1. Privacy Notice
1.1
Ingold Capital Pte. Ltd. (to be referred as “INGOLD CAPITAL”), the collective investment vehicles and client accounts which are managed or advised by INGOLD CAPITAL may obtain personal data about you. For the purposes of data protection law, we are a user or controller in respect of your personal data. We are responsible for ensuring that we use your personal data in compliance with applicable data protection law.
1.2
INGOLD CAPITAL respects your concerns about privacy and is committed to protecting the privacy of all personal data obtained.
1.3
This Privacy Statement explains: (i) the personal data we process; (ii) how that information is processed; (iii) with whom we may share it; and (iv) the rights available to you.
1.4
This Privacy Statement concerns the information we collect through your use of our website www.ingoldcapital.com (the “Website”), when you contact or request information from us, when you engage us for services and personal data we handle in the course of carrying on our commercial activities, including personal data of officers or representatives of organizations with which we have a business relationship.
1.5
As referenced in this Privacy Notice:
“personal data” generally means any data which relates to a living individual who can be identified from that data or from that data and other information which is in the possession of, or is likely to come into the possession of, INGOLD CAPITAL (or its representatives or its service providers). In addition to factual information, it may also include any expression of opinion about an individual and any indication of the intentions of INGOLD CAPITAL or any other person in respect of such individual; and “process” includes any operation that is carried out in respect of personal data, including but not limited to, collecting, using, storing, disclosing or otherwise processing personal data.
2. Personal data that we collect about you
2.1
INGOLD CAPITAL may collect and process the following personal data about you:
a) Information that you provide to us or one of our affiliates.
This includes information about you that you give to us by communicating with us or whether by e-mail or otherwise. The nature of our relationship and the services you are requesting will determine the kind of personal data we might collect and use. This information may include (but is not limited to):
i. basic personal data (such as your name, date of birth, national insurance number, social security number, address, telephone number(s), e-mail address, occupation and job title);
ii. financial information (such as information relating to your financial health and details of your investments); and
iii. any information that you choose to share with us (whether through the Website or otherwise, including IP address, cookie, any comments or other content you submit to us) which may be considered personal data.
b) Information we collect or generate about you. This may include (but is not limited to):
i. information about our business relationships with you and our interactions with you, including any personal data that you provide during telephone and email communications with us which we may monitor and record in order to resolve complaints, improve our service and in order to comply with our legal and regulatory requirements;
ii. when you submit identifiable comments and other content to us, we collect whatever information you supply and use this information to communicate with you if requested, and otherwise fulfil the purpose of the content submission; and
iii. a file with your contact history used for enquiry purposes that we may ensure that you are satisfied with the services we have provided to you.
c) Information we obtain from other sources. This may include (but is not limited to):
i. information from publicly available sources (including third party agencies such as credit reference agencies, fraud prevention agencies, law enforcement agencies and other publicly accessible sources);
ii. information obtained from independent financial advisors (IFAs), other professional advisers, product providers, events organisers, and other agents and/or representatives; and
iii. information obtained from sanctions checking and background screening providers.
3. Purposes
3.1
INGOLD CAPITAL may process your personal data for the following purposes (to the extent applicable):
- to provide, manage or administer the products or services provided to you, including processing transactions;
- to review and improve the information provided on our Website to ensure it is user friendly and to prevent any potential disruptions;
- to manage your account, maintain your personal profile and personalize your experience on our Website;
- to communicate with you when necessary or appropriate in relation to the services being provided to you or the services being provided to us;
- to assess applications or contracts for our products and services, including to ascertain whether you meet the applicable suitability standards imposed by the jurisdiction of your residence and any laws, rules regulations, guidelines, notices or directions that apply to INGOLD CAPITAL, and otherwise ascertain whether we determine that you are suitable to enter into any vendor or service agreement with us;
- to perform analytics (including market research, trend analysis, financial analysis and anonymization of personal data);
- to keep you updated whilst you are a client in relation to the products or services provided to you and to provide you with information or opportunities that we believe may be relevant to you;<
- to manage our business, including to enable third party service providers to provide services on our behalf;
- to administer and maintain IT systems in order to uphold standards of service;
- to monitor IT systems in order to protect against cyber threats or malicious activity including abuse and misuse;
- to conduct our everyday business purposes, which may include compliance with industry standards and policies and/or obligations under applicable law;
- to ensure that we meet our obligations under any applicable laws, rules, regulations, guidelines, notices or directions, including (without limitation):
- in order to establish, exercise or defend our legal rights; and
- to administer and maintain databases storing personal data.
i. verifying compliance with the relevant laws, rules, regulations, guidelines, notices or directions that apply to INGOLD CAPITAL;
ii. any obligations related to tax matters (such as identification, tax reporting and tax audit);
iii. any obligations related to anti-money laundering and countering the financing of terrorism legislation or regulations; and
iv. responding to any mandatory request for information made by a governmental or other regulatory body, any exchange or self-regulatory organization;
3.2
We are entitled to use your personal data in these ways because:
- we need to in order to perform our contractual obligations under the vendor or service agreement which you have entered or are entering into with us, or will be done at your request prior to entering into that agreement and exercise our rights in connection with managing your account and providing the products and services to you;
- we have obtained your consent;
- we have legal and regulatory obligations that we have to discharge;
- we may need to in order to establish, exercise or defend our legal rights or for the purpose of legal proceedings; or
- the use of your personal data as described may be necessary for our legitimate interests (or the legitimate interests of one or more of our affiliates), such as:
i. allowing us to effectively and efficiently administer and manage the operation of our business;
ii. ensuring compliance with all legal and regulatory obligations and industry standards, and preventing fraud;
iii. maintaining compliance with internal policies and procedures; or
iv. ensuring the security of our information systems.
4. Disclosure
4.1
We may share your personal data within the INGOLD CAPITAL and its affiliates for the purposes described above.
4.2
We may also share your personal data with third parties outside of the INGOLD CAPITAL for the following purposes:
- to our business partners who are contractually obliged to comply with appropriate data protection obligations;
- assessing compliance with applicable laws, rules and regulations, as required by law of relevant government or administrative authority and then, to the extent reasonably practicable, only subject to customary undertakings of confidentiality;
- to the extent required by law (for example, if we are under a duty to disclose your personal data in order to comply with any legal obligation), establish, exercise or defend our legal rights or for the purpose of legal proceedings;
- if we sell any of our business or assets, in which case we may disclose your personal data to the prospective buyer for due diligence purposes;
- if we are acquired by a third party, in which case personal data held by us about you will be disclosed to the third party buyer;
- to third party agents and contractors for the purposes of providing services to us, including (but not being limited to) INGOLD CAPITAL’s outside counsel, auditors, professional advisors and IT and communications providers. These third parties will be subject to confidentiality requirements and they will only use your personal data as described in this Privacy Statement; and
- to any organization at your request or any person acting on your behalf (including your agents, advisers, brokers and product providers).
No personal data is shared with unaffiliated third parties for their marketing purposes.
5. International Transfers
5.1
Personal data may be transferred internationally for the purposes described in this Privacy Statement and as otherwise required or permitted by applicable law. The protections which apply to international transfers of personal data are further described in this section, and will apply regardless of the international transfer or processing of such information.
5.2
Transfers Outside the European Economic Area (“EEA”)
Where we are subject to the EU General Data Protection Regulation (or any equivalent data protection legislation) in respect of our processing of your personal data and if we transfer your personal data outside the EEA, we will ensure that it is protected in a manner that is consistent with how your personal data will be protected by us in the EEA. This can be done in a number of ways, for instance where:
- the recipient destination has been subject to a finding from the European Commission that it ensures an adequate level of protection for the rights and freedoms that you possess in respect of your personal data;
- if the recipient is in the United States of America, it is a certified member of the EU-US Privacy Shield scheme; or
- the recipient has signed up to a contract based on “model contractual clauses” approved by the European Commission, obliging them to protect your personal data.
- To the extent that the EU General Data Protection Regulation (or any equivalent data protection legislation) applies to you, you are entitled to request further details of the protection given to your personal data when it is transferred outside its country or jurisdiction of origin.
5.3
Transfers Outside Singapore
Where we are subject to the Singapore Personal Data Protection Act 2012 (No. 26 of 2012) (the “PDPA”) in respect of our processing of your personal data and if we transfer your personal data outside Singapore, we will take all reasonable steps to ensure that:
- the recipient agrees to protect personal data at a standard that is at least comparable to the PDPA in accordance with the PDPA; or
- any other transfer will otherwise be in accordance with the PDPA.
6. Retention
How long we will retain your personal data for will vary and will be determined by the following criteria: (i) the purpose for which we are using it – INGOLD CAPITAL will need to keep the data for as long as is necessary for that purpose; and (ii) to the extent that we are permitted by law to retain it for a longer period of time (in which case we will retain it for the period permitted by law) or to the extent that we may need to in order to establish, exercise or defend our legal rights or for the purpose of legal proceedings.
7. Rights
7.1
To the extent you are entitled to do so under applicable law:
- you have a right to obtain information on, and access to, the personal data that we process about you and to request the correction of any error or inaccuracy in relation to such personal data; and
- you also have the following rights in respect of your personal data:
- the right to withdraw your consent to our processing of your personal data at any time. Please note, however, that we may still be entitled to process your personal data if we can rely on another legal ground for doing so;
- in some circumstances, the right to receive any personal data which we process about you on the basis of your consent (as opposed to any other legal ground) in a structured, commonly used and machine-readable format and/or request that we transmit such data where this is technically feasible. Please note that this right only applies to personal data which you have provided to us;
- the right to request that we rectify your personal data if it is inaccurate or incomplete;
- the right to request that we erase your personal data in certain circumstances. This may include (but is not limited to) circumstances in which:
A. it is no longer necessary for us to retain your personal data for the purposes for which we collected it;
B. we are only entitled to process your personal data with your consent, and you withdraw your consent, and where there is no other legal ground for the processing; or
C. you object to our processing of your personal data for our legitimate interests, and our legitimate interests do not override your own interests, rights and freedom.
Notwithstanding the above, please note that there may be circumstances where you ask us to erase your personal data but we are legally entitled to retain it;
- in some circumstances, the right to request that we restrict our processing of your personal data. This may include (but is not limited to) circumstances in which:
A. you dispute the accuracy of your personal data (but only for the period of time necessary for us to verify its accuracy);
B. we no longer need to use the personal data except for the establishment, exercise or defence of legal claims; or
C. you object to our processing of your personal data for our legitimate interests (but only for the period of time necessary for us to assess whether our legitimate interests override your own interests, rights and freedom).
Notwithstanding the above, please note that there may be circumstances where you object to, or ask us to restrict, our processing of your personal data but we are legally entitled to continue processing your personal data and/or to refuse that request;
- the right not to be subject to a decision based solely on the automated processing of your personal data, where this produces legal effects concerning you or which significantly affects you; and
- the right to lodge a complaint with the data protection regulator in your jurisdiction if you think that any of your rights have been infringed by us.
- ensure the security and confidentiality of your records and information;
- protect against any anticipated threats or hazards to the security or integrity of your records and information; and
- protect against unauthorized access to or use of your records or information that could result in substantial harm or inconvenience to you.
- 您向我们或我们的关联公司提供的信息。
- 我们收集或生成的关于您的信息。这可能包括(但不限于):
- 我们从其他来源获得的信息。这可能包括(但不限于):
- 向您提供、管理或运营产品或服务,包括处理交易;
- 审查和改进我们网站上提供的信息,以确保其用户友好性并防止任何潜在的中断;
- 管理您的帐户、维护您的个人资料并个性化您在我们网站上的体验;
- 在必要或适当时,就向您提供的服务或向我们提供的服务与您沟通;
- 评估您对我们产品和服务的申请或合同,包括确定您是否符合您居住地司法管辖区规定的适用资格标准以及适用于 INGOLD CAPITAL的任何法律、规则、法规、指南、通知或指示,并确定我们是否认为您适合与我们签订任何供应商或服务协议;
- 进行分析(包括市场调研、趋势分析、财务分析和个人数据匿名化);
- 在您作为客户期间,向您提供与所提供产品或服务相关的最新信息,并向您提供我们认为可能与您相关的信息或机会;
- 管理我们的业务,包括授权第三方服务提供商代表我们提供服务;
- 管理和维护IT系统,以维持服务标准;
- 监控IT系统,以防范网络威胁或恶意活动,包括滥用和误用;
- 开展日常业务,其中可能包括遵守行业标准和政策和/或适用法律规定的义务;
- 确保我们履行任何适用法律、规则、法规、指南、通知或指示规定的义务,包括(但不限于):
- 为了确立、行使或捍卫我们的合法权利;以及
- 管理和维护存储个人数据的数据库。
- 我们需要履行您与我们签订或即将签订的供应商或服务协议项下的合同义务,或应您的要求在签订该协议前使用您的个人数据,以及行使我们与管理您的账户和向您提供产品和服务相关的权利;
- 我们已获得您的同意;
- 我们有必须履行的法律和监管义务;
- 我们可能需要使用您的个人数据来确立、行使或捍卫我们的合法权利,或用于法律诉讼;或
- 如上所述使用您的个人数据可能对我们的合法利益(或我们一家或多家关联公司的合法利益)是必要的,例如:
- 向我们的业务合作伙伴共享,这些合作伙伴须履行合同义务,遵守适当的数据保护规定;
- 根据相关政府或行政机关的法律要求,评估是否遵守适用的法律、法规和规章,并在合理可行的范围内,仅在遵守惯常保密承诺的前提下进行;
- 在法律要求的范围内(例如,如果我们有义务披露您的个人数据以遵守任何法律义务),用于确立、行使或捍卫我们的合法权利,或用于法律诉讼;
- 如果我们出售任何业务或资产,在这种情况下,我们可能会出于尽职调查的目的向潜在买方披露您的个人数据;
- 如果我们被第三方收购,我们将向该第三方买方披露我们持有的关于您的个人数据;
- 向第三方代理商和承包商披露,以便他们为我们提供服务,包括(但不限于)Ingold Capital 的外部律师、审计师、专业顾问以及 IT 和通信服务提供商。这些第三方将遵守保密义务,并且仅会按照本隐私声明中所述的方式使用您的个人数据;以及
- 应您的要求或任何代表您行事的人员(包括您的代理人、顾问、经纪人和产品提供商)的要求,向任何组织披露。
- 接收方目的地已获得欧盟委员会的认定,确保其能够充分保护您就个人数据享有的权利和自由;
- 如果接收方位于美国,则其必须是欧盟-美国隐私保护框架的认证成员;或者
- 接收方已签署基于欧盟委员会批准的”标准合同条款”的合同,该合同规定其有义务保护您的个人数据。
- 如果欧盟《通用数据保护条例》(或任何同等效力的数据保护法规)适用于您,您有权要求提供更多关于您的个人数据在传输到其原籍国或司法管辖区以外时所受到保护的详细信息。
- 接收方同意按照 PDPA 的规定,以至少与 PDPA 相当的标准保护个人数据;或
- 任何其他传输均符合 PDPA 的规定。
- 您有权获取并访问我们处理的关于您的个人数据,并要求更正任何与此类个人数据相关的错误或不准确之处;以及
- 您还享有以下与您的个人数据相关的权利:
- 您有权随时撤回您对我们处理您的个人数据的同意。但请注意,如果我们有其他合法依据,我们仍有权处理您的个人数据;
- 在某些情况下,您有权以结构化、常用且机器可读的格式接收我们基于您的同意(而非任何其他合法依据)处理的关于您的任何个人数据,和/或要求我们在技术可行的情况下传输此类数据。请注意,此权利仅适用于您提供给我们的个人数据;
- 如果您的个人数据不准确或不完整,您有权要求我们更正;
- 在特定情况下,您有权要求我们删除您的个人数据。这些情况可能包括(但不限于):
- 在某些情况下,您有权要求我们限制对您个人数据的处理。这些情况可能包括(但不限于):
- 您有权不接受仅基于自动化处理您的个人数据而作出的决定,如果该决定对您产生法律效力或对您造成重大影响;以及
- 如果您认为您的任何权利受到我们的侵犯,您有权向您所在司法管辖区的数据保护监管机构提出投诉。
- 确保您的记录和信息的安全性和保密性;
- 防范任何可能威胁或损害您记录和信息安全或完整性的预期威胁或风险;以及
- 防止未经授权访问或使用您的记录或信息,以免对您造成重大损害或不便。
