DATA PROTECTION

This Data Protection Policy “Policy” describes how the Sessom Asia Pte Ltd (“Sessom Asia”) collects, uses and discloses personal information of customers through our websites and online services, through our membership and other programs and in our physical stores (collectively, the “Services”). By accessing our websites or utilizing the Services, you hereby consent to the use of your information, including your personal data, in the manner described in this Policy and represent and warrant that you understand the contents of this Policy.

Sessom Asia may revise and/or amend and/or supplement this Policy at its discretion from time to time. Such changes will be published on our website. You are advised to check periodically to ensure that you are aware of any changes. To the fullest extent permissible under relevant laws, you agree to be bound by the prevailing terms of this Policy.

This Policy is to be read in conjunction with our Privacy Policy.

1.

GENERAL

1.1.

This Policy provides information on the obligations and policies of Sessom Asia in respect of an individual customer’s information and personal data in compliance with the Personal Data Protection Act 2012 of Singapore (the “Act”).

1.2.

For the purposes of this Policy, “personal data” shall have the same meaning as set out in the Act, being data, whether true or not, about an individual customer who can be identified from that data; or from that data and other information to which an organization has or is likely to have access. Such personal data includes those which are already in possession by Sessom Asia or that which shall be collected by Sessom Asia in the future.

2.

DATA PROTECTION OFFICER

2.1.

Sessom Asia has appointed a data protection officer (“DPO”) as required by the Act. The DPO has been appointed to oversee Sessom Asia’s compliance with the Act. Other employees within Sessom Asia may be delegated to act on behalf of the DPO or to take responsibility for the day-to-day collection, processing and use of personal data.

2.2.

The DPO may be contacted at:

Data Protection Officer

SESSOM ASIA PTE LTD

The Signature

51 Changi Business Park Central 2 #04-05

Singapore 486066

Email: info@sessomasia.com

3.

COLLECTION OF PERSONAL DATA

3.1.

1. you are providing it to us upon completing a service application form, when you make a purchase or apply for our Services, or when you enquire with us about our Services, or which is otherwise volunteered to us in any way;
2. automatically, when you visit our website, using technologies such as cookies;
3. during recording of calls made when you contact our customer service hotline, which may be recorded for training, quality control, business and/or other lawful purposes;
4. through close circuit television recordings when you visit our physical stores or premises;
5. we obtain it from other entities within Sessom Asia and/or;
6. we collect it by other lawful means.

3.2.

Subject to Clause 3.1, unless permitted by relevant laws, Sessom Asia shall not collect personal data without your consent.

3.3.

You warrant and represent to Sessom Asia that personal data which you disclose, provide or volunteer to Sessom Asia, or to any entity that subsequently provides it to Sessom Asia, is accurate and complete.

3.4.

If you disclose, provide or volunteer the personal data of another person to Sessom Asia, you warrant and represent to Sessom Asia that you have been authorized by such other person to disclose such personal data to us, and that such personal data is accurate and complete.

4.

PURPOSES FOR COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA

4.1.

1. to verify your identity and to process orders and applications for the Services;
2. to provide the Services to you;
3. to create, provide, maintain and operate your membership account with us;
4. to respond and deal with enquires or complaints and for other after-sales activities;
5. to generate bills, facilitate the payment of bills, manage accounts and debt-recovery functions;
6. to carry out credit checks and for evaluation of creditworthiness;
7. to manage, develop and improve our business and operations to serve you better;
8. to carry out contests and lucky draws;
9. to carry out market research and customer surveys and performing of analytics;
10. to inform you of our latest marketing updates and promotions;
11. to conduct investigations or take actions in relation to bad debts, crime and fraud prevention, detection or prosecution, risk management, or to prevent you or Sessom Asia from harm, illegal or unlawful activities;
12. to conduct investigations or take action in relation to any violation of our terms and conditions for Services;
13. to establish, exercise or defend Sessom Asia’s legal rights;
14. in connection with any legal proceedings or prospective legal proceedings;
15. in applications for employment with us;
16. to third parties who perform Services on our behalf, but only to the extent necessary for the Services to be performed;
17. to protect and maintain the personal data, and to have access to it including for the updating of personal data;
18. to comply with legal and regulatory requirements and all relevant laws; and
19. any other purpose reasonably related to the above specified purposes.

4.2.

Your personal data will be disclosed for the purposes indicated above to our officers and employees, third parties, service providers, advisors, at all times in compliance with the Act. Such parties which your personal data may be disclosed may include but are not limited to:

1. external service providers, contractors and third parties providing the Services or performing any of the Services (or any part of the Services) on Sessom Asia’s behalf;
2. banks, credit card companies and payment vendors for the processing of payment;
3. courier service companies;
4. public agencies, including without limitation government and law enforcement agencies;
5. professional advisors such as auditors and lawyers; and
6. any data intermediaries.

4.3.

To the extent that any of the communication means which you have provided to Sessom Asia (which may include your contact numbers) is/will be listed on the Do Not Call Registry, by agreeing to this Policy through the signing of our membership forms (either physical copies or online), or by any other means of indication, you hereby grant Sessom Asia your clear and unambiguous consent to contact you using any of the communication means you have provided to Sessom Asia for the above-mentioned purposes. If you wish to opt-out of being contact for marketing purposes, please take the steps set out in Clause 8.4.

5.

DEEMED CONSENT

5.1.

You are deemed to have given your consent for the collection, use and disclosure of your personal data in the following circumstances:

1. when the personal data is voluntarily provided by you to Sessom Asia;
2. when you are aware or should reasonably be aware of the purposes for which you have provided your personal data to us;
3. it is reasonable for you to have provided the personal data to Sessom Asia in the circumstances; and
4. in any other circumstances where consent is deemed under the Act.

6.

LIMITING COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA

6.1.

Sessom Asia collects personal data primarily from persons who are our customers (including prospective customers). The collection of personal data is limited to that which is necessary for the identified purposes above.

6.2.

Unless permitted by relevant laws, Sessom Asia will not disclose personal data to other persons or entities for the advertising, promotion or marketing of any third party’s products and services, and Sessom Asia will not sell for payment your personal data to anyone for any marketing purpose, unless your consent has first been given.

6.3.

If your personal data is provided to our third-party service providers or data intermediaries, they are only to use your personal data for the purpose(s) for which we have supplied the personal data to them. We will also take reasonable steps to ensure that such organizations to whom we have disclosed your personal data are legally bound to comply with the provisions of the Act.

7.

RETENTION OF PERSONAL DATA

7.1.

Sessom Asia will collect and retain personal data at our discretion, for as long as you remain our customer or access our Services and for as long as it is necessarily required or relevant for business or legal purposes.

8.

WITHDRAWAL OF CONSENT

8.1.

You are able to withdraw your consent to our continued use and disclosure of your personal data at any time. Such withdrawal must be made formally in writing to the DPO.

8.2.

If such consent is withdrawn, you acknowledge that Sessom Asia may no longer be able to provide the Services to you. Accordingly, Sessom Asia may, insofar as such consent is integral to the provision of the Services, cease to provide the Services to you. Notwithstanding any withdrawal of consent, (a) unless otherwise agreed by Sessom Asia, you will still be bound by any contract(s) for Services with Sessom Asia, and should you choose to terminate the relevant contract(s), early termination charges and other charges, penalties or contractual consequences may apply in accordance with the contract(s) or under relevant laws and Sessom Asia reserves all rights thereof, and (b) Sessom Asia has the right to terminate the contract(s) in its discretion, without liability to you.

8.3.

For further clarification on the implications of withdrawing consent, you may write in to the DPO.

8.4.

You may write in to our Customer Service at info@sessomasia.com to indicate the withdrawal of your consent to receiving marketing communications from Sessom Asia. You may separately withdraw such consent via the unsubscribe options as stated on the SMS or email marketing message.

8.5.

You may also set your browser to warn you when a cookie is being sent or to remove or reject cookies. If you choose to remove or reject cookies, it will affect some features of our Services on our website.

9.

PROTECTION OF PERSONAL DATA

9.1.

To the extent required by the Act, Sessom Asia shall protect personal data in its possession or under its control against risks of unauthorized access, collection, use, disclosure, copying, modification, disposal or destruction, through reasonable and appropriate security measures. However, Sessom Asia cannot ensure or warrant the security of any information you transmit to Sessom Asia and you do so entirely at your own risk.

10.

ACCURACY AND CORRECTION OF PERSONAL DATA

10.1.

To the extent required by the Act, Sessom Asia will use reasonable efforts to ensure that the personal data is sufficiently accurate and complete to minimize the possibility that incorrect personal data may be used to make a decision that impacts you, or if such personal data is likely to be disclosed to a third party. However, you acknowledge that there may be circumstances where Sessom Asia is entitled to assume such accuracy and completeness.

10.2.

It is your sole responsibility to inform us when there are any changes to your personal data which has been provided to us, so as to ensure that we have the most current, accurate and complete information.

10.3.

If you would like to update us with your updated personal data, please write in to the DPO. Please provide your full name, NRIC number, contact details and any other details required by the DPO. We may take up to thirty (30) working days to process your request.

11.

ACCESS TO PERSONAL DATA

11.1.

To the extent required by the Act, upon request, if you would like a copy of your personal data held by Sessom Asia or how it has been used, please write in to the DPO. Please provide your full name, NRIC number, contact details and any other details required by the DPO. Pursuant to the Act, Sessom Asia is entitled to charge you a reasonable fee for this service and we will process your request upon receipt of such payment. We will need up to thirty (30) working days to process your request.

11.2.

We may provide a standard list of possible purposes, third parties or data intermediaries who may have accessed or used your personal data as part of its response to you, and the same shall suffice as performance of Sessom Asia’s obligations in respect thereof.

11.3.

Subject to the Act, Sessom Asia may not be able to provide access to all of your personal data that we hold. For example, Sessom Asia may not provide access to your personal data if such provision would reveal the personal data of another person, if such information is subject to legal privilege or if such provision will be contrary to national interest. If access to personal data cannot be provided, where possible, the reasons for denying access will be provided upon your request.

12.

MISCELLANEOUS

12.1.

Your personal data may be processed by Sessom Asia or its data intermediaries or third parties, providing services to Sessom Asia in jurisdictions outside of Singapore. In such an event, Sessom Asia will take reasonable steps to ensure that such organizations will be legally bound to comply with the terms of the Act.

12.2.

This Policy only applies to the collection, disclosure and use of personal data by Sessom Asia. It does not cover third party sites not operated by us, even if such sites are co-branded or licensed to use our logo. Sessom Asia does not share your personal data with such third-party sites. Sessom Asia is not responsible for the privacy and conduct practices of these third-party sites and shall not be held responsible or liable in anyway way for the actions of these third party sites.

12.3.

For more information on the Act, or to contact the Personal Data Protection Commission, please visit www.pdpc.gov.sg