This Data Protection Policy supplements but does not supersede nor replace any other consents you may have previously provided to GR in respect of your Personal Data, and your consents herein are additional to any rights which to any of the Companies may have at law to collect, use or disclose your Personal Data.
1. PERSONAL DATA
1.2 Examples of such Personal Data you may provide to us include (depending on the nature of your interaction with us) your name, NRIC, passport or other identification number, telephone number(s), mailing address, email address, network data and any other information relating to any individuals which you have provided us in any forms you may have submitted to us, or via other forms of interaction with you.
2. COLLECTION OF PERSONAL DATA
2.1 By accessing the Site, App, Product and Services and providing your personal data to GR, you shall be deemed to have read this section of the Agreement and provided consent to the collection, use and disclosure of your personal data by GR.
2.2 If you do not consent to the collection, use and disclosure of your personal data by GR, you shall not access the Site, App, Product and Services and shall not provide your personal data to GR. In the event where you have already accessed the Site, App, Product and Services and have provided your personal data to GR, you shall, in writing, communicate to GR your intention to withdraw immediately.
2.3 In accordance with telecommunications market practice, GR collects certain usage statistics, including but not limited to, the phone numbers and/or other identification details of the calling and receiving party, the start time, call duration, call quality, outages (“Call Details”) and maintains a call detail record (“CDR”) for each call that is routed through the system. The Call Details are collected and the CDR maintained for billing purposes and for the purposes of improving the Services and to fulfill our obligations under applicable laws.
2.4 Generally, we collect Personal Data in the following ways:
(a) when you submit an application form or other forms relating to any of our Products and Services (defined below);
(b) when you interact with our customer service officers, for example, via telephone calls, letters, face-to-face meetings and emails;
(c) when you use some of our services, for example, websites and apps including establishing any online accounts with us;
(d) when you purchase or obtain third-party services through us;
(e) when you request that we contact you, be included in an email or other mailing list;
(f) when you respond to our promotions, initiatives or to any request for additional Personal Data;
(g) when you are contacted by, and respond to, our marketing representatives and customer service officers;
(h) when we receive references from business partners and third parties, for example, where you have been referred by them;
(i) when we seek information from third parties about you in connection with the Products and Services you have applied for; and
(j) when you submit your Personal Data to us for any other reasons.
2.5 When you browse our website, you generally do so anonymously but please see the section below on cookies. We do not at our website automatically collect Personal Data unless you provide such information or login with your account credentials.
2.6 If you provide us with any Personal Data relating to a third party (e.g. information of your spouse, children, parents, and/or employees), by submitting such information to us, you represent to us that you have obtained the consent of the third party to provide us with their Personal Data for the respective purposes.
2.6 You should ensure that all Personal Data submitted to us is complete, accurate, true and correct. Failure on your part to do so may result in our inability to provide you with the Products and Services you have requested.
3. PURPOSES FOR THE COLLECTION, USE AND DISCLOSURE OF YOUR PERSONAL DATA
3.3 Personal data collected by GR may be used for some or all of the following purposes and/or other purposes as will be communicated to you or as permitted by the law:
(a) To process payment transactions made by you;
(b) To facilitate communications with you via any mediums including but not limited to mail, electronic mail, telephone calls and telephone messages, for any purposes, including but not limited to responding to your enquiries or requests, sending information, notices, updates and providing other forms of customer service;
(c) To improve our Site, App and/or Products and Services;
(d) To detect and/or investigate any errors, and/or illegal, prohibited, unauthorized or fraudulent conduct;
(e) To conduct marketing research, user profile and statistical analysis within the Group;
(f) To compile and aggregate anonymous statistical data that does not include your personal data, by removing data fields that may reasonably be used to identify you, including but not limited to names, addresses and telephone numbers. This aggregated anonymous statistical data may be shared with and/or sold to other companies and entities not within the Group for specific uses, including but not limited to advertisement purposes;
(g) To comply with any law, court orders, and the requests of law enforcement and regulatory authorities; and
(h) To enforce our legal rights and remedies.
3.2 Personal data collected by GR that may reasonably be used to identify you, shall not be disclosed to any third party to this Agreement, except as set out herein:
(a) any affiliate, member, subsidiary or partner of the Group;
(b) credit card and payment processing service providers;
(c) professional advisors of the Group, including but not limited to lawyers and accountants; and
(d) the Group’s technology, marketing and logistics service providers.
3.3 GR and the Group shall endeavour to procure commercially reasonable precautions, maintain appropriate safeguards and follow industry practices with respect to security and privacy of information, to minimise risk of loss, misuse or unauthorised alteration of such information under our control. This includes maintaining confidentiality agreements with third party service providers identified in Clause 6.4 (a) to (d).
3.4 Notwithstanding the foregoing, while GR and the Group strive to protect your Personal Data, Toku cannot guarantee the security or privacy of such information, or that such information will not be accessed, disclosed, altered or destroyed by third parties without our permission, due to factors beyond our control. In the event of such occurrences, you consent to discharge any liability and/or responsibility that may be incurred by GR and the Group in relation to you.
3.5 Generally, GR collects, uses and discloses your Personal Data for the following purposes:
(a) responding to your queries and requests;
(b) managing the administrative and business operations of GR and complying with internal policies and procedures;
(c) facilitating business asset transactions (which may extend to any mergers, acquisitions or asset sales) involving any of the Companies;
(d) matching any Personal Data held which relates to you for any of the purposes listed herein;
(e) resolving complaints and handling requests and enquiries;
(f) preventing, detecting and investigating crime and analyzing and managing commercial risks;
(g) providing media announcements and responses;
(h) monitoring or recording phone calls and customer-facing interactions for quality assurance, employee training and performance evaluation and identity verification purposes;
(i) legal purposes (including but not limited to obtaining legal advice and dispute resolution);
(j) conducting investigations relating to disputes, billing, suspected illegal activities or fraud;
(k) meeting or complying with any applicable rules, laws, regulations, codes of practice or guidelines issued by any legal or regulatory bodies which are binding on GR (including but not limited to responding to regulatory complaints, disclosing to regulatory bodies and conducting audit checks, due diligence and investigations); and
(l) purposes which are reasonably related to the aforesaid.
3.6 In addition, GR collects, uses and discloses your Personal Data for the following purposes:
(a) If you are a customer or an employee of an organisation which is a customer of GR (including but not limited to Mobile, Voice and International Direct Dialing products and services (“Products and Services”):
(i) opening or continuation of accounts and establishing or providing you with the Products and Services you subscribe to (including but not limited to service activation, service operations, service delivery and order processing);
(ii) facilitating the continuation or termination of your subscription to our Products and Services (including but not limited to administering subscription arrangements, account maintenance, account closure, processing renewal of contracts and customer relationship management);
(iii) facilitating the daily operation of the Products and Services (including but not limited to billing, customer service, customer verification, technical support, network maintenance and troubleshooting);
(iv) facilitating third party services if purchased, obtained, administered or processed through us;
(v) managing and executing our service-level agreements with you;
(vi) processing of payment instructions, direct debit facilities and/or credit facilities requested by you;
(vii) enforcement of repayment obligations (including but not limited to debt collection, filing of claims and retrieval of payments from losses made by service partners);
(viii) administering and processing any insurance claims and payments arising under the respective policies;
(ix) credit and internal risk management (including but not limited to performing credit checks and disclosures to law enforcement agencies);
(x) generating internal reports (including but not limited to annual, operational and management reports);
(xi) processing referral payments and commission fees to our external partners;
(xii) administering fee adjustments, refunds and waivers;
(xiii) notifying you of your entitlements under loyalty and reward programmes with GR;
(xiv) analysing your use of our Products and Services so as to help us improve, review, develop and efficiently manage the Products and Services offered to you; and
(xv) purposes which are reasonably related to the aforesaid.
3.7 Furthermore, where permitted under the Act:
(a) GR may also collect, use and disclose your Personal Data for the following “GR Additional Purposes”:
(i) analytics and tracking, including facilitating the sale of analytical data;
(ii) conducting market research and surveys to enable us to understand and determine customer location, preferences and demographics to develop special offers and marketing programmes in relation to GR's Products and Services, and to improve our service delivery and your customer experience at our touchpoints;
(iii) providing additional Products and Services and benefits to you, including promotions, loyalty and reward programmes from GR;
(iv) matching Personal Data with other data collected for other purposes and from other sources (including third parties) in connection with the provision, marketing or offering of Products and Services by GR;
(v) leads generation and management for marketing GR's Products and Services;
(vi) administering contests, competitions and marketing campaigns, and personalising your experience at GR’s touchpoints;
(vii) communicating to you advertisements involving details of our Products and Services, special offers and rewards, either to our customers generally, or which we have identified may be of interest to you (including but not limited to upselling, cross-selling and telemarketing);
(viii) organising promotional events and corporate social responsibility projects; and
(ix) purposes which are reasonably related to the aforesaid.
In addition, where permitted under the Act and subject to the provisions of any applicable law, your Personal Data may be disclosed, for GR Additional Purposes, to the vendors or other third party service providers in connection with promotions and services offered by GR.
(b) GR may also collect, use and disclose your Personal Data for the following “Preferred Partners Additional Purposes” (also known as “ADV” in our communication channels) :
(i) conducting market research and surveys to enable us to understand and determine customer location, preferences and demographics to develop special offers and marketing programmes with our preferred partners;
(ii) matching Personal Data with other data collected for other purposes and from other sources (including third parties) in connection with the provision, marketing or offering of products and services (including promotions) by our preferred partners;
(iii) leads generation and management for marketing the products and services offered by our preferred partners;
(iv) administering contests, competitions and marketing campaigns in connection with the products and services offered by our preferred partners;
(v) sending you informational, recruitment and other notification messages communicated by our preferred partners;
(vi) communicating to you advertisements involving details of the products, services, special offers and rewards offered by our preferred partners, either to our customers generally, or which we or our preferred partners have identified may be of interest to you (including but not limited to upselling, cross selling and telemarketing); and
(vii) purposes which are reasonably related to the aforesaid.
In addition, where permitted under the Act and subject to the provisions of any applicable law, your Personal Data may be disclosed, for Preferred Partners' Additional Purposes, to the vendors or other third party service providers in connection with promotions and services offered by GR’s preferred partners. However, please be assured that we do not disclose your Personal Data to our preferred partners for the purposes of the above unless your consent is expressly obtained.
3.8 If you have provided your Singapore telephone number(s) and have indicated that you consent to receiving marketing or promotional information via your Singapore telephone number(s), then from time to time, GR may contact you using such Singapore telephone number(s) (including via voice calls, text, fax or other means) with information about our Products and Services or those products and services offered by our preferred partners (including discounts and special offers).
3.9 In relation to particular Products and Services or in your interactions with us, we may also have specifically notified you of other purposes for which we collect, use or disclose your Personal Data. If so, we will collect, use and disclose your Personal Data for these additional purposes as well, unless we have specifically notified you otherwise.
3.10 You have a choice to withdraw your consent for receiving marketing or promotional materials/communication. You may contact us using the contact details found below.
3.11 Please be aware that once we receive confirmation that you wish to withdraw your consent for marketing or promotional materials/communication, it may take up to 30 working days for your withdrawal to be reflected in our systems. Therefore, you may still receive marketing or promotional materials/communication during this period of time. Please note that even if you withdraw your consent for the receipt of marketing or promotional materials, we may still contact you for other purposes in relation to the Products and Services that you hold or have subscribed to with GR.
4. DISCLOSURE OF PERSONAL DATA
4.1 GR will take reasonable steps to protect your Personal Data against unauthorised disclosure. Subject to the provisions of any applicable law, your Personal Data may be disclosed, for the purposes listed above (where applicable), to the following:
(a) GR’s related corporations and employees to provide content, Products and Services to you, address your questions and requests in relation to your customer accounts, subscription and billing arrangements with us as well as our Products and Services, to activate, deactivate, install, maintain and operate our systems and/or services;
(b) companies providing services relating to insurance and consultancy to GR;
(c) agents, contractors or third party service providers who provide operational services to GR, such as courier services, telecommunications, information technology, payment, printing, billing, payroll, processing, technical services, training, market research, call centre, security or other services to GR;
(d) vendors or third party service providers in connection with marketing promotions and services offered by GR or its preferred partners;
(e) commercial shops and retailers in relation to providing rewards and benefits;
(f) other telecommunications, content or other service providers to facilitate their provision of content or services, or for interconnection, inter-operability, system operation and maintenance and billing between service providers;
(g) any business partner, investor, assignee or transferee (actual or prospective) to facilitate business asset transactions (which may extend to any merger, acquisition or asset sale) involving any of the Companies;
(h) collection and repossession agencies in relation to the enforcement of repayment obligations for debts;
(i) credit bureaus for the purpose of preparing credit reports or evaluation of creditworthiness;
(j) external banks, credit card companies and their respective service providers;
(k) our professional advisers such as auditors and lawyers;
(l) relevant government regulators, statutory boards or authorities or law enforcement agencies to comply with any laws, rules, guidelines and regulations or schemes imposed by any governmental authority; and
(m) any other party to whom you authorise us to disclose your Personal Data to.
5.1 A cookie is a small piece of information that is placed on your computer when you visit certain websites.
(a) enabling certain features and functions on our websites, eg. remembering your user ID, browsing and other service preferences;
(b) building up a profile of how you and other users use the website;
(c) improving the efficiency of our website;
(d) administering services to you and to advertisers; and
(e) establishing usage statistics
5.3 Most internet browsers provide you the option of turning off the processing of cookies (please see the “help” section of your browser), but this may result in the loss of functionality, restrict your use of the website and/or delay or affect the way in which it operates.
5.4 Advertisements on the GR website may be provided by third party advertisers and their agencies. These may generate cookies to track how many people have seen a particular advertisement (or use the services of third parties to do this), and to track how many people have seen it more than once. GR does not control these third parties and their cookie policies and if you have questions about their cookie policies, please contact GR and we will try our best to assist by providing you information about these third party advertising agencies.
5.5 GR is not responsible for the Personal Data policies (including Personal Data protection and cookies), content or security of any third party websites linked to the GR website.
6. ACCESSING YOUR PERSONAL DATA
6.1 If you would like to view, correct, complete or remove your personal information or if you have any other questions in connection with this Policy, please contact us at firstname.lastname@example.org.
(c) would like to obtain access and make corrections to your Personal Data records, please contact us as follows:
6.2 Please note that if your Personal Data has been provided to us by a third party (e.g. a referrer), you should contact that organisation or individual to make such queries, complaints, and access and correction requests to GR on your behalf.
6.3 If you withdraw your consent to any or all use of your Personal Data, depending on the nature of your request, GR may not be in a position to continue to provide its Products and Services to you, administer any contractual relationship in place, which in turn may also result in the termination of any agreements with GR, and your being in breach of your contractual obligations or undertakings. GR’s legal rights and remedies in such event are expressly reserved.
7. GOVERNING LAW