Data Protection Policy for T3 Resources Pte Ltd
1. Purpose
T3 Resources Pte Ltd is committed to safeguarding the personal data of its employees, customers, and partners in compliance with the Personal Data Protection Act (PDPA) of Singapore. This policy outlines the principles and practices adopted by the company to ensure that personal data is collected, used, disclosed, and managed responsibly and securely.
2. Scope
This policy applies to all employees, contractors, and third-party service providers who handle personal data on behalf of T3 Resources. It covers all forms of personal data, whether electronic or physical, that is under the company’s custody.
3. Key Principles
3.1 Consent
Personal data will only be collected, used, or disclosed with the individual’s prior consent unless required or permitted by law.
3.2 Purpose Limitation
Personal data will only be collected for specific, legitimate purposes clearly communicated to the individual.
3.3 Data Minimization
Only the personal data necessary for the intended purpose will be collected and retained.
3.4 Accuracy
Reasonable steps will be taken to ensure that personal data is accurate, complete, and up-to-date.
3.5 Security
Appropriate security measures will be implemented to protect personal data against unauthorized access, disclosure, alteration, or destruction.
3.6 Retention
Personal data will not be retained longer than necessary for the purposes it was collected, unless required by law.
3.7 Access and Correction
Individuals have the right to access and correct their personal data held by the company.
4. Responsibilities
4.1 Management
- Ensure compliance with this policy and the PDPA.
- Provide adequate resources for implementing data protection practices.
4.2 Data Protection Officer (DPO)
- Oversee and enforce data protection measures.
- Serve as the point of contact for queries, complaints, or requests regarding personal data.
- Ensure training and awareness programs are conducted for employees.
4.3 Employees
- Handle personal data responsibly and in accordance with this policy.
- Report any data breaches or suspicious activities to the DPO immediately.
5. Collection of Personal Data
T3 Resources collects personal data through various means, including:
- Direct interactions (e.g., forms, emails, or phone calls).
- Contracts and agreements.
- Customer feedback and surveys.
Examples of personal data collected include:
- Full name, NRIC/FIN, and contact details.
- Employment information.
- Payment and transaction details.
6. Use and Disclosure of Personal Data
T3 Resources may use personal data for:
- Service delivery and operational purposes.
- Communication, including responding to inquiries.
- Compliance with legal and regulatory requirements.
Personal data will only be disclosed to third parties when necessary for the above purposes or when required by law, subject to the individual’s consent.
7. Data Protection Measures
To ensure the security of personal data, T3 Resources adopts:
- Technical Measures: Use of encryption, secure servers, and access controls.
- Organizational Measures: Regular training, internal audits, and restricted access based on roles.
- Physical Measures: Secure storage of physical records and restricted office access.
8. Data Breach Management
In the event of a data breach:
- The DPO will be notified immediately.
- Affected individuals and relevant authorities will be informed as required.
- Measures will be taken to mitigate the breach and prevent recurrence.
9. Access and Correction Requests
Individuals may request access to or correction of their personal data by contacting the DPO. Requests will be processed within a reasonable time and in compliance with the PDPA.
10. Policy Review
This policy will be reviewed annually or when necessary to ensure its effectiveness and alignment with regulatory updates.
11. Contact Information
For queries or feedback regarding this policy, please contact:
Data Protection Officer (DPO)
Email: sales@t3resources.sg
Phone: 9058 5333