Privacy Policy

This Privacy Policy (the "Policy") sets out principles and procedures adopted by Braendz International PTE. LTD. ("the Company", "us", "we", "our") on how we use and protect any information that you give the Company when you use this website (the "Website").

The Company is committed to ensuring that your privacy is protected and to handling Personal Data in accordance with the Personal Data Protection Act 2012 and other applicable laws of Singapore. Should we ask you to provide certain information by which you can be identified when using this Website, then you can be assured that it will only be used in accordance with this privacy statement. This Policy fosters transparency and trust in how we handle sensitive information.

By accessing or using our Website, services, platforms, or communicating with us through any channel, you acknowledge that you have read and understood this Policy and consent to the collection, use, and disclosure of your Personal Data in accordance with this Policy, where such consent is required by law.

This Policy applies to persons anywhere in the world who access or use our Website ("Users"). The Policy applies to Personal Data that we collect, use, store, and disclose, in the course of our business operations and forms an integral part of our commitment to complying with the applicable data protection laws, when you:

• visit our website,
• interact with our team,
• communicate with us through any channel, or
• engage with our services.

3.1 Personal Data means data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which the Company has or is likely to have access. Personal Data may include, without limitation, an individual's legal name, contact details (such as email address, telephone number, and residential or mailing address), identification details, IP address, device and browser information, transaction or payment information, and any other information voluntarily provided to the Company.

3.2 Personal Data Breach means any unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risk involving Personal Data, or the loss of any storage medium or device on which Personal Data is stored. This may include, without limitation, unauthorised access by third parties or employees, accidental disclosure of Personal Data to unintended recipients, loss or theft of devices or documents containing Personal Data, or cyber incidents such as malware attacks, ransomware, or system intrusions affecting the confidentiality, integrity, or availability of Personal Data.

3.3 Processing means any activity involving Personal Data, including collection, use, disclosure, storage, transfer, modification, or deletion.

4.1 We may collect, use, disclose, and process Personal Data provided by you voluntarily, or collected automatically through your use of the Website and related services, for purposes that a reasonable person would consider appropriate in the circumstances, including but not limited to:

• registering and administering your account or access to the Website;
• providing access to our platform or services;
• communicating with you regarding your enquiries or requests;
• conducting identity verification, due diligence, or compliance checks (including through third-party providers such as Sumsub);
• sending updates, marketing communications, or other information that may be relevant to you;
• enabling participation in interactive features, surveys, or events;
• maintaining, monitoring, improving, and securing our Website, systems, and services;
• personalising user experience, content, recommendations, and Website functionality; and
• complying with applicable legal, regulatory, contractual, and operational requirements.

4.2 We may also receive Personal Data from third parties, including partners, social media platforms, publicly available sources, or referral sources, for purposes consistent with this Policy and as permitted under applicable law.

4.3 We do not sell Personal Data to third parties for monetary consideration. We may disclose Personal Data to third parties where:

• you have provided consent;
• such disclosure is reasonably necessary for the provision of our services or business operations; or
• the disclosure is permitted or required under applicable laws or regulations, including for regulatory compliance, legal proceedings, fraud prevention, or law enforcement purposes.

We may disclose Personal Data to third parties where reasonably necessary for the purposes described in this Policy, including:

• With affiliates, marketing partners, and services providers who process data on our behalf or assist in providing services to you;
• With third parties you authorise, including social media platforms, APIs or websites integrated with our Website;
• With partners involved in promotions, offers, or services requested by you;
• With government authorities or regulators, where required by applicable law, regulation and legal process; or
• With any other party to whom the individual authorises or directs us to disclose Personal Data.

All third parties receiving Personal Data are expected to maintain appropriate confidentiality and security measures consistent with applicable legal and regulatory requirements.

We implement appropriate technical and organisational measures in order to safeguard Personal Data against any form of unauthorised access, alterations, loss, or destruction, which include, but are not limited to:

• Establishing policies and procedures for securely managing information;
• Encryption of Personal Data at rest and in transit;
• Use of technical safeguards such as multi-factor authentication (MFA), secure access logs, and intrusion detection systems;
• Access control mechanisms based on roles, responsibilities, and legitimate business needs;
• Regular audits and reviews of data security practices; and
• Vetting and use of third-party service providers (such as Sumsub and Google Workspace), which implement security measures consistent with the applicable law and international standards.

To safeguard your Personal Data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have introduced appropriate administrative, physical and technical measures. You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with applicable legal, regulatory, contractual, accounting, or reporting obligations as per the applicable Singapore laws. The retention period may vary depending on the nature of the Personal Data and the purpose of Processing. Once the applicable retention period expires, or where the Personal Data is no longer required, we will securely delete, destroy, or anonymise such data in accordance with applicable Singapore laws and industry standards, ensuring that it cannot be accessed, reconstructed, or used to identify any individual.

You may request access to and correction of your Personal Data and limit the processing of your Personal Data or make any enquiries or complaints in respect of the processing of your Personal Data, by contacting us at the contact details set out below. You are responsible for informing us when your personal data or preferences have changed and require updating. We shall, within a reasonable time frame, attend to your request for access to and correction of your Personal Data or updating of your preferences.

In the event of a Personal Data Breach, we will take reasonable and appropriate steps to:

• identify, assess, and contain the breach, including determining the nature, scope, cause, and potential impact of the incident;
• mitigate risks arising from the breach and take remedial measures to prevent further unauthorised access, use, disclosure, loss, or compromise of Personal Data;
• comply with applicable breach notification and reporting obligations under Singapore law, including notifying the relevant regulatory authorities and affected individuals where required; and
• maintain records of data breaches in accordance with applicable legal and regulatory requirements.

You may withdraw consent to our collection, use, or disclosure of your Personal Data by contacting us using the details set out below. Please note that withdrawing consent may affect our ability to provide certain services or respond to requests.

This Policy is reviewed annually and updated as needed to reflect changes in regulations or operational practices. If we make significant changes in the way we treat your Personal Data, or to this Policy, we will endeavour to provide you notice through the Website or by some other means, such as email. Your continued use of the Website after such notice constitutes your acknowledgment to the changes.

For questions or requests, please contact info@braendz.com.