・ sets out the principles and practices SFBI (Asia-Pacific) Pte Ltd (“SFBI”) follows when collecting, using, disclosing, retaining and removing personal data; and
・ describes other important topics relating to an individual’s privacy.
By sales transactions with SFBI, by communicating with SFBI through email, on telephone, in writing or via any of SFBI’s other services including the SFBI website or otherwise by providing personal data to us, you agree to the collection, use and disclosure of your personal data described in this policy.
The type of personal data that SFBI may collect from individuals will depend upon the particular transaction and the dealing. Normally the personal data of an individual collected by SFBI may include that individual’s:
・ Name, title, address;
・ NRIC/FIN/Passport number;
・ Telephone Number;
・ Email address;
・ Records of communications with SFBI;
・ Responses to surveys and contests conducted by SFBI or on its behalf;
・ Credit card or debit card information;
・ Camera or video footage that identifies individuals (including CCTV footage); and/or
・ Website usage information.
SFBI only collects, uses and discloses personal data of an individual with the individual’s consent or deemed consent or as otherwise permitted under the PDPA or other applicable laws and regulations.
An individual’s personal data will, generally, only be collected and used for the primary purposes (“Primary Purposes“) of :
・ conducting, improving, maintaining and developing the individual’s business relationship with SFBI;
・ processing, servicing or enforcing transactions with the individual and sending related communications;
・ identification and verification purposes in connection with any of the services or products that may be supplied to the individual;
・ responding to the individual’s queries;
・ administering contests or market surveys conducted by SFBI or on its behalf;
・ marketing (such as providing individuals with information about our products and promotional notices and offers);
・ improving SFBI’s website;
・ carrying out due diligence or other screening activities (including background checks) in accordance with legal or regulatory obligations or risk management procedures that may be required by law or that may have been put in place by SFBI;
・ investigating fraud, misconduct, any unlawful action or omission, whether relating to the individual’s relationship with SFBI or any other matter arising from the individual’s relationship with SFBI, and whether or not there is any suspicion of the aforementioned;
・ storing, hosting, backing up (whether for disaster recovery or otherwise) of the individual’s personal data, whether within or outside Singapore; and
・complying with applicable law in administering and managing the individual’s relationship with SFBI.
SFBI takes reasonable steps to ensure an individual is aware of:
・ the likely use of the individual’s personal data;
・ the means of requesting SFBI on the provision of the individual’s personal data that is in the possession of SFBI;
・ the means of withdrawing any consent in respect of the collection of the individual’s personal data or use or disclosure thereof that is in the possession of SFBI;
・ the identity and contact details of the organisation to whom the individual’s personal data is disclosed;
・ any law requiring collection, use or disclosure of the individual’s personal data; and
・ the main consequences of the individual’s failure to provide personal data to SFBI.
You directly provide SFBI with most of the data we collect. We collect and process data when you:
• sign up for our newsletter through our website;
• submit a franchise application through our website;
• send us an email enquiry to our email addresses;
• order our food through third-party delivery services we work with, such as Deliveroo, GrabFood and Food Panda; and
• use or view our website via your browser’s cookies.
By using the SFBI website, you are consenting to us collecting any data we receive either expressly or indirectly.
SFBI discloses personal data of an individual:
・ for one or more of the above Primary Purposes for which it was collected;
・ for purposes that a reasonable person would consider appropriate in the circumstances;
・ where the individual has provided prior consent;
・ for direct marketing by SFBI where consent has been given provided that SFBI gives the individual an opportunity to opt out of such direct marketing; or
・ where permitted under the PDPA or other applicable law or if required by law.
In order to conduct our business operations more smoothly, SFBI may also be disclosing the personal data you have provided to SFBI to third party service providers, agents and/or affiliates or related corporations of SFBI, which may be sited outside of Singapore, for one or more of the above-stated Primary Purposes. This is because such third party service providers, agents and/or affiliates or related corporations would be processing your personal data on behalf of SFBI for one or more of the above-stated Primary Purposes.
SFBI does not disclose your personal data for any secondary purposes unless your consent has been given or if so permitted or required under the PDPA or other applicable laws and regulations. Please note that SFBI may disclose your personal data to third parties without first obtaining your consent in certain situations that are listed in the Second, Third and Fourth Schedules of the PDPA which is publicly available at http://sso.agc.gov.sg. In all other instances of disclosure of personal data to third parties with your express consent, SFBI will endeavour to provide adequate supervision over the handling and administration of your personal data by such third parties, as well as to provide for adequate forms of protection over such personal data.
SFBI takes reasonable steps to ensure information is accurate and up-to-date by updating its records whenever changes come to its attention. SFBI disregards information which, on a reasonable basis, is inaccurate or out of date by reason of the time which has elapsed since it was collected or by reason of any other information in its possession.
If an individual has submitted personal data to SFBI electronically or otherwise, and would like it corrected, a written request should be sent by email to SFBI’s Data Protection Officer at firstname.lastname@example.org or to the address below.
SFBI will comply with an individual’s request to correct their personal data as soon as practicable. SFBI will also send the corrected personal data to every other organisation to which the personal data was disclosed by SFBI within a year before the date the correction was made, unless that other organisation does not need the corrected personal data for any legal or business purpose. Notwithstanding the foregoing, SFBI may, if you so consent, send the corrected personal data only to specific organisations to which the personal data was disclosed by SFBI within a year before the date the correction was made.
If SFBI disagrees with any request to correct an individual’s personal data on reasonable grounds, SFBI shall annotate the personal data with the correction that was requested but not made.
An individual may withdraw his or her consent for the collection, use or disclosure of personal data by giving SFBI reasonable notice by sending a written request by email to the Data Protection Officer at email@example.com or to the address below. SFBI shall inform the individual of the likely consequences of the withdrawal of the consent. SFBI will cease to collect, use or disclose the personal data upon such withdrawal unless otherwise permitted or required by the PDPA or other applicable laws and regulations.7. Using our Website
As with most websites, when you visit or use an application on SFBI’s websites, SFBI may record anonymous information such as IP address (not used to identify a specific individual), time, date, referring URL, pages accessed and documents downloaded, type of browser and operating system.
SFBI’s websites also use “cookies”. A cookie is a small file that stays on your computer until, depending on whether it is a sessional or persistent cookie, you turn your computer off or it expires. Cookies may collect and store your personal data. You may adjust your internet browser to disable cookies. If cookies are disabled you may still use SFBI’s websites, but may be limited in the usage of some of its features.
SFBI will take commercially reasonable efforts to take appropriate precautions and preventive measures to ensure that personal data is securely stored. Appropriate security arrangements will be taken to prevent misuse or loss of your personal data. However, SFBI cannot assume responsibility for any unauthorized use of your personal data by third parties which are wholly attributable to factors beyond SFBI’s control.9. Retention and Removal of your Personal Data
SFBI will also take commercially reasonable efforts to ensure that the personal data in our possession or under our control is destroyed and/or anonymized as soon as it is reasonable to assume that (i) the purpose for which that personal data was collected is no longer served by the retention; and (ii) retention of the personal data is no longer necessary for any other legal or business purposes. Any data removed is disposed of in a manner that protects the privacy of personal data in an appropriate manner.10. Dealing with Unsolicited Information
SFBI takes all reasonable steps to ensure that all unsolicited information is destroyed immediately.11. Access to Personal Data
If an individual wishes to be provided with information regarding his or her personal data that is in the possession or under the control of SFBI or the ways in which such personal data has been used or disclosed by SFBI in the year preceding such request, the individual needs to send a written request by email to the Data Protection Officer at firstname.lastname@example.org or to the address below. SFBI will handle such requests as soon as reasonably possible in accordance with the PDPA.
Depending on the nature of the work required to process your access request, SFBI may be required to charge you a reasonable fee for the handling and processing of your requests to access your personal data to recover administrative costs. SFBI’s Data Protection Officer will determine whether such a fee should be imposed on a case-by-case basis. Where such a fee is to be imposed, SFBI will provide you with a written estimate of the fee for your consideration. SFBI will only begin processing your access request upon receiving your agreement to the payment of the fee.
SFBI allows individuals the option to not identify themselves when dealing with it, where practical.13. Cross Border Disclosure
Any personal data provided to SFBI may be transferred to, stored by or disclosed to an overseas recipient. For example, SFBI may use a server hosted overseas to store data, which may include your personal data. Where personal data is transferred to SFBI’s affiliates outside of Singapore, SFBI will ensure that suitable binding corporate rules are put in place to ensure that SFBI’s affiliates provide a standard of protection to personal data so transferred that is comparable to the protection under the PDPA. Where personal data is transferred to other third parties outside of Singapore, SFBI will ensure that suitable contracts between SFBI and the third parties are put in place to ensure that such third parties provide a standard of protection to personal data so transferred that is comparable to the protection under the PDPA.14. Sensitive Information
SFBI does not collect sensitive information without the individual’s consent and unless collection of such information is specifically relevant and necessary for the Primary Purposes described in Article 2 of this policy or otherwise permitted or required by the PDPA or other applicable laws. All sensitive information is collected and used in accordance with this policy. We use partial NRIC/FIN for promotional campaigns to identify individuals.15. Forwarding of personal data to third parties
SFBI processes personal data collected, and may forward the data collected to the agency commissioned to run the website as well as to the technical service provider.
Your personal data may also be shared with the social media plug-ins on the SFBI website, namely Facebook, Instagram, Twitter and YouTube.
By clicking on the social media buttons, you establish direct contact with the social network and expressly consent to sharing information such as your IP address and/or browser behaviour with the respective social media site.
Further information pertaining to the purpose and the scope of data collection and processing by the respective social media site can be found on their respective privacy policies via their websites.
SFBI complies with all provisions regarding the DNC Registry under the PDPA.17. Other Important Information
If you have any queries or concerns about SFBI’s personal data protection policies and practices, please contact:
Data Protection Officer
1 Coleman Street, #10-08/09 The Adelphi, 179803