Respecting your privacy and protecting your personal data

NCS Pte. Ltd. and its group companies (“NCS”) respects the privacy of users in accordance with our Privacy Notice. Our Privacy Notice applies solely to personal data collected by NCS. 

We conduct our business with respect to collecting, using, disclosing and caring for personal data in compliance with the Singapore Personal Data Protection Act (PDPA) and other applicable data protection legislation.

On or before the collection of your personal data, we will notify you of the purpose(s) of why we want to collect, use or disclose your personal data. We will obtain your explicit consent before we collect, use or disclose your personal data unless there are exceptions to consent as provided for under the PDPA.

We may collect your personal data when you:

• Use our products or services
• Register for a specific product or service
• Sign up for alerts or newsletters
• Contact us with a question, a job enquiry or request for assistance
• Apply for a job with us in response to our job advertisement, in which case the privacy notice in https://groupcareers.singtel.com/key/ncs-singapore.html will govern
• Participate in a competition, lucky draw or survey
• Visit our websites and applications (through the use of cookies and other technologies)
• Visit our physical premises
• Provide us with products and/or services, in which case, please refer to “If you are a Subcontractor” under “How we use your personal data” section below on how we use your personal data.

Where you give us personal data about other individuals, you confirm that you are authorised to disclose and consent, on their behalf, to the processing of such personal data for the purposes described below, or other purposes for which your consent has been sought and obtained.

Here are examples of personal data we collect:

• Your identity – This includes NRIC, FIN or passport number, address, telephone number, e-mail address, date of birth, any form of biometric that you may have submitted, as well as service-related information such as bank and credit card details, device ID and IP address.
• Your educational qualifications and work history – This includes the information you provide us when filling in a job application form.
• Your interaction with us – For example, a note or recording of a call you make to one of our contact centres, an email or letter you send to us, CCTV surveillance footage or other records of any contact you have with us.
• Provision of goods and services – This includes personal data that we have access to in the course of provision of goods and services.
• Information from other organisations – These organisations include fraud-prevention agencies, business directories, credit reference agencies or individuals we believe you have authorised to provide your personal details on your behalf.

We may use your personal data and share your personal data with third parties set out in “Sharing your personal data” below for the following purposes, purposes for which your consent has been obtained and other purposes permitted by applicable laws and regulations (“Purpose”):

If you are a Customer

Provisioning & administration of services

• Provide goods and/or services to you
• Enable us to process bills and payments
• Respond to enquiries and requests from you or people you have authorised
• Inform you about service upgrades and updates

Market research  & service enhancement

• Conduct market research and customer satisfaction surveys to improve our customer service; develop new products, as well as personalise the services we offer you
• Perform market analysis
• Improve your user experience based on your usage behaviour on our websites and applications

Sharing of rewards and benefits

• Offer rewards and promotions
• Provide updates, offers, invitations to events and deliver relevant advertising, with your prior consent or if otherwise permitted under local laws and regulations

Security and risk management

• Handle any service, data breach and security issues
• Prevent and detect fraud or other crimes and recover debts
• Conduct internal audits and determine creditworthiness
• Ensure the safety and security of our properties and systems
• Conduct checks against money laundering, terrorism financing, corruption, compliance and related risks

Legal & regulatory requirements

• Meet legal, regulatory and other requirements including providing assistance to law enforcement, judicial and other government agencies

If you are a Supplier / Subcontractor

• To conduct due diligence / background checks that are mandated by legislation, NCS or NCS’ clients’ internal policies and practices
• For the purposes relating to the supply of goods and services and support by supplier / subcontractor to NCS
• Security clearance / entry access into NCS’ and NCS’ clients’ premises

If you are a visitor to our premises

• Ensure the safety and security of our properties and systems and contact you during your visit

If you are a website visitor

To contact you about your enquiries. We will not use your personal data for purposes other than the Purposes. We shall seek your consent before collecting any additional personal data and before using your personal data for a purpose other than the Purpose.

If you are a job applicant

• To evaluate your suitability for the job position you applied for
• To shortlist you for job interviews
• To do background reference checks

We may share your personal data with:

• Companies in the Singapore Telecommunications Ltd group for the purposes set out in “How We Use Your Personal Data” section above.
• Business partners and vendors we work with to deliver goods and/or services you purchase or which we purchase
• Our clients for the purposes of performing our contract with our clients
• Regulatory authorities, law enforcement agencies, government agencies and other government organisations, as required by local laws and regulations
• Financial institutions for purposes of our business relationship
• Research institutions for market analysis purposes
• Credit reference bureaus for the purpose of preparing credit reports or evaluation of creditworthiness

Your personal data is disclosed to the above only for the relevant Purposes stated above and for such other Purposes as you have consented to.

We will also ensure that overseas organisations we work with observe strict confidentiality and protection of personal data we transfer to them according to a standard of data protection that is equivalent to Singapore’s PDPA.

We have implemented measures to verify and ensure that the personal data we collect, use and disclose are accurate, complete and up-to-date, especially where such data are required to make decisions about you or where we need to disclose such data to third parties.

We have implemented stringent organisational and technical measures to secure and protect the personal data you provide us against any unauthorised access, use, disclosure, modification or disposal.  These include:

• Safeguards to prevent security breaches in our networks and database systems
• Limits on access to information in our systems
• Strict verification processes to prevent unauthorised access to information

The consent that you provide us for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you in writing. You may withdraw consent and request us to stop using and/or disclosing your personal data for any or all of the purposes listed above by submitting this form to your contact person in NCS or our Data Protection Officer at the contact details provided below.

Upon receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we shall seek to process your request within twenty-one (21) business days of receiving it.

Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue providing our goods and/or services to you and we shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform us in writing in the manner described in this section above.

Please note that withdrawing consent does not affect our right to continue to collect, use and disclose your personal data where such collection, use and disclosure without consent is permitted or required under the PDPA or other applicable laws.

If you wish to make (a) a data access request for access to a copy of the personal data which we hold about you or information about the ways in which we have used or disclosed your personal data within the past one year, or (b) a data correction request to correct or update any of your personal data which we hold about you, you may submit the Access Request and Correction and Update Request to your contact person in NCS or our Data Protection Officer at the contact details provided below.

Please note that a reasonable fee may be charged for a data access request. If so, we will inform you of the fee before processing your request.

We will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any personal data or to make a correction as requested by you, we shall generally inform you of the reasons why we are unable to do so (except where there are exceptions under the PDPA).

We may retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws. We have a data retention policy where we keep track of the retention periods of the various types of personal data that are in our possession. We will ensure that those data that have reached the end of their retention periods will be securely disposed of or destroyed.

Under certain of our business requirements, we may retain the personal data beyond the retention periods by anonymising them for use in data analytics, research and statistical analysis. 

You may contact our Data Protection Officers, Ice Chew and Alice Lee if you have any enquiries or feedback on our personal data protection policies and procedures, or if you wish to make any request at  contactdpo@ncs.com.sg.

This notice applies in conjunction with any other notices, contractual clauses and consent clauses that apply in relation to the collection, use and disclosure of your personal data by us. Please note that different or separate data protection policies may apply to specific products and services provided by NCS. Please refer to the terms of use for specific products and services for more information.

We may revise this notice from time to time without any prior notice. You may determine if any such revision has taken place by referring to the date on which this Privacy Notice was last updated. Your continued use of our services constitutes your acknowledgement and acceptance of such changes.

Where your personal data is covered by the General Data Protection Regulation (GDPR), please refer instead to Singtel’s GDPR privacy policy.

Effective date: 1 April 2022
Last updated: 5 April 2023