Data Protection Notice for Customers

This Data Protection Notice (“Notice”) sets out the basis which Sin-Yun Pte Ltd (“we”, “us”, or “our”) may collect, use, disclose or otherwise process personal data of our customers in accordance with the Personal Data Protection Act (“PDPA”). This Notice applies to personal data in our possession or under our control, including personal data in the possession of organisations which we have engaged to collect, use, disclose or process personal data for our purposes.

Personal Data

1. “Customer” means an individual who has contacted us to find out more about our goods or services, or who may enter or has entered into a contract with us. “Personal data” means data, whether true or not, about a customer who can be identified from that data, or from that data and other information to which we have or are likely to have access.

2. Depending on your interaction with us, examples of personal data we may collect include your name, email address and telephone number.

3. Other terms used in this Notice have the meanings given to them in the PDPA where the context permits.

Collection, Use and Disclosure of Personal Data

4. We generally do not collect personal data unless it is provided voluntarily by you or by a third party duly authorised by you, after the purposes have been notified and consent has been provided; or where collection and use without consent is permitted or required by the PDPA or other laws. We will seek consent before collecting additional personal data or using it for a purpose not previously notified, except where permitted or authorised by law.

5. We may collect and use personal data to provide requested goods or services; verify identity; respond to and process queries, requests, applications, complaints and feedback; manage our relationship with you; comply with applicable laws, regulations, codes, guidelines and rules or assist law enforcement and regulators; fulfil other notified purposes; transmit data to service providers, agents and relevant authorities in Singapore or abroad for those purposes; and support incidental business purposes connected with the above.

6. We may disclose personal data where required to perform obligations connected with the goods and services requested by you.

7. These purposes may continue for a reasonable period after our relationship with you has ended or changed, including where necessary to enforce contractual rights.

Withdrawing Your Consent

8. Consent remains valid until withdrawn in writing. You may ask us to stop collecting, using or disclosing your personal data by writing or emailing our Data Protection Officer.

9. We may require reasonable time to process a withdrawal request and explain its consequences. In general, we seek to process it within 30 business days.

10. Depending on the request, we may not be able to continue providing goods or services. We will notify you before completing the withdrawal. You may cancel a withdrawal by informing us in writing.

11. Withdrawal does not affect our right to collect, use or disclose personal data without consent where permitted or required by law.

Access to and Correction of Personal Data

12. You may request access to personal data we hold about you, information about how it has been used or disclosed, or correction of that data by contacting our Data Protection Officer in writing or by email.

13. A reasonable fee may apply to an access request. If so, we will tell you the fee before processing it.

14. We aim to respond as soon as reasonably possible, generally within 30 business days. If we cannot respond within that period, we will inform you in writing of the expected response time. If we cannot provide data or make a requested correction, we will generally explain why unless the PDPA does not require us to do so.

Protection of Personal Data

15. We use appropriate administrative, physical and technical safeguards against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. Measures include data minimisation, encryption, antivirus protection, software patching, secure erasure of storage media, web security measures, and regular security reviews and testing.

16. No Internet transmission or electronic storage method is completely secure. Although security cannot be guaranteed, we continually review and improve our information security measures.

Accuracy and Retention

17. We generally rely on personal data provided by you or your authorised representative. Please inform our Data Protection Officer when your personal data changes so it remains current, complete and accurate.

18. We may retain personal data for as long as necessary for the purpose for which it was collected, or as required or permitted by law.

19. We will stop retaining personal data, or remove the means by which it can be associated with you, once it is reasonable to assume retention no longer serves its original purpose and is unnecessary for legal or business purposes.

Transfers Outside Singapore

20. We generally do not transfer personal data outside Singapore. If we do, we will obtain consent and take steps to ensure protection comparable to that provided under the PDPA.

Data Protection Officer

21. For enquiries, feedback, access, correction or withdrawal requests, contact:
Luke Ku
Telephone: +65 6708 9301
Email: luke@sinyun.sg

Effect and Changes

22. This Notice applies together with other notices, contractual clauses and consent clauses concerning our collection, use and disclosure of personal data.

23. We may revise this Notice from time to time without prior notice. The last-updated date indicates whether revisions have taken place. Continued use of our services constitutes acknowledgement and acceptance of changes.

Effective date: 10 July 2024
Last updated: 7 August 2026