DATA PROTECTION AND PRIVACY

DATA PROTECTION AND PRIVACY

This Privacy Policy outlines how NSC & Associates Pac manages your personal data in accordance with the Personal Data Protection Act 2012 (the “Act”). 

1.   PERSONAL DATA

1.1. As used in this Data Protection Policy, “personal data” means data to any information about you from which you can be identified either (a) from that data; or (b) from that data and other information to which we have or are likely to have access.

1.2. Personal data that we collect from job applicants include, but is not limited to, name, NRIC number, contact details (including address, telephone number, and e-mail address), academic qualifications (for job applications), employment history, and other information relating to you which you have provided to us in any forms you may have submitted to us, or in other forms of interaction or identification with you.

1.3. Personal data that we collect from employees/contractors include, but is not limited to, information essential for our business use and to facilitate necessary employment processes, such as those mandated by law or other requirements. These purposes shall be elaborated further within our internal Data Protection Policies should you require further information.

1.4. Personal data that we collect from visitors include, but is not limited to, video and images of individuals from security CCTV operations, information as provided during the planning of your visit, and any other information relating to you which you have provided to us in any forms you may have submitted to us, or in other forms of interaction or identification with you.

2.   PURPOSES FOR THE COLLECTION, USE AND DISCLOSURE

2.1  Personal information and data may be collected, used or disclosed to third parties where necessary to provide, operate and administer NSC & Associates Pac’s projects, jobs, products, or services, and to process job applications, recruitment, and selection. (Hereinafter collectively referred to as the “Purposes”).

2.2  For job applicants, we may collect personal data for recruitment, background check, and identity verification purposes. Whereas for employees, the purpose of collection will be stated in “Data Protection Notice for Employees and Contractors”, and “NSC-DPP-02 Data Protection Policy for Employees and Contractors”.

2.3  For visitors, we may collect personal data for verification of identity and security purposes.

2.4  Should there be any need to use your personal information and data for any other purposes, NSC & Associates Pac will notify you and obtain prior permission and consent.

2.5  By providing personal data relating to a third party (e.g. spouse, children, parents, guardians, referees and/or employees), the individual shall represent and warrant that prior consent is obtained from such third party for the collection, use or disclosure of personal data.

2.6  We may share your Personal Data with carefully selected third‑party campaign partners, vendors and relevant authorities (in Singapore or elsewhere) to deliver promotions, rewards and tailored products or services on our behalf; all recipients must keep your data confidential, use it solely for the agreed purposes, implement security measures in compliance with the PDPA, and shall not sell your Personal Data under any circumstances.

2.7  We may collect, use and disclose your personal data pursuant to an exception under the Personal Data Protection Act or as required/authorised under any other written law.

2.8  By providing us with your personal information and data or by accessing or viewing the website, it is deemed that you have agreed to each and all the terms, conditions and notices stated in this policy.

3.   CONSEQUENCES OF NOT CONSENTING AND/OR PROVIDING PERSONAL DATA NECESSARY FOR TRANSACTION/SERVICE/APPLICATION

3.1  Please note that should you not consent and provide us with the relevant personal data to fulfil the “Purposes” of collection, use and disclosure of your personal data by NSC & Associates Pac, it may hinder our ability to continue to interact with you.

3.2  For Job applicants: We may not be able to make a decision on your suitability for recruitment and employment or comply with the law and therefore, we may not be able to make an offer of employment.

3.3  For NSC & Associates Pac Employees and Visitors: We may not be able to fulfil the Purposes listed in the Personal Data Protection Policy and Data Inventory Map.

4.   WITHDRAWAL OF CONSENT

4.1  The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you in writing.  If you wish to withdraw your consent to any use or disclosure of your Personal Data as set out in this Data Protection Policy, you may write to our Data Protection Officer at [dpo@nscms.com.sg].

4.2  Please understand that your withdrawal of consent for all of the purposes necessary for NSC & Associates Pac to fulfil our contractual duties towards you, or facilitating your request, or providing our services to you may carry consequences. We will review and inform you on the consequences of the withdrawal prior to processing your request.

4.3  Please note that withdrawing consent does not affect our right to continue to collect, use and disclose personal data pursuant to an exception under the PDPA or as required/authorised under any other written law.

5.   HOW WE PROTECT YOUR INFORMATION

5.1  We are committed to maintaining the security of personal information according to the Personal Data Protection Act.  We have implemented appropriate information security and technical measures to safeguard your personal information such as the misuse; destruction; unauthorised alteration/modification, access, disclosure; or similar risks to minimise the risk of brute force attacks on our website.

6.   TRANSFER OF DATA

6.1  Where applicable, your Personal Data may be stored in external servers located overseas. In addition, as described above, in the course of our business operation needs, we may be required, from time to time, to transfer your Personal Data with and between our related corporations and/or organisations and their affiliates, and third-party service providers, some of which may be located in countries outside of Singapore. The personal data transfer will be in accordance with requirements prescribed under the PDPA or applicable data protection law to ensure that organization provide a standard of protection to personal data.

7.   DATA BREACH NOTIFICATION

7.1  While there may be occurrences in the future where personal data could be compromised, we will do our utmost to assess the situation. Once the data breach is deemed to be notifiable, the affected individuals and/or the Commission shall be provided with the required notification.

8.   HOW WE RETAIN YOUR PERSONAL DATA

8.1  We have a documented retention period of the personal data you provide us.  We will not retain any of your personal data when it is no longer needed for any business or legal purposes.

8.2  We will dispose of or destroy such documents containing your personal data in a proper and secure manner when the retention limit is reached.

9.   ACCESS TO YOUR INFORMATION AND UPDATING AND CORRECTING YOUR INFORMATION

9.1  You have the right to request a copy of your personal information under our possession, please contact us at the email address found on this website. Please note that we may charge a reasonable fee for processing your request. Such a fee depends on the nature and complexity of your access request.

9.2  We want to ensure that your personal information is accurate and up to date. If any of the information you have provided to NSC & Associates Pac changes, for example, if you change your name, email address or payment details, please update us with the correct information by sending an email to [dpo@nscms.com.sg]. You may make a correction request through the same email, we will correct the data as soon as possible, or within 30 days from the date we receive your request.

10.   NON-DISCLOSURE

10.1              We do not sell, trade, or otherwise transfer to third parties your personally identifiable information. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, as long as these parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours and others’ rights, property or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising or other uses.

11. REVIEW AND CHANGES TO PRIVACY POLICY

11.1              We keep our privacy policy under regular review. If we change our privacy policy, we will post the changes on this page, and place notices on other pages of our website, so that you may be aware of the information we collect and how we use it at all times. This privacy policy was revised and updated on 08/08/2025.

12. HOW TO CONTACT US

12.1              We welcome your views about our website and our privacy policy. If you have any questions about this privacy policy or any concern you have relating to how we manage your personal data, please contact our Data Protection Officer (DPO) at [dpo@nscms.com.sg].