Privacy Policy: Personal Data Usage & Protection

2. Purpose for collection, processing, usage and disclosure

2.1   Generally, the Certis Group collects Personal Data either directly from you or your authorised representatives (i.e. persons who have been validly identified as being authorised by you through our security procedures) in the following ways:

• when you submit forms relating to or purchase or use any of our products or services;
• when you interact with our customer service officers, including via telephone calls, face-to-face meetings and emails;
• when you provide information prior to entering our buildings or premises;
• when you request that we contact you or be included in an email or other mailing list;
• when you respond to our promotions or other incentives;
• when you respond to our request for additional Personal Data;
• when you respond to our surveys;
• when you submit a job application;
• when you sign on for work or use any corporate digital resources;
• when we receive references from business partners and third parties, for example, where you have been referred by them;
• when you submit your Personal Data to us for any other reasons; and
• when you browse our website. If you are only browsing our website, you generally do so anonymously. We do not capture any data that allows us to identify you individually, unless you provide such information. However, we do use cookies on our websites. To find out more, please refer to Section 8 on cookies below.

2.2   We collect, use, disclose and/or share your Personal Data for the following purposes:

• to communicate with you on any queries you may have;
• to process your order and deliver products and services to you;
• to manage the administration and business operations of the Certis Group and complying with our policies and procedures;
• for service improvements, resolving complaints and disputes;
• for identity verification purposes;
• to communicate with you and/or to keep records in connection with a job application and other job opportunities;
• in relation to a job application by you,
  • to contact the referee(s) and/or guarantor(s) whose details have been provided by you;
  • to verify your academic and professional qualification by contacting the school/college/university/institute/professional qualifying bodies;
  • to disclose your personal data to the Certis Group’s customers in connection with your job application,
  • to conduct other relevant pre-employment checks and screening, such as with authorities and credit agencies; and
  • to administer relevant assessments (including via third parties);
• for employee training, assessments for learning or development purposes, and performance evaluation (including via third parties);
• to provide access controls;
• to update our records and generally maintain your accounts with us;
• to detect and prevent fraudulent activity;
• to meet or comply with any applicable rules, laws, regulations, codes of practice or guidelines issued by any legal or regulatory bodies which are binding on the Certis Group (including but not limited to responding to regulatory complaints, disclosing to regulatory bodies and conducting audit checks, due diligence and investigations); and
• purposes which are reasonably related to the aforesaid.

2.3   Furthermore, where permitted under applicable laws, we may collect, use and disclose your Personal Data for the following additional purposes:

• analytics and tracking;
• conducting market research and surveys to enable us to understand and determine customer location, preferences and demographics to develop special offers and marketing programmes in relation to our products and services and to improve our service delivery and your customer experience at our touchpoints;
• providing additional products and services and benefits to you;
• matching your Personal Data with other data collected for other purposes and from other sources (including third parties) in connection with the provision, marketing or offering of products and services to you;
• leads generation and management for marketing products and services of the Certis Group;
• administering contests, competitions and marketing campaigns, and personalising your experience at our touchpoints;
• organising promotional events; and
• purposes which are reasonably related to the aforesaid.

2.4   The Certis Group does not practice sharing, renting or selling of Personal Data with third parties. However, each member of the Group may share your personal information with members of the Certis Group (which includes our affiliates, subsidiaries and joint ventures worldwide). Access to Personal Data is limited to persons whom we reasonably believe requires access for effective delivery of our products and services to you, to process your job application or for the purposes set out herein.

2.5   We may also collect, use and disclose such personal information if so authorized or required by law or the relevant authorities, or exempt under the relevant privacy or personal data protection legislation, to do so.

2.6   Further, we may disclose or share your Personal Data in the following circumstances:

• Third Party Service Providers: We may disclose your personal data to third parties:
  • contracted by us to assist us in delivering part or all of the products and services ordered by you;
  • who provide services as part of the promotions or services offered to you;
  • who provide services to us such as professional advisers, IT consultants, recruitment partners etc.;
  • credit bureaux for the purpose of preparing credit reports or evaluation or updating of creditworthiness or enforcement of repayment obligations;
  • bankers, insurers, credit card companies and any of their respective service providers.
  We will use all commercially reasonable endeavours to conduct due diligence on the data protection practices of these third parties prior to our engagement and to ensure that these third parties comply with similar undertakings of privacy.
• With your consent: We may seek your consent to collect, hold, use and disclose your Personal Data for any other purpose not set out herein.
• Business Transfers: As we continue to develop our business, we might sell or buy businesses, subsidiaries or business units or undertake a merger. In such transactions, customer information may be one of the transferred business assets.

2.7   The Certis Group shall use its best endeavours to ensure that its employees, officers, partners and such other third parties mentioned above who are involved in the collection, processing and disclosure of Personal Data will observe and adhere to the terms of this Policy.

2.8   The Certis Group also reserves the right to share your Personal Data as is necessary to prevent a threat to the life, health or security of an individual or corporate entity. Further, the Certis Group may disclose your Personal Data to law enforcement agencies, government representatives and our advisers, as is necessary, to investigate suspected unlawful activities including but not limited to fraud, intellectual property infringement or privacy.