Purpose of This Privacy Policy
This Privacy Policy explains how iviva (“iviva,” “we,” “us,” or “our”) collects, uses, stores, processes, discloses, and/or transfers (collectively referred to as “handles”) your personal data. This applies to personal data collected through our website (“Website”) or other means, in accordance with the Personal Data Protection Act 2012 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR).
This Privacy Policy is part of our Terms and Conditions, which govern the contractual relationship between iviva and you.
The policy applies to the personal data of individuals, including current or potential members of iviva and users of this Website (“you” or “your”). By providing your personal data, you consent to its handling as outlined in this Privacy Policy, which may be updated periodically. The most recent version is available on our Website at [www.iviva.com].
This Privacy Policy does not override any legal rights that iviva may have in handling personal data. By continuing to use our services, you agree to be bound by the current version of this Privacy Policy as updated on our Website.
What Personal Data Do We Collect?
Definition of Personal Data
- “Customer” refers to an individual who:
- (a) has contacted us to inquire about our goods or services, or
- (b) has entered into a contract with us for the supply of goods or services
- “Personal data” refers to any data, whether true or not, about a customer who can be identified:
- (a) from that data, or
- (b) from that data combined with other information to which we have or are likely to have access.
Examples of Personal Data
Personal data we may collect includes:
- Name and identification details (e.g., Passport number, national id).
- Contact information (e.g., address, email, telephone number).
- Demographic details (e.g., nationality, gender, marital status, date of birth).
- Photographs.
- Employment details.
Other terms used in this policy follow definitions provided in the PDPA.
Collection, Use, and Disclosure of Personal Data
Collection
We typically do not collect your personal data unless:
- (a) You or an authorized representative voluntarily provide it after being informed of the purpose, and consent in writing.
- (b) Collection is permitted or required under PDPA or other applicable laws.
We will notify you of the purpose before collecting additional data or using it for purposes not previously disclosed.
Use and Disclosure
We may collect, use, or disclose personal data for:
- Fulfilling obligations related to goods or services requested by you.
- Verifying your identity.
- Responding to inquiries, requests, complaints, or feedback.
- Managing our relationship with you.
- Sending marketing information about our products, events, promotions, and membership programs.
- Complying with legal and regulatory requirements.
- Transmitting data to third parties (e.g., service providers, regulatory authorities) for the above purposes.
- Other business purposes directly related to the above.
Even after the termination of your relationship with us, these purposes may continue to apply for a reasonable period (e.g., to enforce contractual rights).
Withdrawing Consent
You may withdraw your consent to the collection, use, or disclosure of your personal data by submitting a written request to our Data Protection Officer (DPO).
We will process your request within 10 business days and inform you of any consequences, such as our inability to continue providing certain services. Please note that withdrawal of consent does not affect our rights to handle your data where permitted by law.
Access and Correction of Personal Data
You may:
- Request access to personal data we hold about you.
- Request corrections to your personal data.
Submit requests in writing or via email to our DPO. A reasonable fee may be charged for access requests, and we will inform you of the cost before proceeding. We strive to respond within 30 business days.
Protection of Personal Data
To protect your personal data, we implement administrative, physical, and technical safeguards, including:
- Encryption and privacy filters.
- Restricted access on a need-to-know basis.
While no security system is completely secure, we continuously review and enhance our security measures.
Accuracy of Personal Data
We rely on personal data provided by you or your authorized representative. To ensure accuracy, please inform us of any updates to your personal data.
Retention of Personal Data
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Data no longer needed will be securely deleted or anonymised.
Transfer of Personal Data Outside Singapore
If we transfer personal data outside Singapore, we will seek your consent and ensure that the recipient country provides comparable data protection under the PDPA.
Effect of Notice and Changes to Notice
This policy works alongside other notices or contractual clauses related to your personal data.
We may revise this Privacy Policy at any time without prior notice. Check the “Last Updated” date on our Website for updates. Your continued use of our services indicates acceptance of these changes.
Contacting Us
If you have any questions about this Privacy Policy or wish to exercise your rights, contact our Data Protection Officer:
Email: geethmi@ecyber.com
Address:
1 Science Park Road, The Capricorn, West Wing #04-06, Singapore 117528
