SPARROW PRIVACY AND DATA PROTECTION POLICY
The use of the Website entails various types of personal data being provided for various purposes. Under the Personal Data Protection Act (No. 26 of 2012) (the “PDPA”), “personal data” means data, whether true or not, about an individual who can be identified from that data; or from that data and other information to which the organisation has or is likely to have access. The PDPA governs and protects the collection, use, disclose and care of personal data. Organisations will have to comply with the PDPA as well as the common law and other relevant laws that are applied in the specific industry that they belong to, when handling personal data in their possession.
- COLLECTION OF PERSONAL DATA
1.1 Users may browse the Website anonymously. However, Users will have to create a user account in order to utilise the services on the Website or receive more information on the Website.
1.2 Generally, Sparrow may collect Users' personal data in the following circumstances:
|(i)||when the User creates an account with Sparrow;|
|(ii)||when Sparrow implements additional measures to authenticate user identity;|
|(iii)||when the User uses the services offered by Sparrow and/or purchases any products offered by Sparrow;|
|(iv)||when the User carries out transactions on Sparrow's platform; and|
|(v)||when the User submits personal data to Sparrow for any other reason.|
1.3 Users authorise Sparrow to process and store such personal data for the purposes provided for in paragraph 2.1 and if applicable, verify such credentials with the relevant social media network.
1.4 If Users provide Sparrow with any personal data relating to a third party, by submitting such information to Sparrow, Users represent to Sparrow that they have obtained the consent of the third party to provide Sparrow with such personal data for the purposes stated in paragraph 2.1.
1.5 Users shall ensure that all personal data submitted to Sparrow is complete and accurate. Any omission or failure to do so may prevent Sparrow from fulfilling the purposes stated in paragraph 2.1.
1.6 Users acknowledge that all personal data submitted to Sparrow is in compliance with all applicable laws relating to data protection including without limitation, the PDPA, the General Data Protection Regulation (EU) 2016/679 as well as the common law and other relevant laws (“Applicable Laws”). If Users are in doubt as to their rights in relation to their personal data, they should consult their solicitors or other professional advisors.
- USE OF PERSONAL INFORMATION
2.1 In general, Sparrow collects and uses personal data for the following purposes:
|(i)||to process the User's application for an account;|
|(ii)||to maintain the User's account;|
|(iii)||to verify the User's identity;|
|(iv)||to provide Users with the products and/or services requested;|
|(v)||to collect information in order to comply and enforce know-your-customer policies and regulations and anti-money laundering and countering the financing of terrorism laws and regulations;|
|(vi)||to handle disputes and conduct and facilitate investigations and proceedings;|
|(vii)||to personalise User experience and respond to individual needs;|
|(viii)||to improve and receive feedback on the Website;|
|(ix)||to improve customer service and provide support services;|
|(x)||to process interest in buying or creating Sparrow Options over cryptocurrencies; and|
|(xi)||to send periodic emails, including but not limited to the services, news, updates and related information on the Website.|
2.2 The purposes listed in paragraph 2.1 are not exhaustive and Sparrow may collect and/or use personal data for additional purposes which Users will be notified of, in accordance with the applicable terms and conditions. Further, these purposes may continue to apply even in situations where the relationship between Sparrow and the Users (for example, pursuant to a contract) has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable Sparrow to enforce its rights under any contract with the Users).
3.1 Sparrow may disclose personal data to third party service providers for the purposes including but not limited to those listed in paragraph 2.1, on the condition that the disclosed personal data is kept confidential and not further disclosed.
3.2 In particular, Sparrow may disclose personal data for legal purposes (including but not limited to compliance, enforcement of legal rights and obligations and to obtain legal advice).
3.3 Sparrow employs security measures to protect personal data, including but not limited to the following:
3.3.1 all personal data collected on the Website shall be transmitted via Secure Socket Layer (SSL) technology and then encrypted into the gateway provider's database only to be accessible by those authorized with special access rights who are required to keep the personal data confidential; and
3.3.2 all personal data shall be encrypted on the server.
3.4 Users should be aware, however, that no method of transmission over the internet or method of electronic storage is completely secure. While security cannot be guaranteed, Sparrow strives to protect the security of the Users' information and is constantly reviewing and enhancing its information security measures.
4.1 Cookies are small files that a website or service provider transfers to computer hard drives through a web browser that enables the website or service provider's systems to recognize the browser and record certain information.
4.3 Users may disable the processing of cookies on their web browsers but this may prevent Users from maximising the services provided by Sparrow.
- THIRD PARTY WEBSITES
Sparrow shall not be responsible for the collection, use, disclosure and care of personal data by any third party websites linked to the Website.
- WITHDRAWAL OF CONSENT
6.1 Users may contact Sparrow at [email protected] to withdraw their consent to the use of personal data by Sparrow, following which Sparrow shall cease to further collect, use and disclose personal data of that User.
6.2 Users should be aware that the withdrawal of consent may prevent them from utilising the services provided by Sparrow.
- ACCESS TO AND CORRECTION OF PERSONAL DATA
7.1 If Users wish to make (a) an access request for access to a copy of the personal data which Sparrow holds about the respective User or information about the ways in which Sparrow uses or discloses such personal data, or (b) a correction request to correct or update any of such personal data which Sparrow holds, the Users may submit their request via email at [email protected].
7.2 Please note that a reasonable fee may be charged for an access request. Sparrow shall inform the Users of the fees before processing the request.
- ACCURACY OF PERSONAL DATA
Sparrow generally relies on personal data provided by the Users (or their authorised representative). In order to ensure that the personal data is current, complete and accurate, User should update Sparrow if there are changes to personal data via email at [email protected].
- TRANSFER OF PERSONAL DATA OUTSIDE OF SINGAPORE
- RETENTION OF PERSONAL DATA
10.1 Sparrow may retain Users' personal data for as long as it is necessary to fulfil the purposes stated in paragraph 2.1, or as required or permitted by Applicable Laws.
10.2 Sparrow shall cease to retain Users' personal data, or remove the means by which the data can be associated with the Users, as soon as it is reasonable to assume that such retention no longer serves the purposes stated in paragraph 2.1, and are no longer necessary for legal or business purposes.
- EFFECT OF POLICY
- GOVERNING LAW AND JURISDICTION