Introduction
Singapore Commercial Credit Bureau (SCCB) values your privacy and is committed to protecting your personal data in compliance with the Personal Data Protection Act 2012 (PDPA). This policy briefly outlines how we collect, use, disclose, and safeguard your personal data in the course of providing corporate credit information services.
Collection and Use of Personal Data
We collect personal data only when it is necessary for legitimate business purposes, including:
- Conducting credit risk assessments;
- Delivering our services to corporate customers;
- Administering and managing accounts, transactions, and communications with our clients.
We rely on consent from individuals or lawful exceptions under the PDPA to process personal data. We ensure that the data collected is limited to what is necessary for the intended purpose.
Purpose Limitation
We will only collect, use, or disclose personal data for purposes for which we have obtained consent, or as required by law. Personal data will not be used in ways that would be deemed unreasonable or inappropriate by a reasonable person.
Disclosure of Personal Data
SCCB does not disclose personal data to third parties without obtaining consent unless such disclosure is necessary to comply with legal obligations or to fulfill legitimate business needs (e.g., with service providers, auditors, etc.).
Retention of Personal Data
We retain personal data as long as it is necessary to fulfill the purpose for which it was collected or to comply with legal, regulatory, and business requirements.
Protection of Personal Data
We take appropriate security measures to protect personal data from unauthorized access, collection, use, disclosure, or similar risks. This includes implementing administrative, physical, and technical safeguards in line with industry standards to maintain the integrity and confidentiality of personal data.
Access and Correction
You have the right to request access to and correction of your personal data in our records, subject to exceptions allowed by law. We may require verification of your identity before processing such requests to ensure data security.
Data Breach Notification
In the event of a data breach, SCCB will promptly assess the risk and notify affected individuals and the relevant authorities, as required by law. We are committed to minimizing any potential impact and will take corrective actions where necessary.
International Data Transfers
Where personal data is transferred outside Singapore, SCCB ensures that the receiving entity provides a standard of protection comparable to the PDPA or that we have received your explicit consent for such transfers.
Updates to this Policy
This policy will be reviewed regularly and updated as necessary to ensure ongoing compliance with legal requirements and best practices. Any changes will be posted on our website.
Contact Us
For any queries regarding this privacy policy, or if you wish to exercise your rights under the PDPA, please contact our Data Protection Officers at:
Please ensure that all emails are cc'd to csc@sccb.com.sg, which can be used for general queries as well.