Version Effective Date: 01 May 2023 / Privacy Notice
NVPC is committed to safeguarding the personal data entrusted to it by individuals. This Privacy Notice (“Notice”) explains how NVPC collects, uses and discloses your personal data so we can serve you better. It also sets out how you can update us or request to be unsubscribed from our records.
In this Notice and under the Personal Data Protection Act 2012 (No. 26 of 2012) (“PDPA”), “Personal Data” refers to any data or information (whether true or not) about you from which you can be identified, either (i) from that data; or (ii) from that data and other information to which we have or are likely to have access. It includes information such as an individual’s name, identification number, address, mobile phone number, email addresses, photos and video images of a person.
2.1. Purposes for Personal Data collection, use and disclosure
NVPC may collect, use and/or disclose your Personal Data for the purposes listed below as well as for other purposes you specifically consent to:
a) Marketing and advocacy purposes, including but not limited to the following:
b) Administration and servicing purposes, including but not limited to the following:
c) Analytics, research, business development and improvement purposes, including but not limited to the following:
d) To comply with applicable rules, laws and regulations as well as the legal process or legal requirements of any government agency.
e) We may collect, use and disclose Personal Data on behalf of government agencies, in which case we shall do so in accordance with the government’s prevailing data management policies.
2.2. How we collect your Personal Data
NVPC may collect your Personal Data in various ways, including without limitation, when you:
Your Personal Data may also be disclosed to NVPC by third parties with your consent, or where otherwise permitted by law. We may also collect Personal Data where required or permitted by laws or regulations binding on NVPC for any purpose.
2.3. Who we may disclose your Personal Data to
We may provide your Personal Data to various third parties for the purposes mentioned above. Such third parties include without limitation:
NVPC shall always seek your consent to collect, use or disclose your Personal Data, except in specific circumstances where collection, use or disclosure without consent is authorized or required by law. NVPC may not be able to fulfill certain services if you are unwilling to provide consent to the collection, use or disclosure of certain Personal Data. NVPC may assume that you have consented to the collection, use and disclosure of your Personal Data in situations where you provided Personal Data for obvious purposes.
2.5. Notification Obligation
Either before or when we collect your Personal Data, NVPC shall inform you of the purpose for which the Personal Data is collected, except when such Personal Data is provided by you for an obvious purpose (E.g. when you provide Personal Data to register for an event, as such the purpose is for that event participation).
2.6. Accuracy Obligation
NVPC generally relies on the Personal Data provided by you (or your authorised representative). To ensure that your Personal Data is current, complete and accurate, please update us if there are changes to your Personal Data by informing our Data Protection Officer at the contact details provided below (refer to Section 9 (Contacting Us)). NVPC will not be responsible for relying on inaccurate or incomplete Personal Data provided to us. Failure to provide complete and accurate information may result in our inability to provide you with services you have requested and/or other administrative delays.
2.7. Transfer and Disclosure of Personal Data in and outside Singapore
NVPC may disclose Personal Data to internal/external parties located overseas for necessary and appropriate purposes. Such transfer shall be done in a manner that is secure and in accordance with PDPA requirements.
3.1. Protection and Storage of your Personal Data
We will endeavour to protect your Personal Data in our possession and will guard against risks of unauthorized access, collection, use, disclosure, copying, modification, disposal or destruction, through reasonable and appropriate security measures. We strive to ensure that our systems are secure and that they meet the industry standards and have put in place appropriate physical, electronic and managerial procedures to safeguard and secure the Personal Data in our possession.
3.2. Retention of your Personal Data and Requests to Delete your Personal Data
We will only retain your Personal Data for as long as it is necessary for our business or legal purposes. You may request that your Personal Data be deleted by contacting our Data Protection Officer (DPO) (refer to Section 9 (Contacting Us)). Do note that we will not be able to delete your Personal Data if we require it for business or legal purposes. In such circumstances, you may nevertheless withdraw your consent to the further use or disclosure of your Personal Data (refer to Section 4 (Withdrawal of Consent)).
4.1. If you wish to withdraw your consent to any collection, use or disclosure of your Personal Data as set out in this Notice, you may contact the DPO (refer to Section 9 (Contacting Us)).
4.2. Please note that if you withdraw your consent to the collection, use, and/or disclosure of your Personal Data, depending on the nature of your request, we may not be able to continue providing our services or perform our contractual obligations to you. Such withdrawal may also result in the termination of any agreements or arrangements you have with us. NVPC’s legal rights and remedies are expressly reserved under such circumstances.
4.3. NVPC will strive to effect your withdrawal of consent within 10 working days of your withdrawal and will notify you if more time is required. Please note that withdrawing consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclose without consent is permitted or required under applicable laws.
5.1. If you wish to make (a) an access request for access to a copy of the Personal Data which we hold about you or information about the ways in which we use or disclose your Personal Data, or (b) a correction request to correct or update any of your Personal Data which we hold about you, please submit your request to NVPC’s DPO (refer to Section 9 (Contacting Us) identifying yourself and indicating the Personal Data that the request concerns.
5.2. NVPC will respond to your request as soon as reasonably possible. However, please note that we may refuse your request under certain circumstances as laid out under the PDPA. Please note that a reasonable fee may be charged for an access request. If so, NVPC will inform you of the fee before processing your request.
5.3. If we are unable to respond to your access or correction request within 30 days after receiving your request, we will inform you in writing within 30 days of the time by which we would be able to respond to your request.
6.1. We may collect or analyse anonymised information from which individuals cannot be identified (“Aggregate Information”), such as number of users and their frequency of use, the number of page views (or page impressions) that occur on our websites/applications and common entry and exit points into our websites/applications.
6.2. We use “cookies” where a small data file is sent to your browser to store and track Aggregate Information about you when you enter our website or use our mobile applications. The cookie is used to track information such as the number of users, their frequency of use, profiles of users, and their preferred sites.
6.3. The Aggregate Information collected is used to assist us in analysing the usage of our websites/applications and improving our websites, mobile applications and services.
6.4. Should you wish to disable the cookies associated with these technologies, you may do so by changing the setting on your browser. However, you may not be able to enter certain part(s) of our websites, mobile applications or services.
8.1. Even with reasonable protection measures in place, there may be a possibility of a data breach. In the event the data breach is assessed to be notifiable, NVPC will notify the affected individuals as soon as practicable, at the same time or after notifying the Personal Data Protection Commission. If the breach warrants notification to the Commission, NVPC will make notification as soon as practicable but no later than three (3) calendar days upon our assessment.
9.1. Should you have any questions or feedback relating to the collection, use or disclosure of your Personal Data, or if you wish to know more about our data protection policies and practices, please contact our DPO at firstname.lastname@example.org.
10.1. We may from time to time update this Notice to ensure that it is consistent with our future developments, industry trends and/or any changes in legal or regulatory requirements. The latest version of the Notice will be posted here. Your continued use of our services constitutes your acknowledgement and acceptance of any changes to the Notice.
Join our mailing list to get updated on the latest groundup happenings!
National Volunteer & Philanthropy Centre
Copyright © 2023 Groundup Central. All rights reserved.