Privacy and Data Security Policy1. IntroductionBengel Technology Pte Ltd ("we", "us", or "our") is committed to protecting personal data and respecting privacy. This Privacy and Data Security Policy explains how we collect, use, store, and protect personal information in compliance with the Personal Data Protection Act (PDPA) and other applicable laws in Singapore.By accessing or using our services, you consent to the collection and processing of personal data as described in this policy.2. Information We CollectWe collect personal data in the course of providing our services. The types of personal data we may collect include:- Personal Identification Information: Name, email address, phone number, mailing address, and payment details.
- Account Information: Username, password, and authentication details.
- Transaction Data: Purchase history, billing information, and shipping addresses.
- Technical Data: IP address, browser type, operating system, device information, and browsing patterns.
- Usage Data: Information about how you interact with our website or services (e.g., pages visited, time spent on the site, clicks, etc.).
- Communication Data: Emails, messages, feedback, or other forms of communication.
3. Purpose of Data Collection and UseWe collect and process personal data for the following purposes, in compliance with the PDPA’s "Purpose Limitation Obligation":- To provide and manage our services: We may use client’s data to fulfill service requests, process transactions, and deliver products.
- To improve our services: We analyze data to personalize and enhance our offerings, ensuring the best user experience.
- To communicate with you: We may contact you with important updates, customer support, or marketing communications (with client’s consent).
- To comply with legal obligations: We may use client’s data to comply with legal and regulatory requirements, including tax or auditing purposes.
4. ConsentIn accordance with the PDPA's Consent Obligation, we will obtain consent before collecting, using, or disclosing client’s personal data, except where we are legally permitted to collect, use, or disclose without consent (e.g., where required by law).You have the right to withdraw consent at any time. If you withdraw consent, we will take reasonable steps to ensure that personal data is no longer used for the purposes to which you previously consented. However, please note that withdrawing consent may limit our ability to provide certain services.5. Data SecurityWe take the security of personal data seriously. In compliance with the PDPA's Protection Obligation, we implement appropriate physical, technical, and administrative safeguards to protect personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:- Encryption: Sensitive data, such as payment details, is transmitted securely via encryption technologies (e.g., HTTPS).
- Access Controls: Personal data is accessed only by authorized personnel who need it to perform their job functions.
- Regular Audits and Security Reviews: We conduct regular audits of our data security practices to ensure compliance and identify potential vulnerabilities.
While we employ industry-standard security practices, please be aware that no system is entirely secure, and we cannot guarantee the absolute security of personal data.6. Data RetentionWe will retain personal data for as long as necessary to fulfill the purposes for which it was collected or as required by law. After this period, we will securely delete or anonymize personal data in accordance with the PDPA’s Retention Obligation.7. Disclosure to Third PartiesWe may share personal data with third-party service providers who assist us in operating our business and providing services to you. These third parties may include payment processors, cloud hosting providers, marketing partners, and customer support services.All third-party providers are contractually obligated to protect client’s data and comply with the PDPA’s Protection Obligation. We will ensure that these third parties provide the same level of data protection as we do.We may also disclose your data to comply with legal obligations, respond to lawful requests by public authorities (e.g., to meet national security or law enforcement requirements), or protect the rights, property, or safety of Bengel Technology Pte Ltd or its customers.8. Cookies and Tracking TechnologiesWe use cookies and similar tracking technologies to enhance user experience on our website. Cookies are small text files stored on visitors’ device that allow us to:- Remember their preferences and settings
- Analyze website usage and improve our services
- Deliver targeted advertising (if applicable)
You can manage or disable cookies via browser settings, but doing so may affect user experience on our website.9. Client’s Rights Under the PDPAUnder the PDPA, you have certain rights regarding your personal data, including the following:- Right to Access: You have the right to request access to the personal data we hold about you.
- Right to Correction: You can request the correction of inaccurate or incomplete data.
- Right to Withdrawal of Consent: You may withdraw consent for the collection, use, or disclosure of your personal data at any time, subject to legal or contractual restrictions.
- Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.
- Right to Object to Processing: You can object to certain uses of your personal data, particularly where we rely on legitimate interests as a basis for processing.
To exercise any of these rights, please contact us at [email/contact information]. We will respond to your requests in accordance with the PDPA's timelines.10. International Data TransfersIf you are located outside of Singapore, your personal data may be transferred to, stored, and processed in jurisdictions that may not provide the same level of data protection as Singapore. In such cases, we will take steps to ensure that any personal data is handled in accordance with the PDPA's Transfer Obligation, including the implementation of appropriate safeguards.11. Children’s PrivacyOur services are not intended for children under the age of 13. We do not knowingly collect personal data from individuals under the age of 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that data.12. Changes to This PolicyWe may update this Privacy and Data Security Policy from time to time. When we make changes, we will post the revised policy on our website with an updated "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect personal data.13. Contact UsIf you have any questions or concerns about this Privacy and Data Security Policy, or if you wish to exercise your rights under the PDPA, please contact us.