We at Eastaway (“Eastaway”) respect the privacy and confidentiality of the personal data of our Clients, Partners, Associates, Consultants, Contractors, Service Providers, Outsourced Third-Parties and others who have business dealings with us. We are committed to implementing policies, practices and processes to safeguard the collection, use and disclosure of the personal data you provide us, in compliance with the Singapore Personal Data Protection Act (PDPA) 2012 and the General Data Protection Regulation (GDPR) (EU) 2016/679 (hereinafter collectively referred to as “PDPA/GDPR”).

We have developed this Data Protection Policy to assist you in understanding how we collect, use, disclose, process and retain your personal data with us.

The PDPA/GDPR defines personal data as “data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which the organisation has or is likely to have access.”

We collect your personal data when you:

• Engage our services through agreements and contracts
• Submit to us your application/registration form for our products and services
• Respond to our electronic direct marketing
• Correspond with us via emails and over the phone (including SMS)
• Submit your CV and job application form to us in response to our recruitment publicity and advertisements in newspapers and websites
• Submit your CV to recruitment firms or job portals, which are in turn forwarded to or retrieved by us

The types of personal data we collect about you may include:

• Personal particulars (NRIC / FIN No. / Passport No., Name, Gender, Date of Birth, Citizenship, Country of Residence)
• Personal contact information (Telephone No., Residential Address, Mailing Address, Email address)
• Financial information (Type of credit card, Cardholder Name, Credit Card No.)
• Educational and professional qualifications – for job application
• Professional and work experience – for job application

We use the personal data we have collected about you for one or more of the following purposes:

We disclose some of the personal data we have collected about you to the following parties or organisations outside Eastaway in order to fulfil our services to you:

• Accounting Services
• Banks
• Freight / Courier Services
• Print Processing Services
• Insurance Brokers
• Travel Agencies
• Shipbrokers

6.1 Obtaining Consent

On or before we collect, use or disclose your personal data, we will notify you of the purpose why we are doing so. We next obtain written confirmation from you on your expressed consent. As far as possible, we will not collect more personal data than necessary for the stated purpose.

Under certain circumstances, we may assume deemed consent from you when you voluntarily provide your personal data for the stated purpose, e.g. when you apply for a job with us.

6.2 Withdrawal of Consent

If you wish to withdraw consent, you should give us reasonable advance notice. You have to be aware, though, of the likely consequences of your withdrawal of consent, e.g. without your personal contact information we may not be able to inform you of future services offered by us.

We will take reasonable precautions and verification checks to ensure that the personal data we have collected from you is reasonably accurate, complete and up-to-date. From time to time, we may do a verification exercise with you to update us on any changes to your personal data.

You may write in to us, based on reasonable grounds, to find out how we have been using or disclosing your personal data. We are obligated under the PDPA/GDPR to allow you access to your personal data of the past one year, and to make any correction if there is any error or omission. Before we accede to your request, we may need to verify your identity by checking your NRIC or other legal identification document. We will try to respond to your request within 30 days. If we are unable to do so, we will let you know and give you an estimate of how much longer we require. We may also charge you a reasonable fee for the man-effort involved in retrieving your records.

We will take the necessary security arrangements to protect your personal data that is in our possession to prevent unauthorised access, use, disclosure, or similar risks. We will take reasonable and appropriate measures to maintain the confidentiality and integrity of your personal data, and will only share your data with authorised persons on a ‘need to know’ basis.

Third-parties engaged by us to process and maintain your personal data on our behalf will be bound by contractual information security arrangements we have with them.

We will not retain any of your personal data under our charge when it is no longer necessary for any business or legal purposes. Based on our Document Retention Policy, we will ensure that your personal data that is no longer needed by us will be destroyed or disposed of in a secure manner.

If there is a need for us to transfer your personal data to another country, we will ensure that the standard of data protection in the recipient country is comparable to that of PDPA/GDPR. If this is not so, we will enter into a contractual agreement with the receiving party to accord similar levels of data protection as that in Singapore / European Union.

If you have any query or feedback regarding this Policy, or any complaint you have relating to how we manage your personal data, you may contact our Data Protection Officer at: dpo@eastaway.com

Any query or complaint should include, at least, the following details: