Privacy Policy

1. This Privacy Policy (“Privacy Policy”) sets out our (discoveric marketplace Ag, all its subsidiaries and all the entities under discovermarket brand) basis for the collection, use, disclosure, or processing of any personal data of our customers in accordance with the requirements of applicable privacy laws and other related personal data protection laws regulating the handling of personal data (“Privacy Laws”). This Policy applies to personal data in our possession or under our control, including personal data in the possession of organisations which we have engaged to collect, use, disclose or process personal data for our purposes.This Privacy Policy also serves as notification to and an agreement with individuals of the matters required to be notified and agree on collection of their personal data. You also acknowledge and confirm that all personal data that have been provided to us is true and accurate.
2. For the purpose of this Policy, “personal data” means data, whether true or not, about a customer who can be identified:
   1. from that data; or
   2. from that data and other information to which we have or are likely to have access.

1. We generally do not collect your personal data unless:
   1. you provide it to us or via a third party who has been authorised by you (your “authorised representative”) to disclose your personal data to us after:
      1. you (or your authorised representative) have been notified of the purposes for which the data is collected, and
      2. you (or your authorised representative) have provided consent (explicit or implied as the case may be) to the collection and usage of your personal data for those purposes; or
   2. collection and use of personal data without consent is permitted or required by the Privacy Laws or other laws. We will obtain your consent before collecting any additional personal data and before using your personal data for a purpose which has not been notified to you (except where permitted or authorised by law).
2. We may collect and use your personal data for any or all of the following purposes:
   1. to perform obligations in the course of or in connection with our provision of the goods or services requested by you;
   2. to verify your identity;
   3. to respond to, handle, and process queries, requests, applications, complaints, and feedback from you;
   4. to manage your relationship with us;
   5. to process payment or credit transactions;
   6. to enable us to comply with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;
   7. to inform or update you about products or services that you request from us or that may interest you where you have consented to be contacted for such purposes;
   8. to conduct statistical or other forms of analysis for purposes of maintaining or improving our services in general;
   9. any other purposes for which you have provided the information;
   10. transmitting to any unaffiliated third parties including our third party service providers and agents, and relevant governmental and/or regulatory authorities, whether in Singapore or abroad, for the aforementioned purposes; and
   11. for fraud detection and for the prevention of financial crime prevention purposes;
   12. for detecting and preventing misuse of services; and
   13. any other incidental business purposes related to or in connection with the above.
3. We may disclose your personal data:
   1. where such disclosure is required for performing obligations in the course of or in connection with our provision of the goods and services requested by you; or
   2. to third party service providers, agents and other organisations we have engaged to perform any of the functions with reference to the above mentioned purposes. We require our service providers to adhere to certain privacy guidelines which require the service providers not to use the personal data or disclose it for any unauthorized purposes.
4. Third-party provider as an independent data controller:By engaging with our services, you acknowledge that a third-party provider may also be involved in providing services to you. In relation to this, where a third-party provider provides its own privacy policy to you to define the purposes of its personal data processing activity, the third-party provider shall be considered as an independent data controller. You are responsible for identifying the privacy policies of any third-party provider or service and complying with their privacy policies.

   We are not liable for any actions, omissions or breaches of privacy committed by these third-party providers or services. It is your responsibility to read and understand the privacy practices of these third-party providers or services before sharing any personal data with them.

The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you in writing. You may withdraw consent and request us to stop collecting, using and/or disclosing your personal data for any or all of the purposes listed above by submitting your request via email to our Data Protection Officer at the contact details provided below.

dpo@discovermarket.com

When transferring personal data to any other third parties, we will ensure an appropriate transfer mechanism under the Privacy Laws is in place, if necessary.

1. We will endeavour to implement appropriate technical and organisational measures to keep secure any information which we hold about you, and to keep this information accurate, up to date and complete, and to ensure a level of security appropriate to any risks which may be associated with the processing activities outlined in this Privacy Policy.
2. We take all reasonable physical, administrative, and technological precautions to store and transmit data securely.
3. Where it is required by the law or relevant government institution, we will only store your personal information in controlled facilities within your jurisdiction.
4. If there is any failure to protect the confidentiality of personal data, you agree that the breach notification can be sent electronically by us.

1. We will retain and process your personal data only for as long as is necessary for the purposes for which the information is collected. In addition, we will retain and use your personal data to the extent necessary to comply with our legal obligations and exercise our legal rights (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.
2. When we no longer need to use your personal data or retain it pursuant to legal obligations in order to exercise our legal rights, we will remove it from our systems and records or take steps to anonymise it so that you can no longer be identified from it in accordance with relevant Privacy Laws.