What personal data do we collect and process about you?
Our business ambition is to provide our members and/or other users with an efficient, tailored and unique experience. When using our Services we collect and process the following personal data (including, where applicable, sensitive personal data) about you. Information is either collected directly from you or is automatically collected through your use of the Services, including but not limited to your:
- identity information—name, address, gender, date of birth, personal contact details (including email address and telephone number), access to your calendar and/or itinerary and, if provided by you, photograph images.
This information includes details you provide to us when you register as a member, update your profile or preferences, subscribe to or use any of our Services, search for a Service within the App, make in-App purchases or share data via our Service’s social media function, or contact us to report a problem with one of the Services. When it is mandatory to provide certain data, including reporting a problem with our Services, failure to provide the requisite data will result in our inability to respond to your enquiry;
- technical information—which will include the IP address, browser type and version, time zone setting, browser plugin types and versions, operating system and platform, and when using a mobile device the type of mobile device you use, unique mobile device identifiers (such as, IP address, IMEI number, the address of the device's wireless network interface, or mobile phone number used by the device), mobile network information, your mobile operating system, and time-zone settings;
- location information—geo-location data to determine your current location;
- background information—details about your interests and preferences, information about your family, friends and your travel/dining companions, and any feedback, questions or recommendations you provide, and details of other membership schemes you subscribe to such as frequent flyer numbers and loyalty scheme numbers; and
- special categories of personal data—details you provide us with your explicit consent, such as food allergies and health data.
We may receive information about you from other sources such as:
- our partners (who are organisations such as hotels, restaurants and luxury goods providers with whom we have a business relationship and whom we engage to fulfil the Services provided to you);
- our enterprise clients (who are organisations with whom you have an existing relationship with and who may have referred our Services to you, for example, your bank);
- through data gathered from your publicly-searchable social media and online activities, and your preferences through your use of our Services; and
- from our third party service providers. These are organisations who provide services to us, so that we can deliver our Services to you, and may include our sub-contractors in technical, payment and delivery services, advertising networks, analytics providers and search information providers.
Any information we collect may be combined with other information we collect from you.
If you provide us with information about other people (such as family members, friends and your chosen supplementary members), you confirm that you have their consent to provide us with that information.
In order to use our Services, you must provide us with the information requested on the member registration pages (except those preferences marked as voluntary), otherwise, we will not be able to process your membership application or provide the full range of functionality of our Services. You are able to set and disable certain in-App permissions via your device settings.Our App does not recognise browser or device-level do-not-track requests.
2. How will your personal data be used?
Your personal data will be used by us in connection with the following purposes:
For the performance of our agreement with you:
- to provide the Services, including allowing us to make recommendations and reservations at restaurants and bars compatible with your dining and wine preferences and where you are staying, make recommendations and purchases and facilitate delivery of selected luxury products. The App may also (if enabled) allow you to communicate with other members of the App;
- to provide you with access to the content accessible through our Services;
- to communicate with you and provide you with information about the Services, and inform you of any changes to the Services;
- to monitor your use of the Services, in order for us to better understand your preferences and manage your relationship with us; and
- to respond to any queries or complaints that you raise.
For our legitimate commercial interests, in order:
- to review the Services we provide to you, and carry out analytics and report on our engagement with you;
- to confirm, update and improve our membership records to maintain a quality, accurate and rich database;
- to operate, evaluate and improve our Services and overall business (including by means of analysing your use of the Services, which information we use to improve our Services and to give you a better user experience (e.g., we analyse what web pages you visit, which Services you use and like, how you use these Services, which enables us to create personal profiles and to assess what may be interesting to you, which recommendations we can give you when you use our Services (such based for example on your previous use of our Services)). Creating such personal profiles of our members and other users also enables us to send you marketing materials that directly relate to your use of our products and Services, if you have chosen to receive such materials;
- to generate aggregated statistics about the users of our Services;
- to facilitate our business operations, to operate company policies and procedures;
- to enable us to merge, sell, acquire, or transfer assets; and
- for other legitimate business purposes permitted by applicable law.
For use of information based on your consent, so that we can:
- keep you updated about our Services, and the services provided by our partners, including tailored and customised content based on the information that we collect from you and direct marketing communications (see above); and
To comply with legal obligations to which we are subject:
- if we are obliged to disclose information by reason of any law, regulation or court order and/or to protect our interests and legal rights.
In order to ensure the content displayed through our Services is specifically customised for you, we will carry out profiling using automated processing to evaluate, analyse and predict your preferences, personality type and interests. We will use personal data collected from you directly, or through the use of the Services to complete automated profiling in order to communicate and highlight the types of Services which may be of interest to you, relative to your previous choices and current location. Automated profiling is a critical feature of the Services, and is necessary in order for us to deliver the Services to you and provide you with tailored Services.
3. Who will have access to your personal data?
In order to provide you with a seamless experience, we will share your personal data with the following persons:
- our enterprise clients: for the purpose of improving their existing relationship with you;
- entities who may or do acquire any rights in us: for the purpose of a business sale or re-organisation;
- our advisors, which includes our accountants, auditors, lawyers, other professional advisors and business contacts: for the purpose of assisting us to better manage, support or develop our business and comply with our legal and regulatory obligations;
- third party service providers: who need to know the information in order to provide us with services so that we might provide the Services to you. This may include our third-party service providers who process information on our behalf to help run some of our internal business operations including email distribution, data storage, provide information technology and marketing services, customer services and for data analytics;
4. Where will we store your personal data?
The data we collect from you will be transferred to, and stored at, locations in and outside of Singapore, and so may be transferred to and stored outside of, your country of residence. It will also be processed by our personnel and the employees of our partners, clients and third-party service providers, who operate outside of Singapore. These persons may also be engaged in order to provide the Services to you, including fulfilling requests, confirming reservations or processing your payment details. Your personal data will only be transferred to locations outside of Singapore where we are satisfied that adequate levels of protection equivalent to those in Singapore are in place to protect any personal data held in that location.
5. How do we keep your personal data secure?
We take your data security very seriously.We have reasonable technical and organisational security measures in place and invest appropriate resources to protect your personal data from deliberate or accidental manipulation, destruction, loss, misuse, unauthorised access, disclosure, copying and modification. We take reasonable steps to ensure that our systems, and those of our affiliates, partners, clients and third-party service providers, are appropriately secure for processing your personal data and that the risks of your personal data being unlawfully used, amended, deleted, lost or stolen are minimised. We ensure that we have in place appropriate contractual agreements with third parties to ensure adequate safeguards are in place and that such third parties will act at all times in compliance with applicable personal data protection laws.
Retention of Personal Data
6. Do Not Call (DNC) Provisions
The DNC provisions in the PDPA came into effect in 2014. We will ensure that we do not send you any marketing messages or make any marketing calls if you have registered your Singapore telephone number with the respective DNC registries, unless we are allowed to do so under DNC provisions, or other applicable laws and regulations. Do also note that if you have given us consent to send you marketing messages to your Singapore telephone number, we may continue to do so until you withdraw your consent.
8. Withdrawal of Consent
Should you wish to withdraw your consent for our use of your Personal Data, you may do so in the following ways:To unsubscribe from our electronic mailing list, follow the unsubscribe instructions in our emails or other electronic marketing materials; orIf you have an online subscription or membership account with us, you may access your account(s) with us to change your settings; orFor any other queries regarding our handling of your personal data, you may contact our Data Protection Officer at DPO@kaddra.com.Do note that the withdrawal of consent is subject to all applicable laws and applicable terms and conditions.
Your rights, further information and to contact us
To make these requests, or if you have any questions or complaints about how we handle your personal data , or would like us to update the data we maintain about you and your preferences, please contact our Data Protection Officer by emailing DPO@kaddra.com.