This Policy sets out the manner in which SAFRA collects, uses, manages and protects Personal Data (as defined below) in compliance with the provisions of the Personal Data Protection Act 2012.
This Policy applies to all Individuals (as defined below) who provide SAFRA with Personal Data or whose Personal Data is otherwise collected, used and/or disclosed by SAFRA in connection with and/or for the purposes of its operations.
This Policy supplements but does not supersede or replace any previous consent which an Individual may have provided to SAFRA, nor does it affect any rights that SAFRA may have at law in connection with the collection, use and/or disclosure of any Individual’s Personal Data. Subject to that, SAFRA will not collect any Personal Data from an Individual unless the Individual has voluntarily chosen to provide us with it.
SAFRA may from time to time update this Policy to ensure it is consistent with its future developments or business purposes or to accommodate future changes to applicable legal or regulatory requirements. All updates to this Policy will be published at www.safra.sg and appropriate notifications of any material revisions will be issued to the relevant persons. Subject to an Individual’s rights at law, the prevailing terms of the Policy from time to time shall apply. By continuing their relationship with SAFRA after any amendments have been introduced and published, Individuals shall be deemed to have accepted the Policy as amended.
For the avoidance of doubt, this Policy forms part of the terms and conditions, if any, governing an Individual’s specific relationship with SAFRA ("Terms and Conditions") and should be read in conjunction with such Terms and Conditions. In the event of any conflict or inconsistency between the provisions of this Policy and the Terms and Conditions, the provisions of the Terms and Conditions shall prevail to the fullest extent permissible by law.
“Alumni” means previous Members of SAFRA;
“Application” means any mobile application developed and/or operated by SAFRA from time to time;
“Data Protection Officer” means the person designated to be responsible for ensuring that SAFRA complies with the PDPA;
“DNC Registry” means the Do-Not-Call registry maintained by the Personal Data Protection Commission, pursuant to the PDPA;
“Event Participants” means persons (whether or not Members or Alumni) who participate in or attend events or programmes organised or sponsored by SAFRA from time to time;
“Individuals” means natural persons, whether living or deceased, and “Individual” means any of them;
"Members” mean the members of SAFRA from time to time;
“PDPA” means the Personal Data Protection Act 2012;
“Personal Data” means data that is capable of identifying a natural person, whether on its own or in conjunction with other data that is accessible to SAFRA;
“Personnel” shall include any person engaged under a contract of service with SAFRA, management personnel, permanent or temporary employees, as well as volunteers engaged by SAFRA from time to time;
“Platforms” mean the websites, Applications, computer systems, computer networks and any other digital platforms operated by SAFRA from time to time; and
“Potential Personnel” shall include any Individual who has submitted an application to be engaged by SAFRA as Personnel.
Personal Data Collected by SAFRA
SAFRA will only collect, use or disclose Personal Data about an Individual which it reasonably considers necessary for the relevant purposes underlying such collection, use or disclosure. Depending on the specific nature of an Individual’s interaction with SAFRA, Personal Data which SAFRA collects, uses or discloses concerning an Individual may variously include the following:
(a) the Individual's name, gender and contact particulars, including telephone number(s), residential/mailing address(es) and email address;
(b) details of the Individual's identification documents (such as, NRIC or passport numbers), and applicable visa or permits (such as employment pass, work permit, permanent residency status);
(c) details of the Individual's employment history and academic qualifications;
(d) details of the Individual's CPF, credit card or bank account;
(e) the name and contact particulars of the Individual's next-of-kin;
(f) details of the Individual's personal preferences or other special requests or special conditions applicable to the Iindividual;
(g) details of the Individual's hobbies or special interest areas;
(h) the Individual’s network usage data and other data and information, submitted by the individual or gathered automatically by our Platforms, including the Individual’s computer IP address, links visited and other activities conducted online or using our Platforms;
(i) photographs and video or CCTV recordings of the Individual; and
(j) other information which the Individual may provide to SAFRA, from time to time, in the course of such Individual’s interaction with SAFRA.
How SAFRA collects Personal Data
Generally, SAFRA may collect Personal Data about an Individual in one or more of the following ways:
(a) from the Singapore Armed Forces, Ministry of Defence and other Singapore Governmental and/or public agencies;
(b) through application or registration forms submitted by the Individual;
(c) through correspondence, emails, electronic messages or otherwise submitted by the Individual to SAFRA or posted on the Platforms;
(d) through the Individual’s verbal communications with SAFRA Personnel;
(e) through surveys conducted with and/or feedback received from an Individual;
(g) through recordings of the Individual when attending at SAFRA’s premises or at any events or programmes organised by SAFRA;
(h) through third party business partners or associates of SAFRA; and
(i) when the Individual submits his/her Personal Data to SAFRA for any other reason related to SAFRA’s ordinary course of operations.
Purposes for which SAFRA may collect, use and/or disclose Personal Data
Generally, SAFRA may collect, use and/or disclose Personal Data about an Individual for one or more of the following purposes:
Members and Alumni
(a) administering and managing member and alumni relationships with SAFRA, including the provision of services to members and alumni, and providing members and alumni with information regarding the expiry and renewal of their membership;
(b) providing members and alumni with information about services, facilities and/or other benefits being offered or made available by SAFRA to members and alumni and where applicable, allowing the members and alumni to book, subscribe and/or purchase the same;
(c) providing members and alumni with information about third party and/or external vendor/supplier promotions, deals and/or other services being offered or made available to members and/or alumni, through partnerships, associations and/or other collaborations involving such third parties or external vendors/suppliers and SAFRA;
(d) organising and/or facilitating events or programmes involving members and alumni and/or verifying the eligibility of such members and alumni to participate in such events or progammes;
(e) tailoring activities or services available to match members’ and alumni preferences and to personalise their experience; and
(f) transmitting Personal Data to third parties engaged by or working in collaboration with SAFRA to facilitate any of the above-mentioned purposes.
(a) administering and managing Personnel relationships with SAFRA, including the provision of services to Personnel;
(b) evaluating the performance of Personnel;
(c) undertaking staff training and quality assurance activities;
(d) providing Personnel with information about services, facilities and/or other benefits being offered or made available by SAFRA to such Personnel as well as information about such services, facilities and benefits; and
(e) transmitting Personal Data to third parties engaged by or working in collaboration with SAFRA to facilitate any of the above-mentioned purposes.
(a) administering and managing SAFRA’s relationship with Potential Personnel; and
(b) evaluating the suitability and eligibility of Potential Personnel to be engaged by SAFRA;
(a) administering and managing the event participant’s relationship with SAFRA;
(b) verifying the identity and eligibility of event participants;
(c) promotional and publicity purposes, including recording videos or taking photographs of participants at events; and
(d) transmitting Personal Data to third parties engaged by or working in collaboration with SAFRA to facilitate any of the above-mentioned purposes.
Visitors and users of SAFRA’s facilities
(a) recording and verifying the identity of visitors to SAFRA’s premises; and
(b) monitoring the activities of visitors to SAFRA’s premises.
General business purposes
(a) managing the administrative and business operations of SAFRA;
(b) facilitating the completion of transactions with Individuals;
(c) responding to complaints, queries and/or requests;
(d) conducting market research for statistical profiling and other purposes in order to improve SAFRA’s services;
(e) safety and security purposes;
(f) preventing, detecting or investigating any actual or crime, fraud, misconduct, unlawful action, breach or dispute;
(g) record-keeping purposes;
(h) accounting or auditing purposes;
(i) legal purposes (including but not limited to obtaining legal advice and dispute resolution); and
(j) complying with laws, regulations, codes or guidelines binding on SAFRA, including disclosures to regulatory authorities or other public bodies; and
(k) transmitting Personal Data to third parties engaged by or working in collaboration with SAFRA to facilitate any of the above-mentioned purposes.
Purposes reasonably related to any of the above purposes
(a) for any purposes reasonably related and/or ancillary to any of the above mentioned purposes.
Purposes for which specific consent was obtained
(a) for any purposes reasonably related and/or ancillary to any of the abovementioned purposes.
Unless otherwise authorised under the PDPA or any other applicable law, SAFRA will not collect, use or disclose an Individual’s Personal Data without his/her consent.
SAFRA will take reasonable steps to highlight the purposes relevant to an Individual, by appropriate means, at the point or time of collection of the Personal Data from such Individual, including:
(a) via express provisions in contracts, application forms and/or registration forms to be signed with or submitted to SAFRA;
(b) via notifications on or through the Platforms; and
(c) in the course of verbal communications.
Where feasible, SAFRA will inform the Individual of purposes that are intrinsic to the relationship between SAFRA or to the provision of services to such Individual, as well as purposes that are optional.
In so far as any purpose(s) are intrinsic to the relationship or provision of services, SAFRA reserves the right to decline to engage in the relevant relationship or to provide the relevant services to the Individual if he or she does not consent to SAFRA’s collection, use or disclosure of his/her Personal Data for such purpose.
(a) voluntarily provide their Personal Data to SAFRA for the specified purposes;
(b) use or access the Platforms;
(c) enter SAFRA’s premises or using any of the facilities thereon; and/or
(d) attend or participate in events or programmes organised by SAFRA.
An Individual who provides SAFRA with Personal Data relating to a third party (e.g. information of his/her spouse or children) for any particular purpose, represents to SAFRA that he/she has obtained the consent of the relevant third party to SAFRA collecting, using or disclosing such Personal Data for the relevant purpose.
In so far as SAFRA collects Personal Data of an Individual from any third party(ies), such as the Singapore Armed Forces, Ministry of Defence and/or other business partners or associates of SAFRA, SAFRA will take reasonable steps to inform the relevant third party(ies) of SAFRA’s purposes for collecting the Personal Data and to verify that consent from the Individual has been obtained by the relevant third party(ies) to such disclosure for the intended purpose.
Withdrawal of Consent
Any Individual who wishes to withdraw his/her consent to any use or disclosure of his/her Personal Data by SAFRA as set out in this Policy may do so by notifying SAFRA’s Data Protection Officer at firstname.lastname@example.org. SAFRA may require up to 3 weeks from the date of the Individual’s notification to respond and effect any change.
Depending on the extent to which an Individual withdraws consent to any or all use or disclosure of his or her Personal Data by SAFRA, such withdrawal of consent may result in SAFRA’s inability to provide services to the Individual and may be considered as a termination by the Individual of any agreement between SAFRA and the Individual. SAFRA’s legal rights and remedies are expressly reserved in such event.
Verification of Personal Data & Notification of Changes
Where feasible, SAFRA will take reasonable steps to verify the accuracy of Personal Data received at the point of collection but Individuals remain primarily responsible and liable to ensure that all Personal Data submitted by them to SAFRA is complete and accurate. Information voluntarily by an Individual to SAFRA shall prima facie be deemed complete and accurate.
SAFRA will also take reasonable steps to periodically verify Personal Data in its possession, taking into account the exigencies of its operations, but Individuals are nonetheless required to notify SAFRA, from time to time, of any applicable changes to such Personal Data.
SAFRA shall not be held liable for any inability on its part to provide services to an Individual who fails to ensure that his/her Personal Data submitted to SAFRA is complete and accurate or who fails to notify SAFRA of any relevant changes to such Personal Data.
Policy on telephone numbers registered with the DNC Registry
SAFRA is prohibited from sending unsolicited telemarketing messages (“specified messages”) to Singapore telephone numbers through voice calls, text or fax messages registered on the DNC Registers unless SAFRA has obtained the relevant Individual’s clear and unambiguous consent in written or other accessible forms.
In compliance with the PDPA, SAFRA will not send specified messages to telephone numbers that appear on the DNC Registry unless the relevant Individual has given SAFRA clear and unambiguous consent to do so.
SAFRA will continue to contact Individuals at the telephone numbers provided to SAFRA in the limited circumstances allowed under the DNC Registry even if these telephone number(s) are registered with the DNC Registry. Individuals who do not wish to receive such messages may notify SAFRA’s Data Protection Officer at email@example.com.
Activities undertaken prior to 2 July 2014
SAFRA may use Personal Data of an Individual that was collected before 2 July 2014 for purposes for which the Personal Data was collected unless consent is withdrawn by that Individual.
SAFRA will continue to use Personal Data of its alumni and current members, which had been collected before 2 July 2014, for its general business purposes and purposes relating to members and alumni. Members and alumni who wish to withdraw their consent to SAFRA’s use of their Personal Data may contact SAFRA’s Data Protection Officer at firstname.lastname@example.org.
Protection of Personal Data
SAFRA shall make reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks to Personal Data in its possession.
If SAFRA transfers Personal Data outside Singapore, SAFRA will take reasonable steps to ensure that such Personal Data transferred receives a standard of protection comparable to the protection received under the PDPA.
SAFRA will ensure that third parties who receive Personal Data from SAFRA protect such Personal Data in a manner consistent with this Policy and not use such Personal Data for any purposes other than those specified by SAFRA, by incorporating appropriate contractual terms in its written agreements with these third parties.
SAFRA is not responsible in any way for the security and/or management of Personal Data shared by Individuals with third party websites or links accessible via the Platforms.
Contacting SAFRA—Access and Correction of Personal Data
Any Individual who:
(a) has questions or feedback relating to this Policy;
(b) would like to obtain access to his/her Personal Data held by SAFRA;
(c) would like to information about the ways in which his/her Personal Data held by SAFRA has been or may have been used or disclosed by SAFRA in the year preceding the request; and/or
(d) would like to update or make corrections to his/her Personal Data held by SAFRA,
should contact SAFRA's Data Protection Officer at email@example.com.
Individuals should note that SAFRA is not required, under the PDPA, to provide access and correction to Personal Data in certain situations.
The PDPA allows and SAFRA reserves the right to charge a reasonable fee for the handling and/or processing of access requests by an Individual pursuant to paragraphs (b) or (c) above.
SAFRA may require up to 3 weeks from the date of the Individual’s request to respond and effect any change.
This Policy shall be governed by and construed in accordance with the laws of Singapore. Any dispute arising out of or in connection with this Policy including any question regarding its existence, validity or termination, shall be referred to and finally resolved by the Courts of Singapore.