This Privacy Policy (“Notice”) sets out the basis on which AIrprise Pte Ltd (“we”, “us”, or “our”) may collect, use, disclose, or otherwise process personal data of our customers in accordance with the Personal Data Protection Act (“PDPA”) of Singapore. This Notice applies to personal data in our possession or under our control, including data managed by third-party organizations engaged by us.

At AIrprisegift, we take as much pride in securing your data as we do in providing our world-class consultancy and services. This notice informs you of our adherence to PDPA obligations and the steps we take to protect your information. This notice is taken as deemed consent unless otherwise stated.

1. PERSONAL DATA DEFINITIONS

As used in this Notice:

“Customer” means an individual who has contacted us to inquire about our goods/services or has entered into a contract with us.

“Personal Data” refers to any data, true or not, about a customer who can be identified from that data or from that data combined with other information we possess.

Examples of Data Collected: Depending on your interaction, we may collect your name, 
residential address, email, telephone number, nationality, gender, date of birth, employment, and financial information.

2. COLLECTION, USE, AND DISCLOSURE

We generally do not collect personal data unless provided voluntarily by you or an authorized representative after being notified of the purpose.

Purposes for Collection and Use:

Performing obligations related to our provision of goods and services.

Verifying your identity and managing your relationship with us.

Processing payments, queries, requests, and feedback.

Complying with applicable laws, regulations, and law enforcement requests.

Analyzing website visitor traffic via cookies on our official website.

Disclosure to Third Parties: We may disclose data to third-party service providers, agents, or regulatory authorities when necessary to perform our service obligations or comply with legal requirements.

3. RELIANCE ON LEGITIMATE INTERESTS

In compliance with the PDPA, AIrprisegift may collect, use, or disclose data without consent for legitimate interests, provided we assess that these interests outweigh any adverse effects on the 
individual.

4. WITHDRAWING YOUR CONSENT

Your consent remains valid until withdrawn in writing.

How to Withdraw: Submit a written request to our Data Protection Officer (DPO).

Processing Time: We aim to process requests within fourteen (14) business days.

Consequences: Withdrawing consent may result in AIrprisegift being unable to continue providing goods or services to you.

5. ACCESS TO AND CORRECTION OF DATA

You may request a copy of your personal data or ask for corrections to be made.

Fees: A reasonable fee may be charged for access requests.

Response Time: We generally respond within seven (7) business days. If more than fourteen (14) days are required, we will notify you in writing.

6. PROTECTION AND SECURITY MEASURES

To safeguard your data from unauthorized access or modification, we employ rigorous technical and physical measures:

Encryption: Data is secured using AES256 Encryption at rest and AES128 Encryption in transit.

Access Control: Usage of Two-Factor Authentication (2FA), Multi-Factor Authentication (MFA), and strict password practices.

Monitoring: Regular security reviews, credential exposure checks, and antivirus protection.

7. RETENTION AND DISPOSAL

Retention Period: We retain personal data for as long as necessary to fulfill the original purpose or as required by law.

Current Policy: Personal information is presently stored for up to 8 months on secured 
workspaces and reviewed for destruction thereafter or upon contract termination.

8. TRANSFERS OUTSIDE SINGAPORE

We generally do not transfer personal data outside of Singapore. If a transfer is required, we will obtain your consent and ensure the data receives a standard of protection comparable to the PDPA.