Privacy Policy

1 Definitions

"Customer"/"User" means an individual who has contacted us through any means to inquire about our services or has entered into a contract with us.

"Personal Data" means data about a customer who can be identified from that data, or from that data combined with other accessible information.

2 Types of Personal Data Collected

We may collect various types of personal information including:

• Name and identification information (passport, identity numbers)
• Contact information (address, email, telephone)
• Personal details (nationality, gender, date of birth, marital status)
• Visual information (photographs, audio-visual content)
• Employment and financial information
• Company and business information (profiles, certificates, financial statements)

3 Data Collection Methods

We collect personal data through:

• Form submissions for our products and services
• Service agreements and documentation
• Direct interactions (calls, meetings, emails, social media)
• Website interactions and service usage
• Mailing list subscriptions and promotional responses
• CCTV surveillance and event photography
• Marketing representative contacts
• Third-party references and business partners

1 General Purposes

We collect, use, and disclose your personal data for:

• Responding to queries, feedback, and requests
• Identity verification and payment processing
• Facilitating transactions with third-party agencies (ACRA, IRAS)
• Managing business operations and compliance
• Providing updates and communications
• Business asset transactions and mergers
• Crime prevention and commercial risk management
• Facilities and security management
• Legal compliance and regulatory reporting

2 Client-Specific Purposes

For our clients, we additionally use personal data for:

• Processing applications for incorporation, corporate secretarial, accounting, and tax services
• Identity verification and relationship management
• Payment and credit transaction processing
• Marketing communications about our services
• Legal and regulatory compliance
• ACRA system disclosures (ACRA is exempted from PDPA)
• Market research and service improvement

3 Employment Applications

For employment candidates, we use personal data for:

• Application management and verification
• Background checks and qualification verification
• Reference checks and screening
• Suitability assessment

1 Withdrawal Process

Your consent for data collection, use, and disclosure remains valid until withdrawn in writing. You may withdraw consent by submitting a written request to our Data Protection Officer at ask@ebos-sg.com.

2 Processing Time

Upon receiving your withdrawal request, we may require reasonable time (depending on complexity and impact) to process your request. We will notify you of any consequences, including legal implications. Generally, we process requests within fifteen (15) business days.

3 Service Impact

Depending on your request's nature and scope, we may not be able to continue providing services. We will notify you before completing the withdrawal process. You may cancel your withdrawal by informing us in writing.

1 Security Measures

We implement commercially acceptable means to protect your personal and company information, including SSL encryption for many services. We employ administrative, physical, and technical measures such as up-to-date antivirus protection, encryption, and privacy filters.

2 Access Control

Access to personal information is restricted to employees, contractors, and agents who need it for processing and are bound by strict confidentiality obligations. All employees receive PDPA briefings and sign Non-Disclosure Agreements.

3 Security Limitations

While no transmission method over the Internet is completely secure, we strive to protect your information and continuously review and enhance our security measures. We do not accept liability for unintentional disclosure to the extent permitted by law.