{"id":46703,"date":"2026-10-14T14:48:16","date_gmt":"2026-10-14T05:48:16","guid":{"rendered":"https:\/\/www.bbix.net\/?page_id=46703"},"modified":"2026-10-14T14:48:16","modified_gmt":"2026-10-14T05:48:16","slug":"sg","status":"publish","type":"page","link":"https:\/\/www.bbix.net\/en\/privacy_b\/sg\/","title":{"rendered":"Privacy Policy (for Singaproe)"},"content":{"rendered":"
\r\n
\r\n
\r\n

Privacy Policy<\/h2>\r\n

BBIX SINGAPORE PTE. LTD <\/p>\r\n\r\n

1.About This Policy and Its Scope<\/h4>\r\n

BBIX SINGAPORE PTE. LTD. (UEN: 201332707Z) (\u201cBBIX Singapore\u201d, \u201cwe\u201d, \u201cus\u201d or \u201cour\u201d) is committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2012 of Singapore (the \u201cPDPA\u201d), its subsidiary legislation, and applicable guidance issued by the Personal Data Protection Commission (the \u201cPDPC\u201d).
\r\nThis Privacy Policy explains how we collect, use, disclose, transfer, protect, retain and otherwise process personal data relating to customers and prospective customers, representatives of business partners and suppliers, website and office visitors, event participants, and other individuals who interact with us. Separate notices may apply to employees, contractors and job applicants.
\r\n\u201cPersonal data\u201d has the meaning given in the PDPA, namely data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access, including, for example, name, identification numbers, date of birth and contact information. The PDPA generally excludes business contact information from its data protection provisions; however, we will continue to handle such information responsibly and in accordance with this Policy where appropriate. \u201cBusiness contact information\u201d has the meaning given in the PDPA and includes an individual\u2019s name, position or title, business telephone number, business address, business email address and similar information, where such information is not provided solely for personal purposes.<\/p>\r\n
\r\n

2.Personal Data We May Collect<\/h4>\r\n

Depending on how you interact with us, we may collect the following categories of personal data:
\r\n\u2022 identity and contact information, such as name, postal address, email address, telephone number and signature;
\r\n\u2022 professional and organisational information, such as employer, department, position, authority and business contact details;
\r\n\u2022 contract, billing and transaction information, such as customer or vendor records, purchase orders, invoices and payment-related information;
\r\n\u2022 service and support information, such as service subscriptions, account identifiers, support tickets, communications and service usage records;
\r\n\u2022 technical and security information, such as IP address, device and browser information, authentication records, system and network logs, and security alerts;
\r\n\u2022 office and facility security information, such as visitor registration, access-card records and CCTV images, where applicable;
\r\n\u2022 communications preferences, event registration information and feedback; and
\r\n\u2022 any other personal data that you provide to us or that we are authorised or required by law to collect. <\/p>\r\n
\r\n

3.How We Collect Personal Data<\/h4>\r\n

We may collect personal data:
\r\n\u2022 directly from you, including through contracts, forms, emails, telephone calls, meetings, support channels, events and our websites;
\r\n\u2022 automatically through systems, networks, devices, logs, cookies and similar technologies;
\r\n\u2022 from your employer or another organisation that you represent or that provides services to us;
\r\n\u2022 from BBIX group companies, service providers, professional advisers, business partners and other third parties; and
\r\n\u2022 from public or commercially available sources, where permitted by law.<\/p>\r\n
\r\n

4.Purposes for Which We Process Personal Data<\/h4>\r\n

We may collect, use and disclose personal data for purposes including:
\r\n\u2022 providing, operating, supporting, maintaining and improving our network, connectivity and related services;
\r\n\u2022 managing customer, supplier and business-partner relationships, including onboarding, contracting, service delivery, billing, settlement and account administration;
\r\n\u2022 responding to enquiries, requests, complaints and technical-support matters;
\r\n\u2022 monitoring service performance, capacity, availability, quality and customer experience;
\r\n\u2022 protecting our systems, networks, premises, personnel, customers, rights and property, including detecting, preventing and investigating fraud, misuse, security incidents and unlawful activity;
\r\n\u2022 conducting audits, risk management, business continuity, disaster recovery, compliance and internal governance activities;
\r\n\u2022 complying with legal, regulatory, tax, accounting, reporting and law-enforcement requirements, and establishing, exercising or defending legal claims;
\r\n\u2022 communicating service notices, operational updates and other information that is necessary for the provision, operation or administration of our services or your contract with us;
\r\n\u2022 using business contact information provided in a professional or business context to communicate with representatives of customers, prospective customers, business partners and other organisations about our services, events and business opportunities relevant to their organisation or professional role, as described in Section 7;
\r\n\u2022 conducting analytics, business planning, product development and service improvement in accordance with the PDPA; and
\r\n\u2022 any other purpose (excluding marketing communications) that we notify to you and, where required, obtain your consent for. The purposes described above may continue to apply after your relationship with us (for example, pursuant to a contract) has ended or changed in any way, for a reasonable period thereafter, including, where applicable, a period to enable us to enforce our rights under any contract with you or to comply with applicable legal and regulatory requirements.<\/p>\r\n
\r\n

5.Consent and Other Permitted Bases<\/h4>\r\n

We will notify you of the purposes for which personal data is collected, used or disclosed on or before the relevant collection, use or disclosure, unless an exception under the PDPA or another written law applies. We will obtain your consent where required.
\r\nConsent may be express or deemed in accordance with the PDPA. We will not rely on deemed consent by notification unless the statutory conditions are met, including conducting the required assessment, implementing reasonable measures to address likely adverse effects, providing appropriate notice and a reasonable opt-out period, and maintaining the necessary records.
\r\nWhere permitted, we may collect, use or disclose personal data without consent under an applicable exception, including where necessary for legitimate interests, business improvement, contractual necessity, investigations, debt recovery, emergencies, legal compliance or other purposes authorised by law. We will complete any required assessment and safeguards before relying on such an exception.
\r\nYou may withdraw consent by giving us reasonable notice in writing (including by email) through the contact details in Section 15. We will inform you of the likely consequences of withdrawal and, unless collection, use or disclosure is required or authorised by law, will cease the relevant processing as soon as reasonably practicable. In general, we will seek to process a withdrawal request within ten (10) business days of receiving it, although a longer period may be required depending on the complexity of the request and its impact on our relationship with you. Withdrawal may affect our ability to provide some services or fulfil a request. Information concerning transfers to BBIX, Inc. in Japan is set out in Section 8.<\/p>\r\n
\r\n

6.Disclosure and Data Intermediaries<\/h4>\r\n

We may disclose personal data, where permitted and for the purposes described in this Policy, to:
\r\n\u2022 BBIX, Inc., our parent company in Japan, and other BBIX group companies and related corporations, including entities located outside Singapore;
\r\n\u2022 cloud, hosting, data-centre, telecommunications, IT, security, support, billing, payment, logistics and other service providers acting as data intermediaries or independent organisations;
\r\n\u2022 professional advisers, auditors, insurers and financial institutions;
\r\n\u2022 regulators, government agencies, law-enforcement authorities, courts and other persons where required or authorised by law;
\r\n\u2022 a prospective or actual purchaser, investor, lender, successor or transaction counterparty in connection with a corporate transaction, subject to appropriate safeguards; and
\r\n\u2022 other persons with your consent or as otherwise permitted by law. Where a service provider processes personal data on our behalf, we will conduct appropriate due diligence and impose written contractual requirements concerning documented instructions, confidentiality, security, use limitation, retention and deletion, sub-processing, cross-border transfers, audit or assurance, access and correction assistance, and prompt incident notification. We remain responsible under the PDPA for personal data processed on our behalf and for our purposes.
\r\nIn particular, we outsource a broad range of corporate, administrative, technical, operational, service-support, security, finance, billing, compliance and other business functions to BBIX, Inc. in Japan. BBIX, Inc. may access and process personal data on our behalf and for our purposes to perform those outsourced functions.
\r\nWhere we act as a data intermediary for another organisation, we will process personal data only on documented instructions and will comply with the obligations that apply directly to data intermediaries under the PDPA, including applicable protection, retention and data-breach notification duties.<\/p>\r\n
\r\n

7.Business- to-Business Communications and Singapore Do Not Call Requirements<\/h4>\r\n

Business- to-business communications.<\/strong> We may use business contact information provided to us in a professional or business context (for example, through the exchange of business cards at events or meetings) to communicate with representatives of customers, prospective customers, business partners and other organisations about our services, events and business opportunities relevant to their organisation or professional role. To the extent that the information we use is business contact information excluded from the data protection provisions of the PDPA, we do not seek prior consent for such communications.
\r\nOther marketing communications. We do not use personal data that is subject to the data protection provisions of the PDPA to send you marketing communications. Should this change, we will update this Policy and, where required under the PDPA, seek your consent before sending you such communications.
\r\nOpting out. You may ask us to stop sending you the communications described in this Section at any time, free of charge, by using the opt-out mechanism in the communication or by contacting us using the details in Section 15, and we will give effect to your request as soon as reasonably practicable and, in any event, within the period required by applicable law.<\/p>\r\n

Do Not Call provisions and Spam Control Act 2007. <\/strong> When sending the communications described in this Section to Singapore telephone numbers, we will comply with the Do Not Call provisions of the PDPA, including checking the applicable registers or obtaining clear and unambiguous consent in evidential form where required, identifying the sender, providing contact information and not concealing calling-line identity. We will also comply with the Spam Control Act 2007 where it applies to unsolicited commercial electronic messages.<\/p>\r\n
\r\n

8.Transfers Outside Singapore<\/h4>\r\n

We transfer personal data to BBIX, Inc., our parent company incorporated in Japan, where reasonably necessary for the outsourced functions described in Section 6. The personal data transferred may include the categories described in Section 2 to the extent relevant to corporate administration, customer and supplier management, service operation and support, information technology, cybersecurity, finance, billing, compliance and related business activities.
\r\nBefore transferring personal data to BBIX, Inc. in Japan, we will take appropriate steps to ascertain and ensure that BBIX, Inc. is bound by legally enforceable obligations to provide the transferred personal data with a standard of protection that is at least comparable to the protection under the PDPA. We will implement and maintain a written intercompany data transfer and processing agreement for this purpose.
\r\nThe intercompany agreement will require BBIX, Inc. to process transferred personal data only for authorised purposes and in accordance with documented instructions; maintain confidentiality and reasonable security arrangements; promptly report actual or suspected data breaches; comply with applicable retention, return and secure-deletion requirements; restrict onward transfers and sub-processing; assist with access, correction, complaints and regulatory enquiries; and provide information or assurance reasonably required for oversight. We will conduct appropriate due diligence and periodic reviews, and maintain records of the transfer purposes, data categories, recipient, destination, safeguards and relevant assessments.
\r\nWe will notify individuals of the relevant purposes for collecting, using and disclosing personal data, including disclosure to and processing by BBIX, Inc. in Japan, as required under the PDPA. We will obtain consent where required for the relevant collection, use or disclosure. We do not intend to rely solely on consent where legally enforceable contractual safeguards are available. If and to the extent that we rely on an individual’s consent as the applicable mechanism for an overseas transfer, we will, before obtaining that consent, provide a reasonable written summary of the extent to which the transferred personal data will be protected to a standard comparable to the PDPA; will not require the consent as a condition of providing a product or service unless the transfer is reasonably necessary to provide that product or service; and will not use false, misleading or deceptive practices to obtain the consent. For transfers to any other recipient outside Singapore, we will use legally enforceable contractual obligations, binding corporate rules, a specified certification, valid consent meeting the applicable statutory conditions, or another transfer mechanism permitted by law, and will maintain appropriate records of material cross-border transfers and related safeguards.<\/p>\r\n
\r\n

9.Accuracy of Personal Data<\/h4>\r\n

We will make reasonable efforts to ensure that personal data collected by or on our behalf is accurate and complete where it is likely to be used to make a decision that affects the individual or disclosed to another organisation. Please contact us if your personal data changes or if you believe it is inaccurate or incomplete.<\/p>\r\n
\r\n

10.Protection of Personal Data<\/h4>\r\n

We will make reasonable security arrangements to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification or disposal, and against the loss of storage media or devices on which personal data is stored.
\r\nOur safeguards may include, as appropriate:
\r\n\u2022 data-governance policies, defined roles and responsibilities, risk assessments and internal oversight;
\r\n\u2022 physical access controls and secure management of offices, data centres, media and equipment;
\r\n\u2022 identity and access management, least-privilege access, multi-factor authentication, encryption, network segmentation, patching, malware protection, backups and secure configuration;
\r\n\u2022 logging, monitoring, vulnerability management, incident response and periodic testing;
\r\n\u2022 personnel confidentiality obligations, background screening where appropriate, and regular training; and
\r\n\u2022 supplier due diligence, written data-protection requirements and ongoing assurance.
\r\nYou should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your personal data and regularly review and enhance our information security measures.<\/p>\r\n
\r\n

11.Retention and Secure Disposal<\/h4>\r\n

We will cease retaining documents containing personal data, or remove the means by which the personal data can be associated with particular individuals, as soon as it is reasonable to assume that the purpose for which the personal data was collected is no longer served by retention and retention is no longer necessary for legal or business purposes.
\r\nRetention periods will be determined by reference to the purpose of processing, contractual and operational needs, legal limitation periods, statutory requirements, security and dispute considerations. Personal data will be securely deleted, destroyed or anonymised when no longerrequired.<\/p>\r\n
\r\n

12.Access, Correction and Other Requests<\/h4>\r\n

Subject to the PDPA and applicable exceptions, you may request access to personal data about you that is in our possession or under our control and information about the ways in which we used or disclosed that personal data during the year preceding the request. You may also request correction of an error or omission in your personal data.
\r\nWe will verify the identity and authority of the requestor. We will respond as soon as reasonably possible and, where we are unable to respond within 30 calendar days after receiving a sufficiently detailed request, we will inform you in writing within that period of the soonest time by which we can respond.
\r\nWe may charge a reasonable fee for an access request and will provide a written estimate before proceeding. We will not charge a fee for a correction request. Where required, we will send corrected data to relevant organisations to which it was disclosed within the preceding year, subject to applicable exceptions.
\r\nWe may refuse or limit a request where permitted or required by law, including where disclosure would reveal another individual\u2019s personal data, threaten safety or security, disclose confidential commercial information, interfere with an investigation, or fall within another statutory exception. Where we are unable to provide access to, or make a correction to, your personal data, we will generally inform you of the reasons, except where we are not required to do so under the PDPA.<\/p>\r\n
\r\n

13.Data Breaches<\/h4>\r\n

If we become aware of a suspected or confirmed data breach, we will take reasonable and expeditious steps to contain and investigate the incident, mitigate potential harm, preserve relevant evidence, assess whether the breach is notifiable and document the assessment.
\r\nFor these purposes, a \u201cdata breach\u201d means (a) the unauthorised access, collection, use, disclosure, copying, modification or disposal of personal data, or (b) the loss of any storage medium or device on which personal data is stored in circumstances where such unauthorised access, collection, use, disclosure, copying, modification or disposal is likely to occur. A data breach is notifiable if it results in, or is likely to result in, significant harm to an affected individual, or is, or is likely to be, of a significant scale (being a breach that affects 500 or more individuals).
\r\nWhere a breach is notifiable, we will notify the PDPC as soon as practicable and no later than three calendar days after determining that the breach is notifiable. Where the breach is likely to result in significant harm to affected individuals, we will notify those individuals as soon as practicable, at the same time as or after notifying the PDPC, unless an exception applies.<\/p>\r\n
\r\n

14.Cookies and Similar Technologies<\/h4>\r\n

Our websites and online services may use cookies, pixels, logs and similar technologies to operate and secure the services, remember preferences, understand usage and improve performance. Further details, including available controls, are set out in our separate Cookie Notice or on the relevant website.<\/p>\r\n
\r\n

15.Data Protection Officer and Contact Details<\/h4>\r\n

You may submit access or correction requests, withdraw consent, or raise a question or complaint using the following details:
\r\nData Protection Officer: Lisa
\r\nOrganisation : BBIX SINGAPORE PTE. LTD. (UEN: 201332707Z)
\r\nRegistered address: 180 Cecil Street, #12-01 Bangkok Bank Building, Singapore 069546
\r\nEmail: privacy@bbix.net<\/a>
\r\nPhone: +65 6027 6853
\r\nWe will investigate and respond to data-protection complaints within a reasonable period. You may also contact the PDPC where appropriate, although the PDPC generally encourages individuals to raise the matter with the organisation first.<\/p>\r\n
\r\n

16.Changes to This Policy<\/h4>\r\n

We may update this Policy from time to time to reflect changes in our practices, services or legal\u3000requirements. We will publish the updated Policy on our website and provide additional notice\u3000where a change is material and such notice is appropriate.

\r\nEffective date: 8 October, 2026
\r\nLast updated: 8 October, 2026
\r\n<\/p>\r\n<\/div><\/div>\r\n <\/article>","protected":false},"excerpt":{"rendered":"Privacy Policy BBIX SINGAPORE PTE. LTD 1.About This Policy and Its Scope BBIX SINGAPORE PTE. LTD. (UEN: 201332707Z) (\u201cBBIX Singapore\u201d, \u201cwe\u201d, \u201cus\u201d or \u201cour\u201d) is committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2012 of Singapore (the \u201cPDPA\u201d), its subsidiary legislation, and applicable guidance issued by the Personal […]","protected":false},"author":3,"featured_media":0,"parent":390,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-46703","page","type-page","status-publish","hentry","en-US"],"_links":{"self":[{"href":"https:\/\/www.bbix.net\/wp-json\/wp\/v2\/pages\/46703","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bbix.net\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bbix.net\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bbix.net\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bbix.net\/wp-json\/wp\/v2\/comments?post=46703"}],"version-history":[{"count":1,"href":"https:\/\/www.bbix.net\/wp-json\/wp\/v2\/pages\/46703\/revisions"}],"predecessor-version":[{"id":46704,"href":"https:\/\/www.bbix.net\/wp-json\/wp\/v2\/pages\/46703\/revisions\/46704"}],"up":[{"embeddable":true,"href":"https:\/\/www.bbix.net\/wp-json\/wp\/v2\/pages\/390"}],"wp:attachment":[{"href":"https:\/\/www.bbix.net\/wp-json\/wp\/v2\/media?parent=46703"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}