1. General

This Privacy Notice for Individuals (“Notice”) forms part of the terms and conditions governing your relationship with the Bank and should be read in conjunction with the Account Terms.

2. Collection of Personal Data

2.1. The Bank may collect Personal Data of yourself or any individual related to you (including, without limitation, any person that reasonably appears to be authorized to act on your behalf) (each, a “Data Subject”) at various times in the course of any interaction between a Data Subject and the Bank.

2.2. Where you provide Personal Data to the Bank on behalf of a Data Subject, you are deemed to have obtained the consent of the Data Subject to the Bank receiving the Personal Data for the purpose(s) applicable in the particular instance. You are responsible for promptly informing the Bank of any changes to Personal Data you previously provided or the withdrawal of the Data Subject’s consent to providing its Personal Data to the Bank. Such an event may prevent the Bank from continuing to provide any product or service to you, and may be construed as a termination of any contractual relationship between you and the Bank or a breach of your obligations towards the Bank. The Bank is not responsible for any loss or damage sustained by yourself or the Data Subject if the Personal Data was provided in a manner that was not in fact authorized by or agreed to by the Data Subject, or the Personal Data so provided was incomplete, inaccurate, or false.

2.3. The Bank collects Personal Data for purposes including:

a) processing your application for any of the products or Services offered or distributed by us (including, but not limited to, third party products such as unit trusts and insurance policies);

b) evaluating your credit and eligibility profile (including but not limited to your assets) from time to time;

c) providing the products and Services applied for by you;

d) performing bank account verification services for paying organisations;

e) generating financial, regulatory, management, or other related reports and performance of analytics;

f) conducting checks with Singapore’s Do Not Call Registry;

g) preventing, detecting, and investigating crime, offences or breaches including fraud, money-laundering, terrorist financing, and bribery;

h) meeting or complying with the Bank’s internal policies and procedures and any applicable rules, laws, regulations, or codes of practice, or guidelines, orders, or requests issued by any court or regulatory authorities that have supervisory jurisdiction over the Bank (including disclosures to regulatory bodies for purposes such as conducting audit checks, surveillance, and investigations);

i) legal purposes (including enforcing the Bank’s legal rights, drafting and reviewing documents, obtaining legal advice, and facilitating dispute resolution);

j) handling customer feedback or complaints;

k) maintaining the security of the Bank’s premises (including in connection with the use of security cameras);

l) facilitating any proposed or actual business assignment, transfer, participation or sub-participation in any of the Bank’s rights or obligations in respect of your relationship with the Bank; and

m) purposes that are reasonably related to the aforesaid.

3. Disclosure of Personal Data

The Bank may disclose Personal Data to a third party where:

a) doing so is necessary to provide (whether directly or through a third party) any product or service to you or to respond to you;

b) you have expressly or implicitly consented to such disclosure, or may reasonably be deemed to have consented to such disclosure;

c) doing so is necessary for the operation of the Services, the Bank’s website, or the Bank’s internal processes;

d) required by any government, statutory, or regulatory authority that has supervisory jurisdiction over the Bank, or to comply with any Applicable Law, court order, directive, or proceeding of such authority;

e) the Bank believes, in good faith, that doing so will be appropriate or necessary for it to investigate and defend against any third-party claims or allegations, or prevent or stop any illegal activity, security breaches, or harm to the Bank’s interests or employee(s);

f) the Bank is the subject of a takeover and a Data Subject’s Personal Data forms part of the Bank’s assets to be transferred to the acquiring entity;y

g) you disclose any Personal Data to third parties in the course of your relationship with the Bank;

h) you apply for or hold a co-brand product that the Bank offers jointly with another person and the Bank is required to disclose the Personal Data to such person for purposes of marketing, or promoting that co-brand product or other any product that the other person considers to be of interest to you;

i) conducting (whether by us or jointly with another party) market research, surveys, and data analysis relating to any service or product provided by the Bank’s that may be relevant to you; and

j) offering, marketing, and promoting to you any products, services, offers, or events provided by us and our business partners that the Bank thinks may be of interest to you.

4. Transfer, storage, and retention of Personal Data

4.1. Personal Data collected in accordance with this Privacy may be transferred, stored, or processed outside of Singapore. The Bank will comply with its obligations under Applicable Law, including the Personal Data Protection Act 2012 (the “PDPA”) and its regulations, in relation to Personal Data so transferred, stored, or processed for as long as and to the extent that the Personal Data remains in its possession or control.

4.2. The Bank will take reasonable steps to ascertain and ensure that where Personal Data will be moved out of Singapore, it will be to a jurisdiction that mandates a comparable level of security to the Personal Data as that required under the PDPA. However, if Personal Data must necessarily be transferred to, stored, or processed in a jurisdiction that has less stringent personal data protection laws than Singapore in order to provide the Client with any product(s) or service(s) requested, the Client will be deemed to consent to such transfer, storage, or processing in providing Personal Data to the Bank. The Client may at any time inform the Bank in writing that it wishes to withdraw its consent to such transfer, storage, or processing of the Personal Data.

4.3. The Bank will retain all Personal Data collected for as long as reasonably necessary for any legal, compliance, business, or other purpose or as prescribed under Applicable Law in relation to data and record keeping.

5. Your Rights

5.1. Every person whose Personal Data has been provided to the Bank, including Data Subjects, has the right to request access to such of their own Personal Data that is in the Bank’s possession or control, and to have any inaccuracies in their own Personal Data corrected in certain circumstances as set out in the PDPA. This right may be exercised by contacting the Bank at the mailing address 12 Marina View #19-01 Asia Square Tower 2 018961 or through the main hotline at 6213 5688. The Bank reserves the right to charge a reasonable fee for processing each request for data access or correction.

5.2. Every person whose Personal Data has been provided to the Bank, including Data Subjects, also has the right to withdraw their individual consent to the collection, use, storage, transfer, processing, or disclosure of their own Personal Data at any point in time by notifying the Bank at the mailing address 12 Marina View #19-01 Asia Square Tower 2 018961 or through the main hotline at 6213 5688. Such withdrawal of consent may mean that the Bank is no longer able to provide any or all products and Services to that individual, and may be regarded as a termination of any or all contractual relationships between that individual and the Bank or a breach of contractual or other obligations or undertakings owed to the Bank. The Bank’s rights and remedies in such event are expressly reserved.

5.3. Without prejudice to the foregoing, you agree and acknowledge that unless you specify otherwise to the Bank, any withdrawal of your consent in accordance with this Notice will not affect any consent that you may, or been deemed to, have provided to the Bank with regard to using your Singapore telephone number(s) for receiving marketing or promotional information.

5.4. If you have any questions about this Notice or the Bank’s Personal Data policy, please contact the Bank at the mailing address 12 Marina View #19-01 Asia Square Tower 2 018961 or through the main hotline at 6213 5688.