Privacy and Data Protection Policy
Deltus Privacy and Data Protection Policy
1. About this Policy
Deltus Corporate Services Pte. Ltd. (“Deltus”, “we”, “us” or “our”) respects the confidentiality of personal data and is committed to handling personal data in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”) and other applicable legal, regulatory and professional requirements.This Privacy Policy explains how Deltus may collect, use, disclose, protect, retain and otherwise process personal data relating to website visitors, enquirers, prospective clients, clients, officers, shareholders, beneficial owners, employees, service providers and other individuals connected with our work.
2. Personal data we may collect
Depending on your relationship with Deltus and the services requested, personal data may include:
-identification and contact information, such as name, telephone number, email address, residential or correspondence address, nationality, date of birth and identification-document details;-professional and business information, such as job title, employer, company details, directorships, shareholdings, beneficial ownership, business activities and authorised representatives;-financial and transaction information, such as payment details, tax information, source-of-funds or source-of-wealth information where relevant, accounting records, payroll information and supporting documents;-correspondence, instructions, meeting notes, enquiries, feedback and files submitted to us;-technical information generated through use of the Website, such as internet protocol address, browser type, device information, pages visited, referral source and cookie or analytics information; and-other information that is reasonably necessary for the requested service, client acceptance, legal compliance or the administration of our relationship.
3. How we collect personal dataWe may collect personal data directly from you, from a company or person acting on your behalf, from your employer or related parties, through website forms or communications, during meetings, from public registers and government sources, from professional advisers and service providers, or from other lawful sources relevant to the engagement.
4. Purposes of collection, use and disclosure
Deltus may collect, use or disclose personal data for purposes including:
-responding to enquiries and communicating with you;-understanding your requirements, preparing proposals and assessing whether Deltus can accept an engagement;-verifying identity, authority, ownership and control, conducting conflict checks, risk assessments, screening and AML/CPF/CFT due diligence;-providing corporate, accounting, tax, GST, payroll, valuation, data-analytics or other agreed services;-preparing, reviewing, signing, administering and enforcing quotations, engagement letters, invoices and other documents;-making filings, submissions or communications to government agencies, regulators, banks, professional advisers or other parties as instructed or required;-maintaining records, quality controls, security, business continuity, backups, internal administration and professional documentation;-preventing, detecting and investigating fraud, misuse, security incidents, unlawful activity or breaches of professional obligations;-complying with legal, regulatory, tax, accounting, professional, insurance, audit, dispute-resolution and record-retention requirements;-improving our Website, processes, reporting and service delivery; and-sending service updates or marketing communications where you have consented or where otherwise permitted by law.
5. Consent and other permitted processing
Where the PDPA requires consent, Deltus will notify you of the relevant purposes and obtain consent in an appropriate manner. In some circumstances, the PDPA or other laws may permit or require collection, use or disclosure without consent.You should ensure that you are authorised to provide personal data relating to another individual and that the individual has been informed of the relevant purposes, where required.
6. AML/CPF/CFT and regulatory information
Where applicable to the proposed or accepted services, Deltus may collect and verify information concerning customers, connected parties, beneficial owners, controllers, business activities, transactions, source of funds and source of wealth. We may conduct screening against sanctions, politically exposed person, adverse-media and other risk sources.Such information may be retained or disclosed where required by law, regulation, lawful authority or professional obligation. Deltus may be unable to accept or continue an engagement where required information is not provided or cannot be satisfactorily verified.
7. Disclosure to other parties
Deltus may disclose personal data, where reasonably necessary and permitted, to:
-government agencies, regulators, courts, law-enforcement bodies and other lawful authorities;-banks, payment providers, insurers, auditors, lawyers, tax advisers, valuers, technology specialists and other professional advisers;-cloud, hosting, software, communication, cybersecurity, document-management, analytics and other service providers processing data for Deltus;-counterparties, corporate officers, shareholders, employers or authorised representatives connected with the requested service;-an actual or proposed purchaser, investor, successor or professional adviser in connection with a restructuring, transfer or sale of all or part of Deltus, subject to appropriate safeguards; and-any other party where you have authorised disclosure or where disclosure is otherwise permitted or required.
8. Service providers and data intermediaries
Deltus may engage service providers to process personal data on our behalf. We take reasonable steps to select suitable providers and to impose appropriate confidentiality, security and data-protection requirements having regard to the nature of the service and information involved.
9. Overseas transfers
Some service providers or systems may store or process information outside Singapore. Where personal data is transferred overseas, Deltus will take steps required under the PDPA to ensure that the transferred data receives a standard of protection comparable to that under the PDPA, unless an applicable exception applies.
10. Use of technology, automation and artificial intelligence
Deltus may use approved accounting, cloud, data-analysis, automation or artificial-intelligence tools to support selected activities such as organising information, preparing working drafts, identifying exceptions, analysing data and improving reporting workflows.Technology-assisted outputs are treated as working material and remain subject to appropriate source verification and professional review. Deltus does not intend to place confidential, commercially sensitive or personal information into an unapproved public AI service. Where appropriate, information may be minimised, redacted, anonymised or replaced with non-identifying data before an approved tool is used.Where a proposed use of technology could materially affect confidentiality, data handling or the agreed scope, Deltus will address the matter with the client where appropriate.
11. Cookies and website analytics
The Website may use essential cookies and similar technologies needed for security, operation, preferences, forms or basic analytics. Third-party services embedded in the Website may also set cookies in accordance with their own policies.You may adjust your browser settings to block or delete cookies. Some Website features may not function correctly if essential cookies are disabled. Deltus should update this section and deploy an appropriate cookie notice if non-essential analytics, advertising or tracking tools are added.
12. Marketing communications
Deltus will not use personal contact information for electronic marketing unless there is an appropriate basis under applicable law. Where consent is relied upon, you may withdraw it at any time by contacting us or using an unsubscribe method provided in the communication.Operational messages about an enquiry, accepted engagement, filing, payment, security matter or legal obligation are not marketing communications.
13. Accuracy
Deltus takes reasonable steps to ensure that personal data used or disclosed is accurate and complete where it is likely to affect you or another person materially. Please notify us if relevant information changes or appears incorrect.
14. Protection and security
Deltus uses reasonable administrative, physical and technical safeguards appropriate to the nature of the information and the risks involved. These may include access controls, strong authentication, secure storage, backups, malware protection, vendor controls, staff awareness and secure disposal.No method of electronic transmission or storage is completely secure. You should use approved channels and avoid sending passwords, one-time passwords or unnecessary sensitive information through ordinary email or website forms.
15. Retention
Deltus retains personal data only for as long as it is reasonably required for business, legal, regulatory, professional, evidential or security purposes. Retention periods may differ according to the type of record and applicable obligations.When personal data is no longer required, Deltus will take reasonable steps to delete, anonymise or securely dispose of it, subject to lawful retention requirements, backups and technical limitations.
16. Access, correction and withdrawal of consent
Subject to the PDPA and applicable exceptions, you may request access to personal data Deltus holds about you and information about how it was used or disclosed, or request correction of an error or omission.You may also withdraw consent for future collection, use or disclosure for a stated purpose by giving reasonable notice. Withdrawal may affect Deltus’ ability to respond to an enquiry or provide services, and does not affect processing already lawfully carried out or processing required or permitted without consent.Deltus may need to verify your identity and obtain sufficient information before processing a request. A reasonable fee may apply to an access request where permitted, and Deltus will inform you in advance where applicable.
17. Data breaches
Deltus will assess suspected personal-data breaches and take appropriate containment, investigation and remedial steps. Where a breach is notifiable under the PDPA, Deltus will notify the Personal Data Protection Commission and affected individuals as required.
18. Third-party websites
The Website may contain links to websites or services operated by others. Deltus is not responsible for their privacy practices. You should review the relevant third-party privacy notices before providing personal data.
19. Changes to this Policy
Deltus may update this Privacy Policy to reflect changes in law, services, systems or practices. The latest version will be published on the Website with a revised effective date.
20. Data Protection Contact
Data-protection enquiries, requests or concerns may be sent to:
Data Protection Officer / Data Protection ContactDeltus Corporate Services Pte. Ltd.Email: admin@deltuscorp.comWhatsApp: +65 8892 3245