DATA PROTECTION POLICY

Livestar Pte Ltd

Effective Date: 18 May 2024

1. Introduction

Livestar Pte Ltd ("the Company," "we," "us," or "our") is committed to ensuring the privacy and protection of personal data in accordance with the Personal Data Protection Act 2012 (No. 26 of 2012) ("PDPA") and other applicable data protection laws of Singapore. This Data Protection Policy ("Policy") sets out the manner in which we collect, use, disclose, and protect personal data, and describes the rights of individuals with respect to their personal data held by us. By interacting with us, you agree to the terms set out in this Policy.

2. Purpose of this Policy

This Policy outlines the principles and practices by which we ensure that personal data is handled responsibly, with due regard to the rights and freedoms of individuals. Our objective is to safeguard personal data in compliance with the PDPA and to maintain the trust of our customers, employees, business partners, and other stakeholders.

3. Scope of Application

This Policy applies to all employees, agents, contractors, consultants, third-party service providers, and any other parties who may access or handle personal data in connection with their duties for or on behalf of Livestar Pte Ltd. It covers personal data collected via various channels, including but not limited to our online platforms, physical locations, and interactions with our employees and contractors.

4. Definition of Personal Data

"Personal data" refers to any data, whether true or not, that can be used to identify an individual, and includes information such as:

- Full name

- Identification numbers (e.g., NRIC, passport number)

- Contact information (e.g., email address, phone number, postal address)

- Financial information (e.g., credit card details, billing address)

- Purchase history and transaction records

- Employment details (for employees or job applicants)

- Any other data that can identify an individual either on its own or in combination with other data.

5. Collection of Personal Data

We collect personal data in various ways, including:

- Direct Interactions: Personal data provided when customers make inquiries, submit feedback, purchase goods or services, or engage with our representatives.

- Online Platforms: Data collected through our website, mobile apps, and other online services, such as browsing data, IP addresses, cookies, and similar tracking technologies.

- Employment Records: Personal data collected in relation to recruitment, employment, and employee management.

- Marketing and Surveys: Data collected through promotional campaigns, surveys, contests, and events.

We shall only collect personal data that is necessary and relevant to the purposes for which it is being collected.

6. Use of Personal Data

The personal data we collect may be used for the following purposes:

- Provision of Services: To process orders, manage customer accounts, provide customer support, and deliver goods or services.

- Marketing and Communications: To send marketing communications, promotional materials, newsletters, event invitations, and other information that may be of interest to you, subject to your consent where required.

- Business Operations: To manage relationships with employees, contractors, business partners, and service providers.

- Legal and Regulatory Compliance: To comply with applicable laws, regulations, and legal obligations, including responding to lawful requests from public authorities.

- Operational Efficiency: To improve our services, respond to customer feedback, and enhance our business operations.

In the event we use personal data for purposes beyond those stated above, we will seek your consent where required by law.

7. Disclosure of Personal Data

We may disclose personal data to third parties in the following circumstances:

- With Consent: Where we have obtained your consent to share your personal data with third parties for specified purposes.

- Service Providers: To third-party vendors, contractors, and agents who provide services to us, such as payment processors, IT service providers, logistics providers, and other operational services. These third parties are bound by confidentiality agreements and are restricted in their use of personal data.

- Legal Obligations: To comply with any applicable law, regulation, legal process, or governmental request, or where necessary for the protection of our legal rights, property, or safety, and that of our customers or others.

- Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business or assets, personal data may be transferred as part of that transaction.

We do not sell or rent your personal data to third parties for marketing purposes without your consent.

8. Security of Personal Data

We take reasonable and appropriate steps to protect the personal data we hold from unauthorized access, disclosure, alteration, or destruction, including:

- Physical Security: Secure storage of physical records in restricted access areas.

- Technical Security: Encryption, firewalls, and secure servers to protect electronic data.

- Organizational Security: Access control measures, including user authentication, role-based access to data, and employee training on data protection protocols.

Despite these measures, no security system is 100% secure. We cannot guarantee the absolute security of personal data transmitted over the internet or other communication channels.

9. Retention of Personal Data

We will retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable laws or contractual obligations. Once the data is no longer necessary, we will take reasonable steps to securely delete or anonymize it in accordance with our internal data retention policies.

10. Access and Correction of Personal Data

Under the PDPA, individuals have the right to request access to their personal data held by us, and to request corrections if the data is inaccurate, incomplete, or outdated. To make such requests, individuals should contact our Data Protection Officer (DPO) in writing at the contact details provided below.

We will respond to access and correction requests within 30 days of receipt, unless an extension is required for legitimate reasons.

11. Data Protection Officer (DPO)

Livestar Pte Ltd has appointed a Data Protection Officer ("DPO") to oversee our compliance with the PDPA and this Policy. The DPO can be contacted at:

- Email: customer@livestargroup.com

- Address: 63 Boat Quay Singapore 049851

12. Employee Responsibilities

All employees of Livestar Pte Ltd are required to:

- Understand and comply with this Policy and any related procedures.

- Ensure that personal data is handled securely and confidentially at all times.

- Immediately report any data breach or suspected breach to the DPO.

- Access and use personal data only as necessary for the performance of their duties and with appropriate authorization.

13. Review of Policy

This Policy will be reviewed periodically and updated as necessary to ensure continued compliance with the PDPA and other applicable laws. Any changes to this Policy will be communicated to stakeholders and will take effect upon publication.

14. Governing Law

This Policy shall be governed by and construed in accordance with the laws of Singapore. Any disputes arising from or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Singapore.

Livestar Pte Ltd is committed to maintaining the confidentiality and security of personal data, and we strive to comply with the highest standards of data protection under Singapore law. Should you have any concerns or questions regarding this Policy or our data protection practices, please contact our Data Protection Officer.