Data protection policy

On this page

1. Personal data2. Collection of personal data3. Purpose of collection, use and disclosure4. Consent5. Disclosure of personal data6. Protection of personal data7. Retention of personal data8. Accuracy of personal data9. Access and correction requests10. Cookies and tracking technologies11. International data transfers12. Updates to this policy13. Contact us

Epitome Global Pte Ltd (“we”, “us”, “our”) is committed to protecting the personal data of our customers, employees, partners, and stakeholders in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

This Data Protection Policy explains how we collect, use, disclose, and protect your personal data. For our broader privacy commitments, see our Privacy Policy. For enterprise security and compliance documentation, visit our trust centre.

1. Personal data

“Personal Data” refers to data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access.

This may include (but is not limited to):

• Name
• Identification numbers (e.g. NRIC, passport)
• Contact details (email address, phone number, address)
• Employment and education information
• IP address and device information
• Behavioural and assessment data (e.g. profiling results)

2. Collection of personal data

We may collect personal data in the following ways:

• When you visit our website or use our services
• When you submit forms or applications
• When you communicate with us via email, phone, or other channels
• When you enter into agreements with us
• Through third-party integrations (e.g. LinkedIn or other platforms, where authorised)

We only collect personal data that is necessary for our business purposes.

3. Purpose of collection, use and disclosure

We may use and disclose your personal data for purposes including:

• Providing and improving our products and services
• Processing applications, transactions, or requests
• Identity verification and authentication
• Recruitment, talent management, and HR services
• Analytics, research, and product development
• Compliance with legal and regulatory requirements
• Responding to enquiries, feedback, or complaints

We will not use your personal data for purposes beyond those stated without your consent, unless required or permitted by law.

4. Consent

By providing your personal data to us, you consent to our collection, use, and disclosure of your personal data as described in this Policy.

You may withdraw your consent at any time by contacting our Data Protection Officer (DPO) using the details in Section 13. On receiving a withdrawal request we will, within a reasonable time, cease (and cause our service providers to cease) collecting, using, or disclosing your personal data for the relevant purposes. Please note that withdrawing consent may affect our ability to provide services to you, and does not affect processing carried out before the withdrawal took effect or processing required or permitted by law.

Where we send you marketing or promotional messages, you may opt out at any time using the unsubscribe facility provided. In accordance with the Do Not Call (DNC) provisions of the PDPA, we will also check the relevant DNC registers before sending specified marketing messages to Singapore telephone numbers, except where you have given us clear and unambiguous consent in writing to do so.

5. Disclosure of personal data

We may disclose personal data to:

• Our employees and authorised representatives
• Service providers and vendors (e.g. cloud hosting, analytics, recruitment tools)
• Business partners and clients where necessary
• Regulatory authorities or law enforcement agencies where required

All third parties are required to protect personal data in accordance with applicable laws and our policies.

6. Protection of personal data

We implement reasonable security arrangements to protect personal data, including:

• Role-Based Access Control (RBAC)
• Encryption of sensitive data at rest and in transit
• Secure authentication and authorisation mechanisms
• Monitoring and logging of access activities

Behavioural and profiling data (e.g. assessment results) are:

• Protected via access control mechanisms
• Not shared without consent or exposed publicly

In the event of a data breach, we will assess the breach and, where it is likely to result in significant harm to affected individuals or is of a significant scale, notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with the Data Breach Notification obligations under the PDPA.

7. Retention of personal data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

When personal data is no longer needed, we will securely delete or anonymise it.

8. Accuracy of personal data

We strive to ensure that personal data is accurate and complete. You may request corrections to your personal data by contacting us.

9. Access and correction requests

You have the right to:

• Request access to your personal data
• Request correction of your personal data

Requests may be subject to verification and applicable administrative fees.

If you are not satisfied with how we have handled your personal data or a request, you may lodge a complaint with us via our DPO in the first instance. You also have the right to make a complaint to the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.

10. Cookies and tracking technologies

Our website may use cookies and similar technologies to:

• Enhance user experience
• Analyse website traffic and usage patterns
• Support security and authentication

You can manage cookie preferences through your browser settings.

11. International data transfers

Where personal data is transferred outside Singapore, we ensure that the receiving parties provide a standard of protection comparable to the PDPA.

12. Updates to this policy

We may update this Data Protection Policy from time to time. Updates will be published on our website with the effective date.

13. Contact us

If you have any questions, feedback, or requests regarding this Policy or your personal data, please contact:

Data Protection Officer (DPO)
Epitome Global Pte Ltd
Email: dpo@epitome.global