other specific purposes which may arise in due course shall be communicated to the Individual from whom the data is being collected, processed, disclosed and used, before such collection, processing, disclosure or use.
- A&B shall obtain, where so required, the consent of the individual before collecting, using, processing, disclosing or using the Personal Data of the respective Individual.
- Individuals may choose to abstain from giving such consent or withdraw their consent at any time. Individuals may withdraw their consent by notifying A&B at email@example.com. In the event where consent has been withdrawn or the provision of the same abstains, A&B shall not be responsible and/or liable for any loss, damage or harm resulting from, directly or indirectly, its inability to retrieve, use and/or disclose such Personal Data.
- For the avoidance of doubt, where consent is not necessary under the PDPA 2012, including but not limited to the following instance:
- the collection, disclosure and/or use is necessary for any purpose that is clearly in the interest of the respective Individual if consent for its collection, disclosure and/or use cannot be obtained in a timely way or the respective Individual would not reasonably be expected to withhold consent; or
- the collection, disclosure and/or use is necessary to respond to an emergency that threatens the life, health or safety of the respective Individual or other Individuals;
A&B shall have the discretion to decide what appropriate action to take and need not consult the relevant Individual accordingly.
PROTECTION OF PERSONAL DATA IN ANY COMPLAINTS
- The Complaints procedure is set out in the “Complaints Procedure for Personal Data Issues”, which is also found on A&B’s website.
- All information and Personal Data involved in any such complaints which follow the Complaints procedure shall be kept confidential and shall not be used and/or disclosed to other persons without the consent of the involved party, unless as permitted by the PDPA and/or required by Law.
ACCESS AND CORRECTION OF DATA
- A&B shall upon request, provide the respective Individuals access to their Personal Data, which is under A&B’s control.
- A&B shall also upon request, provide the respective Individuals with information regarding the ways such Personal Data was used or disclosed during the past year.
- A&B shall upon request, correct any error or omission in the respective Individuals’ Personal Data that is under A&B’s control.
ACCURACY OF DATA
- A&B shall take reasonable measures to ensure that the Personal Data in its possession is accurate and complete if the Personal Data is likely to be used to make a decision that affects the respective Individuals the Personal Data relates to, or if the Personal Data is likely to be disclosed to another Organisation.
- While A&B shall take reasonable steps to update and ensure the accuracy of the Personal Data in its database, Individuals are ultimately responsible for the submission of correct Personal Data and to inform A&B of any changes to such Personal Data as A&B shall not be obliged to carry out checks to determine the accuracy of the Personal Data provided.
DATA RETENTION PERIODS
- A&B shall not retain the Personal Data in its possession and/or database if the Personal Data is no longer required to meet the purposes for which they were collected and/or no longer serves a legal and/or business purpose.
- For the avoidance of doubt, A&B shall be entitled to retain and/or use such Personal Data as long as it serves an evaluative purpose.
TRANSFER OF PERSONAL DATA TO THIRD PARTIES
- Potential Transfers – Personal Data may be transferred to law enforcement, governmental agencies, or authorised third parties sited in Singapore or overseas, in response to a verified request relating to a criminal investigation or alleged illegal activity or any other activity that may expose A&B to legal liability.
- Specific Third-Party Transfers – In order to conduct operations more smoothly, A&B may also be disclosing the personal data that is provided to A&B to third-party service providers, agents and/or our affiliates or related corporations, which may be sited locally or outside of Singapore, for one or more of the above-stated Purposes. This is because such third-party service providers, agents and/or affiliates or related corporations would be processing the personal data on behalf of A&B for one or more of the above-stated Purposes, and not for any commercial gain. Examples of such services may include without limitation, transport, food and beverages catering, travel services, accommodation and medical. A&B shall enter into contracts with such third party service providers which shall expressly state the third-party service providers’ obligation to use the Personal Data in question solely for the intended purpose of providing the required service and to undertake appropriate measures to safeguard the Personal Data in their respective possession.
- Restrictions of Data Transfer Outside of Singapore – Personal Data transferred out of Singapore shall be protected with a standard of protection that is comparable to the protection under the PDPA.
TECHNICAL AND ORGANISATIONAL METHODS TO SECURE DATA
A&B will take appropriate measures to keep the personal data accurate, complete and updated.
A&B will also take reasonable efforts to take appropriate precautions and preventive measures to ensure that the personal data is adequately protected and secured. Appropriate security arrangements will be taken to prevent any unauthorized access, collection, use, disclosure, copying, modification, leakage, loss, damage and/or alteration of the personal data. However, A&B cannot assume responsibility for any unauthorized use of the personal data by third parties which are wholly attributable to factors beyond A&B’s control.
A&B will also take reasonable efforts to ensure that the personal data in their possession or under their control is destroyed and/or anonymized as soon as it is reasonable to assume that (i) the purpose for which that personal data was collected is no longer being served by the retention of such personal data; and (ii) retention is no longer necessary for any other legal or business purposes.
UPDATES TO THIS POLICY
A&B reserves the right to update this policy from time to time. Consent to prior versions of this policy is deemed consent to a newer version, too, if not objected within ten (10) days of such update.