HEREDITAS

Personal Data Protection 

Collection and Use of Personal Data

1. By accessing or using our products or services, creating an account, submitting information to us, or otherwise engaging with us, you agree and consent to the Company’s collection, use, and processing of your personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”). This includes personal data such as your name, contact details, identification information, payment information, and any other data reasonably required for the purposes set out below. 
2. Purposes of Processing
   • We may collect, use, disclose, and process your personal data for one or more of the following purposes:
     • Providing, delivering, and managing our products and services 
     • Processing orders, transactions, reservations, or service requests 
     • Communicating with you regarding your account, orders, enquiries, or customer support matters 
     • Managing billing, payments, refunds, and account administration 
     • Conducting verification, security checks, and fraud prevention 
     • Improving our services, customer experience, and internal operations 
     • Sending you marketing, promotional, or advertising messages where permitted under the PDPA (including “deemed consent” and soft opt-in provisions) 
     • Complying with legal obligations, regulatory requirements, audits, or investigations 
     • Any other purpose reasonably related to the above or for which you have been notified at the time of data collection 
3. Disclosure of Personal Data
   • We may disclose your personal data to third parties where necessary for the purposes stated above. These include service providers, logistics partners, payment processors, IT vendors, professional advisers, and government or regulatory authorities. Where personal data is transferred outside of Singapore, we will ensure appropriate safeguards in accordance with the PDPA.
4. Withdrawal of Consent, Access, and Correction
   • You may at any time request to: Withdraw your consent to our use or disclosure of your personal data 
   • Access your personal data in our possession or control 
   • Correct inaccurate or incomplete personal data
     • Such requests may be subject to reasonable administrative fees and legal exceptions. Withdrawal of consent may affect our ability to provide certain products or services to you. 
5. Data Protection and Retention
   • We will implement reasonable security measures to protect your personal data against unauthorized access, use, disclosure, modification, or loss. Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law.