This Privacy Policy explains how SOFT TASK PRIVATE LIMITED ("SOFT TASK", "we", "us"), a company incorporated in Singapore, collects, uses, discloses and protects personal data in connection with Veritrel, this website and our business relationships. We comply with Singapore's Personal Data Protection Act 2012 (the "PDPA").
1. Who is responsible
SOFT TASK PRIVATE LIMITED, Woodlands Link, #04-33, Singapore 738733, is responsible for the personal data described in this policy. Our Data Protection Officer can be reached atdata@veritrel.com.
2. What this policy covers
- Visits to this website.
- Emails and other communications you send us.
- Contact details of people at organisations that are, or may become, our clients, suppliers or partners.
Veritrel also contains information about individuals named in official sanctions and risk publications. How we handle that information, and how to ask about a record, is explained separately in Data Sources and Corrections.
Veritrel is a data service only. We do not screen our clients' customers and our services are designed so that we never receive their customers' personal data.
3. Personal data we collect
- When you visit this website: we do not use forms, accounts, analytics or advertising trackers, and we set no cookies of our own; your cookie-notice choice is remembered only in your own browser. Our hosting and security provider processes technical information such as your IP address, browser type and the pages requested, to deliver the site and protect it from attack. See Cookies and Data Collection.
- When you write to us: your name, email address, organisation and anything you choose to include in your message.
- When we work with your organisation: names, job titles and business contact details of the people we deal with, and records of our correspondence and agreements.
4. How we use personal data
- To reply to enquiries and provide the information you ask for.
- To set up, provide, support and invoice our services.
- To operate, secure and improve this website and our services.
- To meet our legal and regulatory obligations and to establish or defend legal claims.
We collect, use and disclose personal data with your consent, or where the PDPA otherwise permits it, for example where it is necessary to perform a contract, for our legitimate interests, or to comply with the law. We do not sell personal data.
5. Who we share it with
- Service providers who host and operate our systems and email on our behalf (for example cloud hosting, content delivery and security, and business email), under contracts that require them to protect the data and use it only on our instructions.
- Professional advisers, such as lawyers, auditors and insurers, where needed.
- Regulators, law enforcement or courts, where we are required or permitted by law.
- A successor business, if all or part of our business is reorganised or transferred, subject to this policy.
6. Transfers outside Singapore
Our systems are hosted in Singapore. Some service providers may process data in other countries, for example for backups or email. Where personal data is transferred outside Singapore, we take appropriate steps, such as contractual commitments, so that it receives a standard of protection comparable to the PDPA.
7. How long we keep it
We keep personal data only as long as it is needed for the purposes above, or as required by law, and then delete or anonymise it. Correspondence and business records are generally kept for the duration of the relationship and for the period required by Singapore law afterwards.
8. How we protect it
We use reasonable security arrangements, including encryption in transit and at rest, access controls with multi-factor authentication, logging of access to sensitive information, and regular backups. No system is perfectly secure; if you believe your data has been put at risk, please contact us immediately.
9. Your rights
Under the PDPA you may:
- ask for access to the personal data we hold about you and how it has been used or disclosed in the past year;
- ask us to correct an error or omission in your personal data;
- withdraw your consent to our use of your personal data, after which we will tell you of any likely consequences.
Please write to data@veritrel.com. We may need to verify your identity, and we may charge a reasonable fee for access requests as the PDPA allows; we will tell you the fee before proceeding. We aim to respond within 30 days.
10. Marketing
We do not send marketing messages to Singapore telephone numbers, and we only email you about our services where you have asked us to or where the law allows. You can opt out at any time.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.
12. Contact and complaints
Questions or concerns about this policy or your personal data: data@veritrel.com. If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore.