This Data Protection Policy (“Data Protection Policy”) is to inform you how Kingsmen Creatives Ltd (including its related corporations and business units) (collectively, “we”, “us”, or “our”) may collect, use, disclose or otherwise process your personal data in accordance with the Personal Data Protection Act (No. 26 of 2012) (“PDPA”). This Data Protection Policy applies to personal data in our possession or under our control, including personal data in the possession of organisations which we have engaged to collect, use, disclose or process personal data for our purposes.

1. PERSONAL DATA
   1. As used in this Data Protection Policy, “personal data” means data, whether true or not, about an individual who can be identified: (a) from that data; or (b) from that data and other information to which we have or are likely to have access. This includes personal data of any clients, customers, business partners, guests, exhibitors, organizers, contractors, suppliers, vendors, and any government agencies and boards.
   2. Depending on the nature of your interaction with us, some examples of personal data which we may collect from you include your name and identification information such as your NRIC number, contact information such as your address, email address or telephone number, nationality, gender, date of birth, marital status, photographs and other audio-visual information, employment information and financial information such as credit card numbers, debit card numbers or bank account information.
   3. In general, we do not collect, use or disclose an individual’s NRIC number or a copy of the NRIC, except in the following circumstances:
      1. Collection, use or disclosure of the NRIC number or copy of the NRIC is required under the law; or
      2. Collection, use or disclosure of the NRIC number or copy of the NRIC is necessary to accurately establish and verify the identity of the individual to a high degree of fidelity.
   4. In situations where we have to collect, use or disclose an individual’s NRIC number or a copy of the NRIC, we will notify the individual of the purpose for doing so. We will also ensure that there are adequate security arrangements to prevent any unintended disclosure of the NRIC and the information contained therein. Where applicable, we may also collect a portion of your partial NRIC number.
   5. Other capitalised terms used in this Data Protection Policy shall have the meanings given to them in the PDPA (where the context so permits).
2. COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA
   1. We shall seek your consent before collecting any additional personal data and before using your personal data for a purpose which has not been notified to you (except where permitted or authorised by law). If you provide us with any personal data relating to a third party, by submitting such information to us, you represent that you have obtained the consent of the third party to provide us with their personal data for the respective purposes.
   2. We may collect your personal data in any or all of the following ways:
      1. When you submit your personal data to us for the provision of our products or services;
      2. When you interact with our staff (including any face-to-face meetings or telephone calls);
      3. When you respond to our promotions, or subscribe to our mailing lists;
      4. When you enter into an agreement with us (this includes options to purchase, sale and purchase agreements, tenancy agreements, lease agreements, licensing agreements, or any other agreements); and
      5. When you submit your personal data to us for any other reason.
   3. We may collect, use and disclose your personal data for any or all of the following purposes:
      1. Performing obligations in the course of or in connection with our provision of the goods and/or services requested by you or pursuant to any agreement;
      2. To help us review, manage and develop our goods and services by analysing customer needs;
      3. Verifying your identity;
      4. Responding to, handling, and processing queries, requests, applications, complaints, and feedback from you;
      5. Managing your relationship with us;
      6. To protect and enforce our contractual and legal rights and obligations;
      7. To handle any disputes and conduct any necessary investigations;
      8. Processing payment or credit transactions;
      9. Sending you marketing information about our goods or services;
      10. Subscribing you to our mailing list;
      11. To facilitate any of our proposed or actual business transactions (including any merger, acquisition or asset sale);
      12. Complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;
      13. Any other purposes for which you have provided the information;
      14. Transmitting to any unaffiliated third parties including our third party service providers and agents, and relevant governmental and/or regulatory authorities, whether in Singapore or abroad, for the aforementioned purposes; and
      15. Any other incidental business purposes that are reasonably related to or in connection with the above.
   4. In addition, we may collect, use and disclose your personal data for any or all of the following specific purposes if you submit an application to us as a candidate for employment:
      1. To process your job application;
      2. To provide or to obtain references for background screening;
      3. To collect information about your suitability for the position;
      4. To assess your performance;
      5. To administer benefits and payroll processing;
      6. To provide you with the necessary tools that are required for you to do your job;
      7. To develop training and staff development programs;
      8. To communicate with you as required to ensure compliance with our policies and processes; and
      9. Any other purpose in relation to any of the above.
   5. For the purposes listed above, we may disclose your personal data:
      1. Where such disclosure is required for performing obligations in the course of or in connection with our provision of the goods or services requested by you;
      2. To our affiliated or related corporations or business units;
      3. To our professional advisors (including our auditors and lawyers);
      4. To anyone to whom we transfer or may transfer our rights and duties;
      5. To banks, credit card companies and their respective service providers;
      6. Where such disclosure is required by any government, statutory or regulatory authority or law enforcement agency to comply with any laws or rules and regulations;
      7. To third party service providers, agents and other organisations we have engaged to perform any of the functions listed in Clauses 2.3 and 2.4 above for us; or
      8. To any other party to whom you authorise us to disclose your personal data.
   6. The purposes listed in the above clauses may continue to apply even in situations where your relationship with us (for example, pursuant to a contract) has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable us to enforce our rights under any contract with you).
   7. We may also have specifically notified you of other purposes for which we collect, use or disclose your personal data in relation to certain goods or services that we provide. If so, we will then collect, use and disclose your personal data for these additional purposes as well, unless we have specifically notified you otherwise.
3. WITHDRAWING YOUR CONSENT
   1. The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you in writing. You may withdraw consent and request us to stop using and/or disclosing your personal data for any or all of the purposes listed above by submitting your request in writing or via email to our Data Protection Officer at the contact details provided at Clause 12 below.
   2. Upon receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we shall seek to process your request within ten (10) business days of receiving it.
   3. Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue providing our goods or services to you and we shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform us in writing in the manner described in Clause 3.1 above.
   4. Please note that withdrawing consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclose without consent is permitted or required under applicable laws.
4. ACCESS TO AND CORRECTION OF PERSONAL DATA
   1. If you wish to make (a) an access request for access to a copy of the personal data which we hold about you or information about the ways in which we use or disclose your personal data, or (b) a correction request to correct or update any of your personal data which we hold about you, you may submit your request in writing or via email to our Data Protection Officer at the contact details provided at Clause 12 below.
   2. Please note that a reasonable fee may be charged for an access request. If so, we will inform you of the fee before processing your request
   3. Please note that if your personal data has been provided to us by a third party, you should request the relevant third party to make the access or correction request on your behalf.
   4. We will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any personal data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the PDPA).
5. PROTECTION OF PERSONAL DATA
   1. To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have introduced appropriate administrative, physical and technical measures such as up-to-date antivirus protection, encryption and the use of privacy filters to secure all storage and transmission of personal data by us, and disclosing personal data both internally and to our authorised third party service providers and agents only on a need-to-know basis.
   2. You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.
6. ACCURACY OF PERSONAL DATA
   1. We generally rely on personal data provided by you (or your authorised representative). In order to ensure that your personal data is current, complete and accurate, please update us if there are changes to your personal data by informing our Data Protection Officer in writing or via email at the contact details provided at Clause 12 below.
   2. For all the purposes mentioned at Clause 2 above, you should ensure that all personal data that you provide to us is accurate and true. Failure to do so may result in us being unable to provide the goods and services you have requested.
7. 7
   1. We may retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws.
   2. We will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal data was collected, and is no longer necessary for legal or business purposes.
8. TRANSFERS OF PERSONAL DATA
   1. Your personal data may be transferred out of Singapore for the purposes described at Clause 2.3 and Clause 2.4 above. In particular, your personal data may be stored in external servers that are located out of Singapore, or may be transferred out of Singapore where it is necessary to share your personal data with and between our related corporations and business units, and third party service providers.
   2. We are committed to protecting your personal data when it is transferred out of Singapore. Where your personal data is transferred out of Singapore, we will take reasonable steps to ensure that your personal data continues to receive a standard of protection that is at least comparable to that provided under the PDPA. For example, we may enter into contracts or impose binding corporate rules with the recipients of your personal data to protect your personal data in a manner that is compliant with all applicable laws. You may obtain further information in this regard by contacting our Data Protection Officer in writing or via email at the contact details provided at Clause 12 below.
9. COOKIES
   1. If you access our information or services through our website, you should be aware that cookies are used. Cookies are data files stored on your browser. When you access our website, we automatically use cookies on your browser. Generally, the cookies used in connection with our website do not contain personal data. The cookies placed by our server are readable only by us, and cookies cannot access, read or modify any other data on your computer.
   2. You may refuse to accept cookies on your browser by modifying the settings in your browser or internet security software. However, you should be aware that if you do so, you may not be able to use certain functions that are available on our website.
   3. If you would like to contact us with any queries or comments please contact our Data Protection Officer at the details provided at Clause 12 below.
10. IP ADDRESS
    1. An IP address is a number that is automatically assigned to your computer when you sign up with an Internet Service Provider.
    2. When you visit our website, your IP address is automatically logged in our server. We use your IP address to administer the website and track the movements of internet users. Generally, we do not link your IP address to anything that can enable us to identify you unless it is required by the applicable laws or regulations.
11. THIRD PARTY SITES
    1. Our websites may contain links to other websites that are operated by third parties. As we have no control over and are not responsible for the privacy practices of websites operated by these third parties, we encourage you to check the privacy policies of such third party websites.
12. DATA PROTECTION OFFICER
    1. You may contact our Data Protection Officer at [email protected], if you have any enquiries or feedback on our personal data protection policies and procedures, or if you wish to make any request.
13. CONTACTING YOU
    1. If you have provided us with your Singapore telephone number(s) and have indicated that you consent to receiving our marketing or other promotional information by way of your Singapore telephone number(s), then from time to time, we may contact you using such Singapore telephone number(s) even if these telephone number(s) are registered with the “Do Not Call” Registry. You may however let us know in writing if you do not wish to be contacted by us at your telephone number(s) for such purposes.
14. GOVERNING LAW
    1. This Data Protection Policy shall be governed by and shall be construed in accordance with the laws of Singapore. You hereby submit to the non-exclusive jurisdiction of the Singapore courts.
15. EFFECT OF DATA PROTECTION POLICY AND CHANGES TO DATA PROTECTION POLICY
    1. This Data Protection Policy applies in conjunction with any other notices, contractual clauses and consent clauses that apply in relation to the collection, use and disclosure of your personal data by us.
    2. For the avoidance of doubt, this Data Protection Policy forms a part of the terms and conditions governing your relationship with us and should be read in conjunction with those terms and conditions.
    3. We may revise this Data Protection Policy from time to time without any prior notice to reflect any changes in the applicable laws or the way in which we collect, use and disclose your personal data. You are encouraged to re-visit our Data Protection Policy from time to time to keep yourself updated on these changes. Your continued use of our services constitutes your acknowledgement and acceptance of such changes.