Privacy Policy

2. Collection of Personal Data

2.1. We collect personal data and confidential information (collectively, “Personal Data”) from and about Users. Personal data means data, whether true or not, about an individual who can be identified: (i) from that data; or (ii) from that data and other information to which we have or are likely to have access. This Personal Data will include, but may not be limited to the following information:

(a) Your full name, including any aliases;

(b) Your business address;

(c) E-mail address(es) and other contact information that you may provide to us;

(d) Encrypted credit card information;

(e) A record of any correspondence between you and us through the Platform;

(f) Information that we may require from you when you report a problem with the Platform or the registration process;

(g) A record of your commercial activities on the Platform such as details of your orders, products and sales;

(h) With regard to each of your visit to our Website we may collect, in accordance with applicable laws and, where required, with your consent, information relating to the devices you use and the networks that they are connected to when using our services. This may include the following information: your IP address, log-in information, smartphone device brand and type, browser type and version, browser plug-in types and versions, operating system and platform, advertising identifier, information about your visit including the URL clickstream to, through and from our Website, products you viewed or searched for, download errors, length of visits to certain pages, and page interaction. We may collect this information through the use of various technologies including cookies; and

(i) Any other information that you provide to us through the Website.

2.2 We will collect only the information listed in paragraph 2.1 above that is reasonable for the purposes set out in paragraph 4.3 below.

2.3. We make a reasonable effort to ensure that the personal data collected is accurate and complete. We will not be responsible for relying on inaccurate or incomplete data arising from your failure to notify us of any changes or inaccuracies in your personal data that was initially provided.

2.4. In the event that your account on or access to the Platform is suspended or blocked, we will keep your data for a period of between 2 and 10 years in order to prevent you from circumventing the rules applying to our Platform, after which we shall cease to retain your personal data.

2.5. We will cease to retain your personal data when the purpose for which the personal data was collected is no longer being served by the retention of the same, and it is no longer necessary for legal or business purposes.

2.6. We only collect such information when you choose to supply the same to us. You do not have to supply any personal information to us but you may not be able to take advantage of all our Services without doing so.

3. Consent to collection, Use and Disclosure of your Personal Data

3.1. The provision of your Personal Data to us will be deemed as consent to our collection, use and disclosure of your Personal Data for the purposes set out in this Policy.

3.2. The provision of the personal data of third parties will be deemed as you having obtained the consent of such third parties to our collection, use and disclosure of their Personal Data for the purposes set out in this Policy.

4. Use of information

4.1. By using the Platform and/or our Services, you expressly authorise and consent to us gathering, reviewing, retaining, selling in anonymized form, and where reasonably required, transmitting your Personal Data to our intermediary companies and entities for the proper and reasonable purpose of them storing and using the data responsibly and in accordance with the PDPA. When you provide Personal Data through our Website and/or Platform, the information may be sent to servers located outside of Singapore.

4.2. We will also take appropriate steps to ascertain that the foreign recipient organisation of the personal data is bound by legally enforceable obligations that are in-line with the requirements under the PDPA.

4.3. We may use this information for the following purposes:

(a) To verify your identity;

(b) To obtain statistics about Users so that we may improve and further develop our business processes, Website, Platform, and Services;

(c) To respond to requests and queries (if any) from Users;

(d) Ensure that the content on our Website and Platform is presented in the most effective manner for you and your personal computers, smartphones and other devices, customise the Website and Platform to your preferences, understand your activities interests, optimise our Website and Platform’s display of information, and manage our business;

(e) Carry out and administer any obligations arising from any agreements entered into between you and us;

(f) Allow you to participate in features of the Website and Platform and receive our Services;

(g) Communicate with you by email or other chosen means to send relevant notifications about our events and services that may be of interest to you;

(h) Contact you and notify you about changes to the Website, Platform or our Services (except where you have expressly requested for us not to do so);

(i) Analyse how users are making use of the Website and Platform for our internal marketing and research purposes;

(j) Ensure that you comply with our terms and conditions and the applicable law;

(k) Send to you important notifications that you will require in order to use the Website, Platform, and our Services;

(l) For commercial use by selling it in anonymized form to third parties in accordance with the PDPA;

(m) To otherwise reasonably provide our Services and/or other related services to Users; and

(n) To promote our other services.

5. With whom we share your information

5.1. We do not share your personal information with others except as indicated in this Policy or when we inform you and give you an opportunity to opt out of having your personal information shared. We may share personal information with:

(a) Any government agency that has the right to obtain the data;

(b) Third parties who purchase the anonymized data from us;

(c) Any person with a lawful entitlement to obtain the data; and

(d) Service providers: We may share information, including personal information, with third parties that perform certain services on our behalf. These services may include, without limitation, server hosting, marketing and supporting our notification service functionality. These service providers may have access to personal information needed to perform their functions but are not permitted to disclose or use such information for any other purposes.

5.2. We may allow third party service providers, advertising companies, advertisement networks, merchandising companies and other third parties to display advertisements and brands on our Website and Platform. These companies may use tracking technologies, such as cookies or web beacons, to collect information about users who view or interact with their advertisements.

5.3. We do not provide any non-anonymised personal information to third parties. We will adhere strictly to the provisions in the PDPA in relation to any disclosure and dissemination of information to any third parties.

5.4. We may disclose your information, including personal information, in response to a subpoena or similar investigative demand, a court order, or a request for cooperation from a law enforcement or other government agencies, to establish or exercise our legal rights, to defend against legal claims, or as otherwise required by law.

5.5. We will not transfer any of your personal data to a country or territory outside Singapore except to organisations that provide a standard of protection to personal data that is comparable to the protection under the PDPA.

6. Refusal to give us the information we are seeking

6.1. You can refuse to provide us with your Personal Data. However if you do not give us this information, we may not be able to provide our services to you.

7. Direct Marketing

7.1. We may sometimes use personal data for marketing purposes but only in the following ways:

(a) We will contact you while you are registered with us with updates in relation to employment opportunities, career tips, industry/market insights and promotions from time to time;

(b) We will send to subscribers of our Website news to which they have subscribed; and

(c) We will contact Users with whom we have a relationship with industry/market information and promotions from time to time.

7.2. When sending direct marketing material we will give you the option as to whether or not you wish to receive further marketing communications. We usually use email, phone, WhatsApp, and/or SMS. If you wish to change your preferences for contacts, please contact us at contact@etpgroup.com.

8. Third Party Sites or external sites

8.1. Our Website or communications may contain links to or from other websites. External sites that are linked to or from our Website are not under our control and you are advised to review their privacy statement. Users should note there are inherent risks associated with the transmission of information via the Internet and you should therefore make your own assessment of the potential risk to the security of your information.

8.2. For example, if you click on an advertisement (news and promotions) on our Website or Platform, you may be taken to a website that we do not control. These third-party websites may independently solicit and collect information, including personal information, from you and, in some instances, provide us with information about your activities on those websites. You are advised to consult the privacy statements of all third-party websites that you visit.

9. How we protect personal data

9.1. We take all reasonable steps to protect your personal data from misuse, loss, unauthorised access, modification and disclosure.

9.2. We have a number of safety measures in place to protect your information. For example, your personal data is stored in a customer relationship management system in Singapore and which provides management controls for identity access and provisioning. Access to the database is only granted to those who require such access. All staff are bound by a confidentiality agreement regarding company and customer information.

9.3. As our information technology storage facilities and servers may be located in other jurisdictions, your personal data may be transferred to, stored, used and processed in a jurisdiction other than Singapore. You understand and consent to the transfer of your personal data out of Singapore as described herein.

9.4. Where we transfer your personal data to a country outside of Singapore, we will take steps to ensure that your personal data continues to receive a standard of protection that is at least comparable to that provided under the PDPA and GDPR.

9.5. If you wish to delete your personal data in our possession, please email us at contact@etpgroup.com. Your personal data in our possession will be deleted within 24 hours.

10. Children’s privacy

10.1. Although our Website and Platform are for a general audience, we restrict the use of our Platform to individuals aged 18 and above. We do not knowingly collect, maintain, or use personal information of children under the age of 18. It is your sole responsibility to provide your correct birth date.

11. No Third-party Rights

11.1. This Policy does not create rights enforceable by third parties or require disclosure of any personal information relating to users of the Platform.

12. Notification of changes to our Privacy Policy

12.1. As part of our efforts to ensure that we properly manage, protect and process your personal data, we will review our policies, procedures and processes from time to time.

12.2. We reserve the right to amend the terms set forth under this Policy at our absolute discretion.

12.3. We will post details of any changes to this Policy on the Website and Platform to help ensure that you are always aware of the information that we collect, how we use it, and in what circumstances, if any, that we share it with other parties.

12.4. You are encouraged to visit the Website and Platform from time to time to ensure that you are well informed of our latest policies in relation to personal data protection.

12.5. If you do not agree to the updated policy, you must stop accessing or using the Website, the Platform and our Services.

13. Specific provisions related to the European Union GDPR

13.1. We acknowledge that the GDPR will apply if we process or hold any personal data of individuals residing in the EU or if we offer goods or services to individuals in the EU (“EU Individuals”).

13.2. We understand that we may lawfully process personal data if consent is provided by the EU Individual for the processing for specific purposes, if it is necessary for the performance of a contract of if it is necessary for our compliance with a legal obligation.

13.3. We understand that personal data must be processed lawfully, fairly and transparently, be collected and applied only for specified, explicit and legitimate purposes, must be limited to only what is required, must be accurate, not be kept in personally identifiable form for longer than is necessary and must be secured and protected pursuant to the GDPR.

13.4. We acknowledge and agree that the GDPR affords EU Individuals with rights such as:

(a) The right to access and obtain a copy of the EU Individuals’ personal data, including the purposes of processing and who the personal data has been disclosed to;

(b) The right to rectify inaccurate personal data concerning the EU Individual;

(c) The right to erasure of personal data concerning the EU Individual in certain circumstances;

(d) The right to restriction of processing of personal data in certain circumstances, such as where the accuracy of the personal data is contested, or the processing is unlawful;

(e) The right to data portability by receiving personal data concerning the EU Individual or data which has been provided to us, in a structured, commonly used and machine-readable format, and the right to transmit that data to another organisation;

(f) The right to object to the processing of personal data in certain circumstances, including for the purposes of direct marketing; and

(g) The right not to be subject to automated decision-making (including profiling) where this has a legal effect on the EU Individual or significantly affects him.

13.5. We agree that we will act on a request from an EU Individual without undue delay (within one month). We will maintain records of how we process personal data, acknowledge the need to conduct data protection impact assessments and the need to apply careful consideration in the adoption and engagement of our data processors.

14. Consent withdrawal

14.1. You are entitled to withdraw your consent for the collection, use and disclosure of your personal data by giving us reasonable notice by sending a written request to our Data Protection Officer at the contact details provided by paragraph 15.

14.2. Upon receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the implications of such withdrawal.

14.3. We may also ask you to verify your identity and for more information about your request.

14.4. In general (and provided you have given us sufficient information for us to process your request), we shall seek to respond/process your request within ten (10) business days of receiving it.

14.5. Please note that withdrawing your consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclose without consent is required/permitted under applicable laws.

15. Customer PII Data Protection Policy for orders from the marketplaces

15.1. Personally Identifiable Information (PII): This Means Information related to the customer for an order which includes Customer’s Name, Address, Phone number, Email Id, and Gender. Gift Messages.

15.2. PII Data Protection Policy:

(a) Customer PII is Encrypted when an order is received in Ordazzle using AES 256-bit Algorithm at rest and in transit.

(b) Need to Know Basis Access Control: Access to customer information through the application UI is controlled via access rights which are controlled by the seller’s administrator.

15.3. Data Backup Policy

(a) For the data back up we are taking hourly snapshots and preserving the latest 3 snapshots using the GCP snapshot feature, while the older snapshots get overwritten.

15.4. Archival/Anonymisation Policy

(a) After the order is shipped to the buyer, the customer PII  is anonymized by a system job after 30 Days from the date of shipping.

15.5. Data Usage

(a) Ordazzle does not use Personally Identifiable Information about Customers for any purposes other than merchant-fulfilled shipping for shipment booking.
(b) Ordazzle does not target Marketplace Customers for product marketing or review fabrication and modification using data retrieved through the marketplace API
(c) Ordazzle does not use, offer, or promote external data services that vend Information or data retrieved from marketplaces websites other than what is required by shipping partners.
(d) Ordazzle does not aggregate data across Authorized Users’ businesses or Customers obtained through the Marketplaces API to provide or sell to any parties including competing Authorized Users.
(e) Ordazzle does not promote, publish, or share insights about Marketplace business.

15.6. Data Sharing

(a) We do not disclose Information, individually labeled or aggregated, to other Application users, affiliated entities, or any outside parties, unless required to perform acceptable Authorized User activities for Authorized Users that authorized your Application.
(b) We Perform due diligence on the data security measures and policies of any parties with whom we share data and only share data with parties that have data security standards at least as strict as our own. In this case, the applicable party is the shipping carrier.

16. Contact & Data Protection Officer

16.1. If at any time you would like to contact us with your views about our privacy practices, or with any enquiry or request relating to your personal data, including but not limited to, the following:

(a) Any request to provide you with your personal data that is in our possession or control;
(b) Any request to withdraw your consent for the collection, use and/or disclosure of your personal data;
(c) Any enquiry on the ways in which your personal data has been or may have been used or disclosed by us within one year prior to the date of the enquiry; and
(d) Any request to correct an error or omission in your personal data,
they should use one of the following means:

(a) Email to our Data Protection Officer at contact@etpgroup.com.; or

(b) Post to:

ETP International Pte. Ltd.

20 Science Park Road, #01-28, Teletech Park, Singapore 117674