Contact Us

Personal Data Protection Policy

1 Introduction

Capital C Corporation Pte Ltd (the “Company”) takes our responsibilities under Singapore’s Personal Data Protection Act 2012 (the “PDPA”) seriously. We recognise the importance of the personal data our customers, employees and third parties have personally entrusted to us and believe that it is our responsibility to properly manage and protect their personal data. Kindly read the latest Personal Data Protection Policy (“Privacy Policy” or “this policy”) and our Terms and Conditions, both of which are available on our website at www.capc.com.sg carefully.

2 Purpose

This policy governs the collection, use and disclosure of personal data from employees, customers and third party to us and explains how we collect and handle personal data of individuals and comply with the requirements of the Personal Data Protection Act 2012 of Singapore and its regulation(s) (“PDPA”). In this policy, “personal data” shall have the meaning ascribed to it in the PDPA.

3 Responsible

The Company’s appointed Data Protection Officer (DPO) will update this Data Protection Policy from time to time to ensure that this Data Protection Policy is consistent with future developments, market trends and/or any changes in technology, legal or regulatory requirements.

4 Scope

This policy covers all the activities of Capital C Corporation Pte Ltd related to Personal Data received from employees, customers and third party..

We will collect, use or disclose personal data for employment and reasonable business purposes only if there is consent or deemed consent from the individual and information on such purposes have been notified. We may also collect, use or disclose personal data if it is required or authorised under applicable laws.

Such consents are obtained from our customers via customer’s declaration that they have read and consent to our Terms and Conditions to collect, use, retain, dispose, handle, transfer, process and/or disclose your personal data, in accordance with this privacy.

Employee’s consent is obtained by completing the consent form.

6 Collection of Personal Data

6.1       Personal Data collected from Customer

6.1.1 Purpose and Scope

THIS POLICY TOGETHER WITH OUR TERMS AND CONDITIONS ARE DESIGNED TO INFORM OUR CUSTOMERS AND ASSIST THEM IN UNDERSTANDING HOW WE COLLECT, USE, RETAIN, DISPOSE, TRANSFER, DISCLOSE AND/OR PROCESS THEIR PERSONAL DATA.

 

We use personal data of customer for the following purposes:

a)   To enable us to carry out our daily operation (including but not limited to any fund raising activities and data analytics) and to comply with the relevant legal obligations; and

b)   To disclose them for auditing and accounting purposes to a third party accountant or auditor.

The Company undertakes not to make unsolicited requests for customer information unless the customer first initiates contact with us. We further undertake to maintain strict confidentiality standards for safeguarding your information collected from you other than for the above mentioned purposes.

 

6.1.2       Type of Personal Data Collected

Your personal data are strictly handled and we endeavour not to collect information that exceeds that required by law and/or information we need to for the above mentioned purposes. The Personal Data collected are:

a)       Full Name

b)       Personal Identification Number (IC No., FIN No., or Passport No.)

c)       Nationality

d)       Date of Birth

e)       Sex

f)       Ethnicity

g)       Address

h)       Contact No.

i)         Marriage Status

j)         Email Address

k)       Income

l)         Employment information

m)     Photograph

n)       Next-of-Kin contact details

 6.2         Personal Data collected from Employees

6.2.1 Purpose and Scope

We collect personal data from our employees to enable us to understand, plan, manage, evaluate their employment suitability and performance and to terminate their service. Such personal data is provided to us in the resume filled by our employees, face to face interviews or via the Company’s preferred communication channel (The Company will inform the employees of the purposes for the collection, use and disclosure of their personal data and obtain their consent prior to the collection, use and disclosure. We will not use or disclose information collected from our employees other than the purpose made known herein or as may be necessary to comply with the applicable laws). Such use includes:

a) For evaluation of work performance

b) For CPF purposes

c) To apply Work Permit/S Pass/ E Pass

d) To manage certain staff schemes like training or educational subsidies

e) For the purpose of employment such as drafting employment letter

f) To purchase work related insurances

g) staff directory

 

6.2.2       Type of Personal Data Collected

The personal data will be collected for the above mentioned purposes, taking into consideration the sensitive nature of personal data. The handling of personal data is done in a strict manner and we endeavour not to collect information that exceeds that required by law or the foregoing purposes.  The Personal Data will be collected are:

a)       Full Name

b)       IC No./ FIN No. 

c)       Passport No.

d)       Nationality

e)       Sex

f)       Marital status

g)       Date of Birth

h)       Home Address

i)         Contact No.

j)         Email Address

k)       Work experience

l)         Curriculum Vitae

m)     Designation

n)       Bank Account

o)       Photograph

p)       CPF

6.3           Third Party

6.3.1 Purpose and Scope

The Company may disclose your personal data to third parties to assist with the Company’s activities, the purposes made known to you herein, only when we have the individual’s consent or deemed consent or when required by law. Any such third parties whom we engage will be bound contractually to keep information confidential.

 

We may also disclose your personal data to our affiliates, only where it is necessary (i) to meet the purpose for which such individual submitted the personal data; and (ii) for the purposes which the Company has made known to you herein.

 

Such purpose shall include:

a) Forming a partnership/joint venture

b) Accounting purposes

c) Employment purposes

d) Legal purposes

e) Audit purposes

f) Fundraising purposes

g) Any other disclosure which may be required by law

7 Disclosure of Personal Data

7.1     Personal Data of Customer

7.1.1   Purpose and Scope

We do not disclose personal data of customers to third parties except when required by law, when we have the individual’s consent or deemed consent or in cases where we have engaged third parties to assist with fundraising or certain aspects of the company’s activity such as accounting and auditing functions.  Any such third parties whom we engage are bound contractually to keep all information confidential.

  

7.2     Personal Data of Employee

7.2.1   Purpose and Scope

We do not disclose personal data of employees to third parties except when required by law or when we have engaged third parties to assist with Training or certain aspect of the company’s activity such as accounting, HR and auditing functions.  Any such third parties whom we engage are to keep all information confidential. When sharing personal data to third party, we will ensure that the data is correct and the original copy of the document is used to verify the copy. Communication of these personal data is done securely via email or other methods specified in the Internal Data Protection policies.

 

7.2.2  Type of Personal Data Disclosure

1) The personal data will be disclosure to the third parties for the purposes of training or certain aspect of the company’s activity such as accounting, HR and auditing functions is:

a)       Full Name

b)       IC No. / FIN No.

c)       Passport No.

d)       Address

e)       Contact No.

f)       Email Address

g)       Designation

h)       Qualifications

i)         Appraisal

j)         Income (including salary, CPF and bonuses)

k)       Deductibles

l)         Income tax

m)     Photograph

n)       Entitlements

8 Access to and Correction of Personal Data

Upon request, we will process our customer’s/ third party’s/ employee’s request and provide them with access to their personal data or other appropriate information on their personal data in accordance with the requirements of the PDPA, which is made known to our customers via the Terms and Conditions and this policy. Likewise, our employees are being made aware of such channels via our Internal Data Protection Policies while third party will be informed by giving them a copy of this policy. Alternatively, our customers/third party may contact us via email at [email protected] and employees may write in to [email protected]

Upon request, we will correct an error or omission in the individual’s personal data that is in our possession or control in accordance with the requirements of the PDPA. The request will be processed within 5 working days. Should the DPO be unable to process the request within 5 working days, an interim email should be sent to notify the customer regarding the extension of time needed to process their request at any point of time before the expiry of the 5 working days. The procedure is detailed in our Feedback/Complain/Request for Access procedure.

Request for withdrawal of any consent given or deemed to have been given will be processed within 5 working days. We will inform the individual of the likely consequences of withdrawing their consent. Thereafter, we will cease (and cause any of our data intermediaries and agents, if any) collecting, using or disclosing the personal data unless it is required or authorised under applicable laws. Should the DPO be unable to process the request within 5 working days, an interim email should be sent to notify the customer regarding the extension of time needed to process their request after assessing their request before the expiry of the 5 working days. The procedure is detailed in our Feedback/complain/Request for Access procedure.

10 Accuracy of Personal Data

We ensure that personal data collected by us is accurate, genuine and up-to-date by verifying the data against the original relevant document or via verified sources such as Singpass or Myinfo.

11 Security and Protection of Personal Data

We have implemented generally accepted standards of technology and operational security to protect the personal data in our possession or under our control and to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal, retention or similar risks. The Company’s personnel observes a strict internal policy. Access to personal data is only given to our personnel on a necessary basis, kept to a minimum and where they have agreed to ensure confidentiality of this information.

12 Retention of Personal Data

The minimum retention period of customer information is 5 years. Thereafter, we will cease to retain their personal data, as soon as it is reasonable to assume that the purpose for collection of such personal data is no longer being served by such retention, and such retention is no longer necessary for legal or business purposes.

The retention of information related to employees will be retained and will not be disposed off for review and record-keeping purposes.

13 Transfer of Personal Data outside of Singapore

We do not transfer data overseas.

However, we will ensure that should there be any transfers of personal data to a territory outside of Singapore will be in accordance with the PDPA so as to ensure a standard of protection to personal data so transferred that is comparable to the protection under the PDPA should the need arises.

If identifiable personal data needs to be sent overseas, we will take appropriate steps to ensure compliance with the data protection requirements in PDPA. This includes:

  • Impose legally enforceable obligations on the recipient to provide to the personal data transferred a standard of protection that is comparable under PDPA such as :-

I. Any law;

II. Any contracts with oversea recipient that requires the recipients to provide a comparable standard of protection and specifies the countries & territories to which the personal data may be transferred to; or

III. Have binding corporate rules with overseas recipient(s) to provide a comparable standard of protection, specify the recipients, countries and territories to which the binding corporate rules apply, and rights and obligations provided by the rules

  • Consent given after reading a written summary of the extent to which his/her personal data will be protected in the countries and territories that the personal data will be transferred to
  • The transfer is necessary for the performance of a contract between the organisation and individual / between the organisation and a third party
  • The personal data is publicly available in Singapore
  • Take necessary measures to ensure that personal data transferred will not be used or disclosed by the recipient for purposes other than the foregoing

14 Privacy on Our Websites

This Policy also applies to any personal data we collect via our websites. Cookies may be used on some pages of our websites. “Cookies” are small text files placed on your hard drive that assist us in providing a more customised website experience. Cookies are now used as a standard by many websites to improve users’ navigational experience. If individuals are concerned about cookies, most browsers permit individuals to decline cookies. In most cases, a visitor may refuse a cookie and still fully navigate our websites, however other functionality in the site may be impaired. After the termination of the visit to our site, a visitor can always delete the cookie from his/her system if he wishes.

15 Notification

We endeavour to notify our customers and third party of any changes to this policy 14days in advance after which the changes will be made effective and published on our website. The communication channel will be informed via our software application / email / text / written notice, at our discretion.

Similarly, we endeavour to notify our employees of any changes to this policy 14days in advance after which the changes will be made effective and published on our website. The communication channel will be informed via email / text / written notice / any channels, at our direction.

16 Data Protection Officer

If our customers believes that information we hold about him/her is incorrect or outdated, or if an individual has concerns or further queries about how we are handling his/her personal data or queries regarding the Terms and Condition and this policy, they may contact our Data Protection Officer at [email protected]. Employees may similarly contact our HR at [email protected] using the form specified in the Internal Data Privacy Policies.

17 Opt-Out for Marketing Communications

Customers may opt-out of receiving marketing communications from us at any time. If you no longer wish to receive marketing messages, please indicate your preference by clicking the “unsubscribe” link in the email, or contacting us through the “Contact Us” tab on our website (https://capc.com.sg/). Upon receiving your opt-out request, we will process it within 14 working days and cease sending you marketing communications. This does not affect any transactional communications necessary for providing our services.