In this Notice, the following terms are defined as follows:
"Customer" refers to an individual who (a) has inquired about our products or services through any means, or (b) may have, or has, entered into an agreement with us for the supply of any products or services; and "personal data" denotes data, whether accurate or not, about a customer who can be identified either: (a) from that data or (b) from that data combined with other information we possess or are likely to possess. Examples of personal data we may collect from you, based on your interactions with us, include your name, identification details (e.g., NRIC number), contact information (e.g., address, email address, phone number), nationality, gender, date of birth, marital status, photos, audio-visual material, employment details, and financial information (e.g., bank account details). Other terms used in this Notice are given the same meanings as those in the PDPA, where context permits.
Collection, Utilization, and Disclosure of Personal Data:
We typically do not collect your personal data unless it is: (a) voluntarily provided by you or a third party authorized by you (your "authorized representative"), after you or your representative have been informed of the purposes for which the data will be used and have given written consent for its collection and use; or (b) when the collection and use of personal data without consent is permitted or mandated by the PDPA or other laws. We will seek your consent before collecting any additional personal data or using your personal data for a purpose not previously disclosed to you (except when allowed or required by law).
We may collect and use your personal data for various purposes, such as:
(a) fulfilling obligations related to our provision of goods and/or services you requested;
(b) verifying your identity;
(c) addressing and processing your inquiries, requests, applications, complaints, and feedback;
(d) managing your relationship with us;
(e) processing payment or credit transactions;
(f) sending marketing information about our products or services, including updates on marketing events, initiatives, promotions, lucky draws, membership and rewards schemes, and other offers;
(g) complying with applicable laws, regulations, codes of practice, guidelines, or rules, or assisting with law enforcement and investigations by governmental and/or regulatory authorities;
(h) any other purposes for which you provided the information;
(i) sharing with unaffiliated third parties, including our third-party service providers, agents, and relevant governmental and/or regulatory authorities, whether in Singapore or abroad, for the purposes mentioned above;
(j) any other incidental business purposes related to or in connection with the above.We may disclose your personal data:(a) when required for fulfilling obligations related to our provision of goods or services you requested; or(b) to third-party service providers, agents, and other organizations we have engaged to perform any of the functions listed in clause 5 above on our behalf. The purposes listed above may still apply even if your relationship with us has changed or ended, for a reasonable period thereafter (including, where applicable, a period that allows us to enforce our rights under any contract with you).
Withdrawing Your Consent:
Your consent for the collection, use, and disclosure of your personal data remains valid until you withdraw it in writing. To withdraw consent and request that we stop using and/or disclosing your personal data for any or all of the purposes listed above, submit your request in writing or via email to our Data Protection Officer at the contact details provided below. Upon receiving your written request to withdraw consent, we may need a reasonable amount of time (depending on the request's complexity and its impact on our relationship with you) to process your request and inform you of the consequences, including any legal consequences that may affect your rights and liabilities to us. Generally, we aim to process your request within ten (10) business days of receiving it. While we respect your decision to withdraw consent, please note that depending on the nature and scope of your request, we may not be able to continue providing our goods or services to you. In such cases, we will notify you before completing the processing of your request. If you decide to cancel your withdrawal of consent, please inform us in writing as described in clause 8 above. Please be aware that withdrawing consent does not affect our right to continue collecting, using, and disclosing personal data where such actions without consent are permitted or required under applicable laws.
Access to and Correction of Personal Data:
If you wish to (a) request access to a copy of the personal data we hold about you or information about how we use or disclose your personal data, or (b) request the correction or updating of any of your personal data we hold, you may submit your request in writing or via email to our Data Protection Officer at the contact details provided below. Please note that a reasonable fee may be charged for an access request. If so, we will inform you of the fee before processing your request. We will respond to your request as soon as reasonably possible. If we cannot respond to your request within thirty (30) days after receiving it, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any personal data or make a correction requested by you, we will generally inform you of the reasons why we are unable to do so (except where not required under the PDPA).
Protection of Personal Data:
To protect your personal data from unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks, we have implemented appropriate administrative, physical, and technical measures such as up-to-date antivirus protection, encryption, and the use of privacy filters to secure all storage and transmission of personal data by us, and disclosing personal data both internally and to our authorized third-party service providers and agents only on a need-to-know basis. However, no method of transmission over the Internet or electronic storage is completely secure. While we cannot guarantee absolute security, we continually review and enhance our information security measures.
Accuracy of Personal Data:
We generally rely on personal data provided by you (or your authorized representative). To ensure that your personal data is current, complete, and accurate, please update us on any changes to your personal data by informing our Data Protection Officer in writing or via email at the contact details provided below.
Retention of Personal Data:
We may retain your personal data for as long as necessary to fulfill the purpose for which it was collected or as required or permitted by applicable laws. We will stop retaining your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal data was collected and is no longer necessary for legal or business purposes.
Transfers of Personal Data Outside of Singapore:
We generally do not transfer your personal data to countries outside of Singapore. However, if we do so, we will obtain your consent for the transfer and take steps to ensure that your personal data continues to receive a standard of protection that is at least comparable to that provided under the PDPA.
Data Protection Officer:
For any inquiries or feedback, you may contact our Data Protection Officer at office@sentosatour.com.
Effect of Notice and Changes to Notice:
This Notice applies in conjunction with any other notices, contractual clauses, and consent clauses that relate to the collection, use, and disclosure of your personal data by us.
Date of last update: 05 April 2023.
