PERSONAL DATA PROTECTION POLICY
We are Y-SG Pte. Ltd. (Company Registration No. 200005870E), trading as www.ysg.com.sg ("YSG").
Protection of your Personal Data is important to us. This Personal Data Protection Policy ("Policy") outlines how we manage the Personal Data we hold.
Please read and review this Policy, which will detail how we collect, use, process and disclose your Personal Data. We may also collect and process your Personal Data under any exceptions to Applicable Laws, which are not set out in this Policy.
Capitalised terms used in this Policy shall have the following meanings:
Words used in this Policy in the singular, where the context so permits, shall be deemed to include the plural and vice versa. The definitions of words in the singular in this Policy shall apply to such words when used in the plural where the context so permits and vice versa.
This Policy applies in conjunction with other notices, contractual clauses and consent clauses that apply in relation to the collection, storage, use, disclosure and/or processing of your Personal Data by us and is not intended to override them unless we state expressly otherwise.
During our relationship with you, we may collect Personal Data from you. Such Personal Data includes but are not limited to identity data, such as your name, gender, profile picture and date of birth, contact data, such as mailing, delivery and billing addresses, email address and phone numbers, account data, such as bank accounts and payment details, transaction data, such as details about orders and payments to and from you, and other details of products and Services that you have purchased or obtained through our Platform, technical data, such as network and device data (including your internet protocol (IP address and device or advertising identifiers), login data, browser type and version, time zone setting and location, browser plug-in types and versions, device identifier, and other information and technology on the devices you use to access our Platform, profile data, such as your username and password, order history, interests, preferences, feedback and survey responses, usage data, such as information on how you use our Platform, products and Services or view any content on our Platform, location data, such as when you capture and share your location with us in the form of photographs or videos and upload such content to our Platform or otherwise link to our Social Media, biometric data, such as your facial image, voice recordings (for customer service calls), marketing and communications data, such as your preferences in receiving marketing from us and our third parties and your communication preferences, and any other personally identifiable information which you have provided us in any forms you may have submitted to us, or in the course of any other forms of interaction between you and us.
If you provide us with Personal Data relating to a third party and by submitting such Personal Data to us, you represent to us that you have obtained the consent of the third party to provide us with their Personal Data for the relevant purposes.
BY (1) CLICKING "YES" OR CHECKING "SIGN UP" ON OUR POLICY POP-UP OR ANY WEB FORM REFERRING TO THIS POLICY ON ANY OF OUR ONLINE SITES, (2) SUBMITTING YOUR PERSONAL DATA TO US WHEN SIGNING UP FOR AN ACCOUNT ON THE PLATFORM, (3) BROWSING OUR PLATFORM , OR (4) ORDERING ANY OF OUR PRODUCTS AND SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE BEEN NOTIFIED OF AND UNDERSTAND THE TERMS OF THIS POLICY AND YOU AGREE AND CONSENT TO THE TERMS OF THIS POLICY. IF YOU DO NOT AGREE WITH THE PROCESSING OF YOUR PERSONAL DATA AS DESCRIBED IN THIS POLICY, YOU MUST IMMEDIATELY (i) DISCONTINUE THE USE OF OUR SERVICES; (ii) STOP ACCESSING OUR PLATFORM INCLUDING ANY OF OUR SITES AND (iii) AGREE THAT ANY EXISTING RELATIONSHIP AND/OR CONTRACT WITH US SHALL BE TERMINATED WITH IMMEDIATE EFFECT.
We may update this Policy to ensure that it is consistent with industry trends and/or any changes in relevant legal or regulatory requirements. We reserve the right to amend the terms of this Policy at our absolute discretion. Subject to your rights at law, you agree to be bound by the prevailing terms of this Policy as updated from time to time on our Platform. You will be notified of any amendment to the Policy and any amended Policy will be posted on our Platform and can be viewed at Personal Data Protection Policy. To the fullest extent permitted by Applicable Laws, your continued use of our Platform and/or Services following such amendments taking immediate effect shall constitute your acknowledgment and acceptance of such changes to the Policy and your consent to be bound by such an amended Policy. For the avoidance of doubt, newer versions of the Policy supersede older versions.
You are encouraged to visit the Platform from time to time to ensure that you are well-informed of our latest policies in relation to Personal Data protection.
COLLECTION OF PERSONAL DATA
We collect Personal Data from you when:
We do not collect your credit card details, whether to process your payment or for customer service purposes. Your credit card details are collected, processed and stored directly by our third-party payment processors pursuant to their terms of use and privacy policies. None of your credit card details are stored with us. However, we may collect your mobile number for the purpose of administering refunds.
The above is not exhaustive and sets out some common instances when personal data about you may be collected. We may also collect your Personal Data in circumstances where such collection does not require consent under Applicable Laws.
Please ensure that all Personal Data submitted to us is complete, accurate, true and correct. Failure to do so may result in our inability to provide or continue providing you with the products and services you have requested.
USE OF PERSONAL DATA
We may use and disclose your Personal Data for purposes necessary to provide you with our products and services, including to:
(collectively, the "Purposes").
We may also use your Personal Data if required to do so by law or pursuant to an order of a court or by any governmental or regulatory authority having jurisdiction over us or in a good faith belief that such access preservation or disclosure is reasonably necessary to: (a) comply with legal process; (b) comply with a request from any governmental or regulatory authority having jurisdiction over us; (c) respond to any threatened or actual claims asserted against us or other claim that any content violates the rights of third parties; (d) protect the rights, property or personal safety of us, our users and/or the public : (e) for other purposes which are reasonably related to the Purposes; or (f) in circumstances where such use does not require consent under Applicable Laws. The above Purposes are not exhaustive and depending on the nature of your relationship with us, we may collect, use and disclose your Personal Data for additional purposes which you will be notified of, in accordance with applicable terms and conditions.
Please note that if you withdraw your consent for us to use and process your Personal Data in relation to the Purposes, we may no longer be able to provide you with the related products, services or benefits associated with such Purposes.
SHARING OF PERSONAL DATA
In relation to our use of your Personal Data for the Purposes, we may disclose your Personal Data to our:
We may also disclose your Personal Data: (a) for other purposes which are reasonably related to the Purposes; or (b) in circumstances where such disclosure does not require consent under the Applicable Laws.
We do our best to minimise the disclosure of your Personal Data to the information necessary to perform the related Purposes. We will also require that such organisations or persons to whom such disclosure is made as service providers to us acknowledge the confidentiality of such Personal Data, undertake to respect any individual's right to privacy and comply with Applicable Laws.
ACCESSING OR CORRECTING PERSONAL DATA
You may access or correct your name, birthday, phone numbers, shipping and billing addresses or other Personal Data by logging in to your user account on our Platform.
For Personal Data that cannot be corrected by you by logging in to your user account on our Platform, you may request to access and correct such Personal Data by submitting a written request to us by emailing our Data Protection Officer at cs@ysg.asia. We may need to request additional information from you to confirm your identity before providing the access or making the correction.
We will do our best to respond to Personal Data access and correction requests within 21 business days from the receipt date of such requests. Where we are unable to meet this timeline, we will provide you with the next earliest time and date which we can provide the information or make the correction.
We reserve the right to charge a reasonable administrative fee for retrieving your Personal Data records and/or handling and processing your Personal Data access request. If so, we will inform you of the estimated administrative fee. We will only process your request when you agree to pay the fee and we are not under any obligation to accede to your request if otherwise.
We will take steps to send your corrected Personal Data to every other person or entity to which such Personal Data was disclosed by YSG within the year after the date of the correction, unless such person or entity does not need the corrected Personal Data for any legal or business purpose.
REQUEST TO WITHDRAW CONSENT
If you wish to withdraw your consent for us to send you sales, marketing or promotional information, please inform us as follows:
Once we receive notification of your intention to withdraw your consent for receiving sales, marketing or promotional materials or communications, it may take up to 21 business days for your withdrawal to be reflected in our systems. During this interim period, you may still receive marketing or promotional materials or communications.
If you withdraw your consent to receive marketing or promotional materials through a specific communication mode (e.g. SMS), we may still contact you for other purposes in relation to the products and services via other communication modes you have and still are subscribed to (e.g. email).
You may withdraw your consent for the collection, use and/or disclosure of any of your Personal Data in our possession or under our control by submitting a written request via email to our Data Protection Officer at cs@ysg.asia. Depending on the nature of the consent withdrawal, we may not be able to continue to provide you with some or all of our products or services. We will process such a request within a reasonable time from the date we receive notice from you of your withdrawal of consent. Once processing is complete, we will no longer collect, use and/or disclose your Personal Data, except to the extent we retain your Personal Data for compliance, regulatory or other legal purposes.
ADMINISTRATION AND MANAGEMENT OF PERSONAL DATA
We will make reasonable efforts to ensure Personal Data likely to be used by us or disclosed by us to another organisation is accurate and complete. However, you should update us of any changes in your Personal Data. We will not be responsible for relying on inaccurate or incomplete Personal Data if you have not updated us of changes.
We will also put in place reasonable security arrangements to ensure that your Personal Data is adequately protected and secured. This includes putting in place reasonable measures to prevent any unauthorised access, collection, use, disclosure, copying, modification, leakage, loss, damage or alteration of your Personal Data, such as restricting access to Personal Data to individuals who require access, maintaining technology products to prevent unauthorised computer access and using 128-bit SSL (secure sockets layer) encryption technology when processing your financial details. However, we will not be responsible for any unauthorised use of Personal Data by third-parties which is attributable to factors beyond our control.
When Personal Data in our possession is: (a) no longer required for any reason connected to the purpose it was originally collected; or (b) retention by us is no longer necessary for any other legal or business purposes, we will exercise measures to ensure such Personal Data is either destroyed or anonymised. If you cease using the Sites or Apps, or your permission to use the Platform and/or the Services is terminated or withdrawn, we may continue storing, using and/or disclosing your Personal Data in accordance with this Privacy Policy and our obligations under the Privacy Laws. Subject to applicable law, we may securely dispose of your Personal Data without prior notice to you.
TRANSFER OF PERSONAL DATA
Your Personal Data may be stored in external servers located overseas. In addition, in carrying out our business, it may be necessary to share information about you with and between our related corporations and affiliates, and third-party service providers, some of which may be located in countries outside your country of residence. Such countries may not afford a standard of protection similar to those in your country of residence. However, we will take reasonable steps to ensure that your Personal Data transmitted outside of your country of residence is adequately protected. In addition, we will ensure that such transfers comply with the requirements of the applicable data protection laws.
THIRD-PARTY COOKIES
YSG or its authorised service providers may implement cookies, web beacons and other similar technologies for storing data on our Platform. When you visit our Platform through any device with internet connectivity, our computer servers will automatically record data including your IP address, browser type, webpage you were visiting before you came to our Platform, the pages within our Platform which you visit, and the time spent on those pages, items and data searched for on our Platform and other statistics. Advertisements on our Platform may be provided by third-party agencies. These advertisements may also generate cookies, for example, to track how many people have viewed the advertisement. The collection, use, and disclosure of information, including Personal Data, collected by such third-party cookies are subject to the privacy and data protection policies of the third-party vendors and are not under our control.
You may manage and/or reject cookies through the settings on your browser or device. Note that this may result in the loss of Platform functionality, restrict your use of our Platform, or delay or affect the way in which our Platform operates.
RIGHT TO DISCLOSE PERSONAL DATA
YOU ACKNOWLEDGE AND AGREE THAT YSG HAS THE RIGHT TO DISCLOSE YOUR PERSONAL DATA TO ANY LEGAL, REGULATORY, GOVERNMENTAL, TAX, LAW ENFORCEMENT OR OTHER AUTHORITIES OR THE RELEVANT RIGHT OWNERS, IF YSG HAS REASONABLE GROUNDS TO BELIEVE THAT DISCLOSURE OF YOUR PERSONAL DATA IS NECESSARY FOR THE PURPOSE OF MEETING ANY OBLIGATIONS, REQUIREMENTS OR ARRANGEMENTS, WHETHER VOLUNTARY OR MANDATORY, AS A RESULT OF COOPERATING WITH AN ORDER, AN INVESTIGATION AND/OR A REQUEST OF ANY NATURE BY SUCH PARTIES. TO THE EXTENT PERMISSIBLE BY APPLICABLE LAW, YOU AGREE NOT TO TAKE ANY ACTION AND/OR WAIVE YOUR RIGHTS TO TAKE ANY ACTION AGAINST YSG FOR THE DISCLOSURE OF YOUR PERSONAL DATA IN THESE CIRCUMSTANCES.
MINORS
Our Sites are not intended for individuals under the age of 18. We do not knowingly collect or maintain any personal data or non-personally identifiable information from anyone under the age of 18 nor is any part of our Sites directed to any individual under the age of 18. In the event that the personal data of an individual under the age of 18 is disclosed to us and where the collection of such personal information is in violation of the Platform’s Customer Terms of Service or any known applicable laws, YSG shall promptly take measures to delete such information and terminate the account and access to our Platform; Sites and Services.
GOVERNING LAW
This Policy shall be governed and construed in accordance with the laws of the Republic of Singapore.
CONTACT US
For any questions relating to your Personal Data or about this Policy, or if you have a complaint regarding the collection, use or handling of your Personal Data by us, or a question about how we are complying with Applicable Laws, you may contact our Data Protection Officer in writing at cs@ysg.asia.
(As
at 15th April 2024)