1. Personal Data
   Personal Data ("Personal Data"), which is personal information that links back to an individual, includes but is not limited to:
   (a.) name, gender, date of birth, passport or other personal identification numbers, images, photographs, videos, closed circuit television (CCTV) footage, voice recordings;
   (b.) contact information e.g., address, phone number, email address;
   (c.) payment information e.g., bank name, bank branch, bank code and account number, including the name of account holder;
   (d.) biometric information;
   (e.) health information e.g., medical records or requests; and
   (f.) technical information e.g., IP address or device identification.
2. The types of data that Phisudo collects depends on the circumstances of the collection and on the nature of the service requested or transaction undertaken.
3. If you choose to make an enquiry or an application (including a job application through our website), send us an email, approach us in person or through any of our various offices in Singapore and overseas, we may require you to provide contact and identity information and other personal data (including name, address, contact details). Where possible, we have indicated the fields which are required and the fields which are optional.

1. Generally, Phisudo collects Personal Data either directly from you or your authorized representatives (i.e. persons who have been validly identified as being authorized by you through our security procedures) in the following ways:
   (a.) when you submit forms relating to or purchase or use any of our products or services;
   (b.) when you interact with our customer service officers, including via telephone calls, face-to- face meetings and emails;
   (c.) when you request that we contact you or be included in an email or other mailing list;
   (d.) when you respond to our promotions or other incentives;
   (e.) when you respond to our request for additional Personal Data;
   (f.) when you respond to our surveys;
   (g.) when you submit a job application;
   (h.) when we receive references from business partners and third parties, for example, where you have been referred by them;
   (i.) when you submit your Personal Data to us for any other reasons; and
   (j.) when you browse our website. If you are only browsing our website, you generally do so anonymously. We do not capture any data that allows us to identify you individually, unless you provide such information. However, we do use cookies on our websites. To find out more, please refer to the section on cookies below.(f.) technical information e.g., IP address or device identification.
2. We collect, use, disclose and/or share your personal information for the following purposes:
   (a.) to communicate with you on any queries you may have;
   (b.) to process your order and deliver products and services to you;
   (c.) to manage the administration and business operations of Phisudo and complying with our policies and procedures;
   (d.) for service improvements, resolving complaints and disputes;
   (e.) for identity verification purposes;
   (f.) to communicate with you and/or to keep records in connection with a job application and other job opportunities;
   (g.) in relation to a job application by you:
   − to contact the referee(s) and/or guarantor(s) whose details have been provided by you;
   − to verify your academic and professional qualification by contacting the school/college/university/institute/professional qualifying bodies; and
   − to disclose your personal data to Phisudo's customers in connection with your job application;
   (h.) for employee training and performance evaluation;
   (i.) to provide access controls;
   (j.) to update our records and generally maintain your accounts with us;
   (k.) to detect and prevent fraudulent activity;
   (l.) to meet or comply with any applicable rules, laws, regulations, codes of practice or guidelines issued by any legal or regulatory bodies which are binding on Phisudo (including but not limited to responding to regulatory complaints, disclosing to regulatory bodies and conducting audit checks, due diligence and investigations).
3. Furthermore, where permitted under applicable laws, we may collect, use and disclose your Personal Data for the following additional purposes:
   (a.) analytics and tracking, including facilitating the sale of analytical data;
   (b.) conducting market research and surveys to enable us to understand and determine customer location, preferences and demographics to develop special offers and marketing programmes in relation to our products and services and to improve our service delivery and your customer experience at our touchpoints;
   (c.) providing additional products and services and benefits to you;
   (d.) matching your Personal Data with other data collected for other purposes and from other sources (including third parties) in connection with the provision, marketing or offering of products and services to you;
   (e.) leads generation and management for marketing products and services of Phisudo;
   (f.) administering contests, competitions and marketing campaigns, and personalising your experience at our touchpoints;
   (g.) organizing promotional events; and
   (h.) purposes which are reasonably related to the aforesaid.
4. Phisudo does not practice sharing, renting or selling of Personal Data with third parties. However, each member of the Group may share your personal information with members of Phisudo (which includes our affiliates, subsidiaries and joint ventures worldwide). Access to Personal Data is limited to persons whom we reasonably believe requires access for effective delivery of our products and services to you, to process your job application or for the purposes set out herein
5. We may also collect, use and disclose such personal information if so authorized or required by law or the relevant authorities, or exempted under the relevant Personal Data Protection Act or Privacy Act to do so.
6. Further, we may disclose or share your Personal Data in the following circumstances:
   (a.) Third Party Service Providers: We may disclose your personal data to third parties:
   − contracted by us to assist us in delivering part or all of the products and services ordered by you;
   − who provide services as part of the promotions or services offered to you;
   − who provide services to us such as professional advisers, IT consultants etc.;
   − credit bureaus for the purpose of preparing credit reports or evaluation of creditworthiness;
   − bankers, insurers, credit card companies and any of their respective service providers
   (b.) With your consent: We may seek your consent to collect, hold, use and disclose your personal data for any other purpose not set out herein.
   (c.) Business Transfers: As we continue to develop our business, we might sell or buy businesses, subsidiaries or business units or undertake a merger. In such transactions, customer information may be one of the transferred business assets.
7. Phisudo shall use its best effort to ensure that its employees, officers, partners and such other
   third parties mentioned above who are involved in the collection, processing and disclosure of
   Personal Data will observe and adhere to the terms of this policy.
8. Phisudo also reserves the right to share your Personal Data as is necessary to prevent a threat to the life, health or security of an individual or corporate entity. Further, Phisudo may disclose your Personal Data to law enforcement agencies, government representative and our advisers, as is necessary, to investigate suspected unlawful activities including but not limited to fraud, intellectual property infringement or privacy

Phisudo needs your assistance to ensure that your Personal Data is current, complete and accurate. We understand that this information may from time to time change. We encourage you to contact us as soon as possible to enable us to update any Personal Data we have about you. Incomplete or outdated Personal Data may result in our inability to provide you with products and services you have requested or complete the applications sought.

1. If you wish to:
   (a.) apply for a copy of the personal data we hold about you;
   (b.) request for your personal data to be updated or corrected; or
   (c.) withdraw the consent you previously provided to us to use the Personal Data we hold about you, please contact us at the contact set out in Section 10 below.
2. Please allow us reasonable time to respond to any request and effect any change. Should we not be able to respond to your request within 30 days after receiving your request, we will inform you in writing via email within 30 days of the time by which we will be able to respond to your request. We may ask you to verify your identity and for more information about your request. Access is only limited to your own data and no others
3. Where we are legally permitted to do so, we may refuse your request and give you reasons for doing so. In such cases, you may resubmit a request with other supporting valid reasons to us at the contact set out in Section 10 below. Where you request your personal data to be updated and there is a dispute about the facts, we will make a note on your personal data of such dispute. Where permitted to do so, we may charge an administrative fee for access requests.
4. Please note that if your Personal Data has been provided to us by a third party (e.g. a referral), you should contact that organization or individual to make such queries, complaints, and access and correction requests. This is to ensure that your queries, complaints, and access and correction requests are properly processed by the organization or individual.
5. If you withdraw your consent to any or all use of your Personal Data, depending on the nature of your request, we may not be in a position to continue to provide our products and services to you, administer any contractual relationship in place, which in turn may also result in the. termination of any agreements with us, and your being in breach of your contractual obligations or undertakings. Our legal rights and remedies in such event are expressly reserved

Phisudo will retain your Personal Data for the duration of time to carry out the purposes for which your personal data was collected, for the other purposes set out in this policy, for business purposes and as required by relevant laws. For the avoidance of doubt, Phisudo may retain your Personal Data for any of the foregoing reasons notwithstanding any notice to withdraw the consent you previously provided to us to use the Personal Data we hold about you.

1. Phisudo has implemented stringent measures to protect the confidentiality of your personal data. We will take reasonable care to protect your personal data from unauthorized access, improper use or disclosure, unauthorized modification, unlawful destruction or accidental loss. These include limiting access to information in our systems, authentication processes to prevent unauthorized access to information and safeguards to prevent security breaches in our network and database systems.
2. We train our employees who handle your Personal Data to respect the confidentiality of your Personal Data. We regard breaches of Personal Data seriously.
3. We may transfer, store, process and/or deal with your personal data outside Singapore. In doing so, we will comply with the PDPA and other applicable data protection and privacy laws

Our websites may contain links to third party sites whose data protection and privacy practices may differ from ours. We are not responsible for the content and privacy practices of these other websites and encourage you to consult the applicable privacy policies governing those sites. Phisudo is not responsible for any information that is submitted to or collected by these third parties.

1. Our websites use cookies to monitor browsing preferences and help us analyze data about webpage traffic in order to make website improvements and for statistical analysis purposes. A cookie does not give us access to your computer or any information about you, other than the data you choose to share with us. Most Internet browsers allow you to turn off cookies. Should you do so, you may not be able to experience all of the features of our websites.
2. Our websites use Google Analytics. For more information about Google analytic cookies, please see Google's help pages and privacy policy:
   − Google's Privacy Policy
   − Google Analytics Help pages
   Google have developed the Google Analytics opt-out browser add-on for the Google Analytics JavaScript
   (ga.js, analytics.js, dc.js). If you want to opt out of Google Analytics, you can download and install the add-
   on for your web browser.

1. This policy will be reviewed and updated from time to time by Phisudo to take into account new laws, technological changes, changes to our operations and practices and industry trends.
2. Subject to your rights at law, you agree to be bound by the prevailing terms of our Personal Data
   Protection guidelines as updated from time to time on our websites. Please check back regularly
   for updated information on the handling of your Personal Data.

1. To contact us on any aspect of this Notice or your personal data, or to provide any feedback that you may have, you may get in touch with us by emailing support@phisudo.com, or by post addressed to:
   Phisudo Pte. Ltd.
   81 Tagore Lane #04-02
   Singapore 787502
2. All such communication should include, at least, the following details:
   − Your full name and contact information; and
   − Brief description of your query or feedback.
3. We treat such queries and feedback seriously and will deal with them confidentially and within a reasonable time.