PERSONAL DATA PROTECTION POLICY
1. Introduction
This Personal Data Protection Policy (“Policy”) outlines how SAAA@Singapore and SAAA Cargo Services Pte Ltd (“SAAA”, “we”, “us”, or “our”) manage Personal Data in compliance with the Singapore Personal Data Protection Act 2012 (“PDPA”). By interacting with us, submitting information to us, or engaging our services, you agree and consent to the collection, usage, and disclosure of your Personal Data as set forth in this Policy.
2. Personal Data
The personal data we collect depends on your relationship with us—whether you are a member company of SAAA, client, trainee, vendor, or employee—and the specific purpose of our interaction.
We may collect:
- Identity Data - Full name, NRIC/FIN/Passport number, date of birth.
- Contact Information - Mailing address, business address, email, telephone numbers.
- Employment Details - Job title, company name, industry sector.
Exclusion - In line with the PDPA, Business Contact Information (BCI) (such as business email or office number provided solely for business purposes) is generally excluded from the scope of these provisions.
3. Purposes for Collection, Use, and Disclosure
We process Personal Data to fulfill operational requirements, which may include:
- Administering association memberships, events, industry training programs, and sales of SAAA’s product and services.
- Invoicing, processing payments, and auditing client accounts.
- Complying with regulatory and legal obligations enforced by Singapore authorities (e.g., Singapore Customs, Skills, Workforce Development Agency (SWDA) and PDPC).
- Relying on modern exceptions under the 2020 amendments—such as Legitimate Interests or Business Improvement—where traditional express consent is not practical.
4. Security Safeguards and Data Retention
Protection: We implement reasonable physical, administrative, and technological security controls (e.g., encryption, clear access boundaries) to prevent unauthorized access, alteration, or leaks.
Retention: Personal Data will only be kept for as long as it fulfills the legal or business purpose for which it was gathered.
5. Mandatory Data Breach Notification
In the event of a data breach that compromises personal data, we adhere strictly to the PDPA Amendment Act. If an incident causes (or is likely to cause) significant harm to individuals, or affects 500 or more individuals, we will notify the Personal Data Protection Commission (PDPC) within 72 hours of assessment, alongside notifying the affected individuals.
6. Access, Correction, and Withdrawal of Consent
Individuals have the right to request access to their data, request corrections to erroneous entries, or completely withdraw their consent. Requests can be channelled directly to our Data Protection Officer (DPO).
7. Contacting the Data Protection Officer (DPO)
For questions, data access requests, or complaints regarding your privacy rights, please contact our designated DPO:
- Attention: Data Protection Officer
- Email: dpo@saaa.org.sg
- Address: 7 Airline Road, #04-06, Cargo Agents Building E, Changi Airfreight Centre, Singapore 819834