Data Protection Notice
Synapxe Pte. Ltd. (collectively referred to as "Synapxe", "us", "we" or "our") is committed to protecting the rights and privacy of individuals in accordance with the Singapore Personal Data Protection Act 2012 (the "PDPA").
This Data Protection Notice (“Notice”) outlines how we may collect, use, disclose, process and manage your Personal Data in the course of our business, including our websites, services and products such as mobile applications, technical platforms, and other online or offline offerings otherwise indicated. This Notice applies to any individual's Personal Data which is in our possession or under our control.
This Notice was last updated on the date indicated at the end of this document. If you have any queries related to this Notice, please contact the persons identified at the end of this Notice.
Content:
- What Personal Data We Collect
- How We Collect Your Data
- How We Use Your Personal Data
- For Employment Purposes
- Who Will We Disclose Your Personal Data To
- Accuracy of Personal Data
- How We Protect Your Personal Data
- How Long Do We Retain Your Personal Data
- Transfer of Personal Data Outside Singapore
- Contacting Us – Withdrawal of Consent, Access, Update or Correct your Personal Data and Queries and Feedback
- Data Breach Notification
- Others
- Updates to this Data Protection Notice
"Personal Data" refers to any data, whether true or not, about an individual who can be identified (a) from that data, or (b) from that data and other information to which the organisation has access or is likely to have access. For example, "Mr. ABC, 40 years old, Talent Acquisition Manager, residing at 12 Ang Mo Kio Central 3” could constitute data that falls under (b) In relation to Personal Data, "processing" refers to carrying out any operations or set of operations on the Personal Data, including any recording, holding, adaptation or alteration, retrieval, combination, transmission, erasure or destruction of Personal Data.
The definition does not extend to (a) business contact information; (b) Personal Data about an individual that is contained in a record that has been in existence for at least 100 years; (c) Personal Data about a deceased individual who has been dead for more than 10 years; or (d) anonymised data. Anonymisation is the process of removing identifying information such that the remaining data does not identify any specific individual.
The specific type of Personal Data that may apply in your case will vary depending on how you have interacted with us. Some examples of such Personal Data you may provide to us include:
- Personal details (e.g. name, NRIC, FIN, passport or other identification number, contact details, residential address, personal email address, nationality, medical history and background, and/or income levels);
- Images and biometrics (e.g. photographs, voice and video recordings, including our conversations with you, using fingerprint mapping and facial recognition for verification or other purposes, CCTV recordings);
- Employment details (e.g. occupation, directorships, and other positions held, employment history, salary and/or benefits);
- Your personal opinions made known to us (e.g. through feedback or surveys);
- Other electronic data or information relating to your usage of our products and services or as part of their delivery to you (e.g. location data, IP address, activity logs, cookies, device carrier/operating system and connection type); and
- if you are an employment applicant with us, past employment information and/or curriculum vitae and any other information relating to you which you have provided.
Generally, we may collect your Personal Data in the following ways:
- When you use our electronic services, download apps, or interact with us (including social media platforms) via any of our online and/or digital services.
- When you interact with us via any offline transactions such as customer service counters, face-to-face meetings, career roadshows and product tradeshows.
- When you enter into any agreement or provide other documentation or information in respect of your interactions with us, or when you use our services.
- When you submit forms, applications, requests or feedback to us.
- When we receive your Personal Data from referral parties, your employer and/or other authorised third parties.
- When your images are captured by us when you attend corporate events (including recreation activities) hosted by us.
- When your images are captured by our CCTV system when you visit our premises or data centres;
- When you register as a visitor at our premises or data centres, and
- When you submit your Personal Data to us for any other reason.
If you provide us with any Personal Data relating to a third party (e.g. information about your spouse, children, parents, and/or employees), by submitting such information to us, you represent to us that you have obtained his/her/their consent to provide us with their Personal Data for the respective purposes.
We also rely on you and will assume that you have ensured that all Personal Data submitted to us is complete, accurate, true and correct.
Generally, unless exceptions permitted by law apply, we will notify you of the purposes and obtain your consent for which your Personal Data may be collected, used, or disclosed before doing so. You have choices regarding the collection, use, and disclosure of your Personal Data and the right to object to its processing. However, if consents are not obtained or if you fail to provide us with complete and accurate information or withhold information, we may be unable to proceed with a particular transaction, agreement or interaction with you. We will take the approach that best safeguards us, you and others from risks, and we may well have no choice but to decline to proceed with the transaction, agreement or interaction in question to avoid causing harm or exposing us, you or others to risk.
We may also collect, use, or disclose your Personal Data without consent in certain situations permitted under the Singapore Personal Data Protection Act (PDPA) or other relevant laws, including:
- To respond to emergencies that threaten your life, health, or safety, or that of others.
- When required for national interest, investigations, or legal proceedings.
- When we have a legitimate interest for the lawful collection, use or disclosure of Personal Data without consent, such as for internal security measures and conducting phishing exercises for our employees. In these cases, we carefully assess and balance our legitimate interests against your Personal Data rights, ensuring that our legitimate interests outweigh any potential adverse effects on you.
We may collect, use and/or disclose your Personal Data for the following purposes:
- Assessing and processing applications, instructions or requests from you.
- Verifying your identity before providing our services or responding to your queries, feedback, complaints and/or requests.
- Managing our day-to-day business operations and complying with internal policies and procedures.
- Communicating with you, including providing job opportunities and updates on changes to products and services.
- Carrying out research, surveys and/or business analysis to improve our products and services and enhance business strategies.
- Facilitating and maintaining risk and security management including any enterprise-wide risk management exercise such as close-circuit television (CCTV), protection against unauthorised leakage, access or usage of our physical or IT platforms, investigating any fraudulent activities and conducting checks and audits.
- Preventing, detecting and investigating crime and analysing and managing commercial risks including conducting investigations relating to disputes, billing or fraud.
- Managing visitor registration and tracking during visits to our premises or data centres.
- In connection with any claims, actions or proceedings (including but not limited to seeking consultancy or professional services, obtaining legal advice and facilitating dispute resolution), and/or protecting and enforcing our contractual and legal rights and obligations.
- Managing Requests for Proposal(s), Requests for Quotation(s), project tenders and quotations, processing orders or managing the supply of goods and services.
- Processing and payment of vendor invoices and bills.
- Facilitating business asset transactions (which may extend to any mergers, acquisitions or asset sales); and/or
- Complying with any applicable rules, laws, regulations, directives, orders, codes of practice or instructions issued by any legal or regulatory bodies and law enforcement authorities.
In addition to the above purposes, we may also use Personal Data for purposes set out in the terms and conditions and in any contracts that govern our relationship with you.
In addition, we collect, use and/or disclose your Personal Data for the following purposes:
- If you apply to Synapxe for any professional career roles or choose to respond to any employment opportunities offered by Synapxe:
- conducting interviews;
- assessing, processing and evaluating your application to establish your suitability for the position applied for (including but not limited to pre-recruitment checks involving your qualifications and background screening and facilitating interviews);
- obtaining employee references and for background screening, obtaining employee references or other references where relevant for background screening / vetting – and in this regard, by applying for employment and submitting references and referees, you warrant that consent has been obtained by you for us to contact any third parties named as referees or relevant as references;
- collecting information and reviewing that information to establish your suitability for the position applied for; and/or
- any other purpose reasonably related to the aforesaid.
- If you are an existing employee of Synapxe, your relationship with us is governed primarily by an employment contract, and your agreement to Synapxe policies and procedures, as well as Employee Handbook (as may be revised from time to time), which may expressly or impliedly inform you of how your Personal Data will be used. Generally, Synapxe is required to process your Personal Data to comply with its contractual, statutory and management obligations and responsibilities.
- If you are an employee, officer or owner of an external service provider or vendor who provides services (including outsourcing, secondment or other engagement by Synapxe for services).
Subject to the provisions of any applicable law, and where relevant for the purposes described, your Personal Data may be collected, used and/or disclosed, for the purposes listed above (where applicable), to the following entities, each subject to our first having reviewed and approved such party for disclosure, whether they are located overseas or in Singapore:
- Synapxe's related corporations, affiliates and associated companies;
- Our authorised agents, contractors or third party service providers who provide operational services to Synapxe, such as courier services, telecommunications, information technology, payment, printing, billing, payroll, processing, technical services, training, market research, call centre, security, or other services to Synapxe;
- Our professional advisers such as consultants, auditors and lawyers;
- Third parties seeking employee references in respect of former employees of any of Synapxe's related corporations, affiliates or associated companies;
- Any credit bureau, or in the event of default or disputes, any debt collection agencies or dispute resolution centres;
- Any business partner, investor, assignee or transferee (actual or prospective) to facilitate business asset transactions (which may extend to any merger, acquisition or asset sale);
- Anyone to whom we transfer or may transfer our rights and duties;
- Relevant government ministries, regulators, statutory boards or authorities or law enforcement agencies to comply with any laws, rules, guidelines and regulations or schemes imposed by any governmental authority;
- Any other relevant party to whom you authorise us to disclose your Personal Data; and
- Any other person in connection with the purposes set forth above.
We will take appropriate and reasonable steps to ensure the accuracy and correctness of the Personal Data that we collect, use and/or disclose. To enable us to ensure the quality and accuracy of Personal Data, you have an obligation to provide accurate and up-to-date information to Synapxe. Whenever possible, we will validate the information you provide using widely accepted practices and guidelines.
We will take reasonable efforts to protect the Personal Data in our possession or our control by implementing reasonable security measures to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. However, we cannot completely guarantee the security of any Personal Data we may have collected from or about you, e.g. that no harmful code (such as viruses, bugs, Trojan horses, spyware or adware) will enter our website.
We retain Personal Data as may be required for business, legal, regulatory or compliance purposes, and such purposes do vary according to the circumstances. We will take reasonable steps to dispose or anonymise Personal Data that is no longer needed. With regard to medical data that we process, we will retain medical records in accordance with the duration stipulated by Ministry of Health and/or in adherence with contractual agreements.
Generally, we do not transfer Personal Data out of Singapore, except to our approved third-party services providers for applicable services. Should we do so, we will ensure there is compliance with the requirements under the PDPA.
We respect your rights to your Personal Data and will respond to the following requests:
- Withdrawal of consent; and
- Access, update or correction of your Personal Data.
In each instance, we will use reasonable efforts to respond and/or attend to your request within reasonable timeframe: 10 business days for withdrawal of consent, and 30 calendar days for access and correction requests. If more time is needed, we will notify you within the specified period.
For current employee and registered account holders, please log in to your respective dedicated portals. If you have any queries relating to the portals below, please contact the portals' administrators directly at:
If you have any questions or feedback relating to your Personal Data or our Privacy Policy, you can contact our Data Protection Officer by emailing us at: synapxe.dpo@synapxe.sg
To process your request, we will seek to verify your identity and other details so as to retrieve the relevant data. If we are unable to complete your request, we will inform you of the reasons. In responding to your access request, we may collect a reasonable fee if necessary and will inform you beforehand. If we require any further justifications or grounds before processing your request, we will inform you of the same.
You are entitled to withdraw your consent for the collection, use and disclosure of your Personal Data at any time. However, depending on the nature of the withdrawal, it may impact our ability to proceed with your transactions, agreements or interactions with us, and in particular it may not be possible, without undue risk, cost or liability to Synapxe to proceed with a particular transaction, agreement or interaction with you, and we may be left with no choice but to cease or refrain from the same.
We will take the approach that best safeguards us, you and others from risks, and we may well have no choice but to decline to proceed with the transaction, agreement or interaction in question to avoid causing harm or exposing us, you or others to risk. We will carefully review your request and inform you of any potential consequences of withdrawing your consent before taking further action.
At the same time, it should be noted that your withdrawal of consent will not prevent us from exercising our legal rights (including any remedies, or undertaking any steps as we may be entitled to at law).
In the event of a security breach leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to Personal Data, we shall promptly assess the impact and once assessed that it is a notifiable data breach, we shall report this breach within 3 calendar days to Ministry of Health (MOH) and the Personal Data Protection Commission (PDPC). We will notify you when the data breach is likely to result in significant harm to you after our notification to MOH and PDPC. We may also notify other relevant regulatory agencies, where required.
If we act as a Data Intermediary, we will notify the relevant Data Controller of any data breach immediately upon knowledge of the incident and without undue delay, enabling them to assess the impact and fulfil their data breach notification obligations promptly.
A cookie is a small piece of information that is placed on your computer when you visit certain websites. The cookies placed by the servers hosting our websites are readable only by us, and cookies cannot access, read or modify any other data on an electric device, nor does it capture any data which allows us to identify you individually. All web-browsers offer the option to refuse any cookie, and if you refuse our cookie then we will not gather any information on you. Should you wish to disable the cookies associated with these technologies, you may do so by changing the setting on your browser. However, you may not be able to enter certain part(s) of our website.
This site may contain links to other websites operated by third parties, whose data protection and privacy practices may differ from ours. We are not responsible for the content and privacy practices of these other websites and encourage you to check the privacy notices of these other websites to determine how they will handle any information they collect from you.
Web analytics is the term given to a method for collecting and assessing the behaviour of visitors to websites and mobile or web-based applications. This includes the analysis of traffic patterns in order, for example, to determine the frequency of visits to certain parts of a website or mobile or web-based application, or to find out what information and services our visitors are most interested in. For these purposes, we primarily make use of click-stream data and the other techniques listed above. Web analytics are carried out by the Content Management Systems, Google Analytics and/or other selected parties (as we may inform you from time to time) ("Web Analytics Providers"). When you visit our website(s), Personal Data may (unless you have refused the processing of your Personal Data via such cookies and technologies) be sent to the Web Analytics Providers for analysis for and on behalf of us for the purposes described in this Privacy Policy. Please note that if you have created an online profile at our website or mobile or web-based application and if you are logged in using this profile, a unique number identifying this profile may also be sent to the Web Analytics Providers in order to be able to match the web analytics data to this profile. If you do not wish information about your behaviour at our website or any mobile or web-based applications to be collected and assessed by Google Analytics, you can install the Google Analytics opt-out browser add-on. Please refer to Google Analytics Opt-out Browser Add-on page for more information on downloading the add-on and opting out.
This Data Protection Notice applies in conjunction with any other relevant notices, policies and contractual and consent clauses entered with us. We will update this Notice from time to time to ensure that it is consistent with our future developments, industry trends and/or any changes in legal or regulatory requirements. Any changes we may make to this Notice in the future will be posted on our website at www.synapxe.sg
