Personal Data Protection Act notification
At Okay To Chat LLP (O2C), we are committed to protecting and respecting your personal data in accordance with the Personal Data Protection Act 2012 (the “PDPA”) and our personal data protection policy.
By providing your personal data to O2C, it will be deemed that you have agreed and consented to the collection, use and disclosure of your personal data by and amongst O2C and the O2C Entities in the manner set forth below. For purposes of this notification, “O2C Entities” includes any other organisation(s) authorised and established by O2C for the sole purpose of carrying out the obligations of O2C under the name “Okay To Chat LLP”.
This notification describes how the O2C and its representatives and/or agents (collectively, “O2C”, “we”, “us”, “our” or similar expression) may collect, use, disclose and manage your personal data.
Collection, use and disclosure of personal data
O2C’s personal data protection policy applies to all individuals whose personal data is within O2C’s possession or control. Personal data generally includes any data that can be used to identify a natural person, such as name, identification number or address, but excludes business contact information. If you have provided the personal data of another individual (such as a family member or next-of-kin), you agree that you have obtained his/her consent to O2C’s collection, use and disclosure of his/her personal data according to O2C’s personal data protection policy or that you validly give us such consent on their behalf.
In accordance with the PDPA, we have processes and procedures in place to ensure that your personal data is collected, used and disclosed only for the following purposes:
- delivery of services;
- evaluating and assessing the suitability for job applicants;
- verification of identity;
- regulatory reporting;
- business and internal administrative purposes, such as internal records and references or to process any queries or feedbacks;
- to facilitate any business asset transactions (which may extend to any sale, transfers, assignments or novation of assets, rights or obligations); or
- for any other purposes for which we have obtained your consent, for which you may be deemed to have provided consent or are reasonably related to the foregoing.
O2C may also share or refer your personal data to relevant third parties, strictly on a need-to-know basis. Such third parties may include individual or corporate business partners, O2C’s service partners or vendors, government agencies, healthcare professionals or other healthcare institutions or facilities.
O2C may use, collect and disclose the personal data for the purposes mentioned above. If you are unable to provide your consent, we will not be able to provide the intended services or information you are requesting for (if any).
We may also collect, use and disclose personal data where required or permitted by laws or regulations binding on O2C for any purpose.
Access and Correction
Under the Act, you have the right to request for information about your personal data that is in our possession or under our control. You can also request for information about the ways in which your personal data has been or may have been used or disclosed by us. An administrative fee may be imposed on you for the request.
Please contact us to request for a copy of the personal information form:
Subject: To the Data Protection Officer
Withdrawal of consent
You also have the right to withdraw any consent that you have given to us. Please let us have any notice of withdrawal in writing, indicating your instructions clearly.
If you withdraw your consent for the collection, use or disclosure of your personal data, we will put the withdrawal into effect within thirty (30) working days of your request.
Please write to us to request for a copy of the request for withdrawal of consent form here and submit the completed form to the Personal Data Protection Officer for the above mentioned purposes through:
Subject: To the Data Protection Officer
Accuracy of personal data
O2C keeps personal data as accurate, complete and up-to-date as necessary, taking into account its use and the interests of our patients, members, volunteers and donors. Where possible, we will validate data provided using generally accepted practices and guidelines. This includes the requests to see original documentation before we may use the personal data such as with Personal Identifiers and/or proof of address.
Protection of Personal Data
O2C protects personal data against loss or theft, as well as unauthorized access, disclosure, copying, use or modification with security safeguards appropriate to the sensitivity of the personal data, regardless of the format in which it is held.
Retention of Personal Data
O2C will retain your personal data only for as long as the purposes for which such data is collected or used (as notified to you) continues, or where necessary for our legal or business purposes. Thereafter, O2C will delete or destroy the personal data, or remove the means by which the data can be associated with you.
Transfer of personal data
O2C may transfer any personal data in its possession or control to another O2C Entity as may be necessary in order to achieve the purposes set out above and to provide COK’s services to you. O2C may transfer the personal data outside Singapore and O2C will ensure that appropriate safeguards are put in place in compliance to PDPA.
Feedback and queries
If you have any feedback or queries in relation to the protection and retention of your personal data, you may also write to our Personal Data Protection Officer. We will look into your feedback or queries, and will provide you with a response within three (3) working days.
Changes to the notification
We reserve the right to modify or change this Notification at any time. This notification may be amended in tandem with changes in the legislation.
You may write to our Personal Data Protection Officer at the below address:
The Personal Data Protection Officer
Okay To Chat LLP
22 Sin Ming Lane #06-76 Midview City Singapore 573969
For general information about PDPA, please visit the Personal Data Protection Commission’s website at http://www.pdpc.gov.sg