Personal Data Policy

This Personal Data Policy supplements, but does not supersede nor replace, any other consents you may have previously provided to X Star Technology Pte. Ltd. (including its related corporations and business units in Singapore) (collectively, the ‘X Star’) with respect to your Personal Data, and your consents herein are additional to any rights which to X Star may have at law to collect, use or disclose your Personal Data.

X Star may from time to time update this Data Protection Policy to ensure that it is consistent with our future developments, industry trends, and/or any changes in legal or regulatory requirements.

Our Personal Data Policies describe the types of Personal Data we may collect from you, how we may use that information, and with whom we may share it. Our Personal Data Policies also describe the measures we take to protect the security of the information you provide to us.

Personal Data

In this Personal Data Policy, ‘Personal Data’ refers to any data that can identify an individual.

The types of Personal Data that we collect about individuals include (but are not limited to):

Name
NRIC/ FIN/ Passport information
Bank account details
Vehicle information
Personal contact information (e.g. address, email, phone number)
Payment information (e.g. credit card or debit card)
Photos, video and CCTV footage

You may have provided the Personal Data to us personally or authorized other individuals to provide the Personal Data to us and consent (on your behalf) to our collection of your Personal Data from these individuals.

Where you give us Personal Data about other individuals, you confirm that you are authorized to disclose and consent, on their behalf, to the processing of such Personal Data for the purposes described in the section “Purposes for which we collect and use Personal Data”, or other purposes for which your consent has been sought and obtained.

Purposes for which we collect and use Personal Data

We collect and use the Personal Data that you provide to us for the following purposes:

If you are a Vendor/ Service Provider/ Business Partner

To conduct due diligence/ background checks that are mandated by legislation or X Star’s internal policies and practices
For the purposes of the supply of products and services and support by vendors/ service providers/ business partners to X Star
To keep vendors/ service providers/ business partners updated on changes to X Star’s policies
To evaluate and improve X Star products and services
To evaluate the products and services provided by vendors/ service providers/ business partners to X Star
Security clearance/ entry access into X Star’s premises
To facilitate attendance at events/ functions organized by X Star or in which X Star is involved
For purposes that are ancillary to or in furtherance of the above purposes

If you are a Customer

To make decisions relating to the establishment of auto loan services
To provide products and services and to communicate with customers as part of providing products and services
To verify and process your personal particulars and payments
To respond to queries or comments on X Star’s products and services
To comply with contractual arrangements by or between financial industry self-regulatory, financial industry bodies, associations of financial services providers, or other financial institutions
To evaluate X Star’s products and services and how X Star can improve them;
To facilitate attendance at events/ functions organized by X Star or in which X Star is involved
For purposes that are ancillary to or in furtherance of the above purposes

Others

To evaluate applications for employment/ job positions within X Star
To evaluate applications for internships and industrial attachments
To conduct due diligence/ background checks on job applicants
Security clearance/ entry access into X Star’s premises
To facilitate attendance at events/ functions organized by X Star or in which X Star is involved
For purposes that are ancillary to or in furtherance of the above purposes

We only collect and use Personal Data for purposes to which you have consented and for which we have been authorized. If we need to use your Personal Data for any purpose which you have not previously consented, we will seek your consent prior to using your Personal Data for the new purpose.

Please note that business contact information, which includes an individual’s name, business title, business telephone number, and business electronic mail address, will be excluded from PDPA.

Disclosure and Sharing of Personal Data

Where necessary to fulfil our obligations in the course of or in connection with our provision of the goods and services requested by you, or to fulfil our business purposes stated above, your Personal Data may be disclosed, to the following third parties (whether located in Singapore or abroad):

Any agent, affiliate, supplier, vendor, sub-contractor and third-party service providers who provide operational services to us
Any credit bureau as well as the members of such credit bureau
Anyone we consider necessary in order to provide our services
Regulatory authorities, courts, dispute resolution tribunals, and government agencies

We will ensure that your Personal Data will receive a standard of protection that is at least comparable to that provided under the PDPA.

Access and Correction of Personal Data

If you would like to request personal data held by X Star, please send us a request via our email provided in clause 8.

You should ensure that your Personal Data is accurate and complete. You must also update us on any changes in your Personal Data that you had initially provided us with.

Protection and Security of Personal Data

X Star will take reasonable steps to protect your Personal Data against unauthorized disclosure.

X Star requires that the parties to whom we transfer Personal Data and our service providers implement adequate levels of protection in order to protect Personal Data. We also require that these parties only process Personal Data strictly for purposes for which we engage them and consistent with the purposes that we have described in the section ‘Purposes for which we collect and use Personal Data’ or with other purposes for which consent has been sought and obtained. However, we will not be held responsible for any actions or omissions by third parties and encourage you to consult the data protection policy of those parties.

Retention of Personal Data

X Star may retain some employees’, vendors’, contractors’ and customers’ personal data for a period of time following their departure or resignation from the Company, mainly for legal reasons, but also for other purposes such as providing references or for financial reasons, for example, relating any statutory fund payment and/ or taxation. Different categories of data will be retained for different periods of time.

Withdrawal of Consent

If you prefer not to receive marketing and promotional offers by email, SMS, or voice calls, please inform us via email or letter via the contact provided in clause 8. Please note that you may still receive marketing and promotional messages for up to 30 days from the date that we receive your request. Thereafter, you will continue to receive messages of a purely administrative, security, servicing and non-marketing nature.

If you wish to be added back to our mailing lists, please email us using the same email.

Contacting Us – Withdrawal of Consent, Access and Correction of your Personal Data

All queries, comments, and requests for the withdrawal of consent, access, or correction of Personal Data may be sent to X Star’s Data Protection Officer by the following means:

Email address: dataprotection@xstar.sg

Mailing address: Data Protection Officer

X Star Technology Pte. Ltd.

1 Fusionopolis Link, #02-04, Singapore 138542

Governing Law

This Data Protection Policy shall be governed in all respects by the laws of Singapore.

Last Updated on 31 May 2023