Privacy Policy

PRIVACY POLICY

Last Updated: 13 July 2022

COMPANY AS THE DATA CONTROLLER
- This Privacy Policy applies to your access and use of the Platform owned and operated by Seed Squared Pte. Ltd. (UEN No.: 201609235N) and/or its related corporations (collectively, “Company”, “we”, and “us”), as well as to the use of (which includes any participation in) the Solutions.
- This Privacy Policy is incorporated as part of the Company’s Platform Terms of Use, accessible at https://www.shaocrab.com/pages/privacy-policy (the “Platform Terms of Use”).
- Your privacy is important to the Company, and we have adopted this Privacy Policy to inform you about how we as the Data Controller collect, process, use and disclose your Personal Data derived from your access and use of the Platform and the Solutions.
- If you have any questions about this Privacy Policy, or if you wish to access, update or correct your Personal Data or withdraw your consent to the use, collection and disclosure of your Personal Data in accordance with this Privacy Policy, please email us at info@shao.sg.
GENERAL DEFINITIONS
- In this Privacy Policy, unless the context otherwise requires, the following general definitions apply:
  - “Application” means the relevant mobile application(s) made available for download by the Company (or its licensors) to Users.
  - “Data Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of the Platform and the Solutions.
  - “Data Protection Laws” means applicable laws and regulations relating to the use and/or processing of personally identifiable information and data and privacy.
  - “Personal Data” means:
    - data, whether true or not, about an individual who can be identified:
      - from that data; or
      - from that data and other information to which we have or are likely to have access; and
    - any data that is analogous to the foregoing, as defined in Data Protection Laws.
  - “Platform” means the Application and Software which the Company owns, operates or otherwise makes available to Users for the purposes of or in connection with the Solutions.
  - “Purposes” means the purposes for which we collect your Personal Data as set out in this Privacy Policy.
  - “Software” means any software associated with the Application and/or Solutions which is made available for download and installation by the Company (including software upgrades), and shall include its respective components, processes and design in its entirety.
  - “Solutions” means the products and services which are made available to Users through the Platform and such other products and services as may be offered on the Platform from time to time.
  - “Third Party Provider” means any User which is also a goods and/or services provider providing Solutions to other Users through the Platform, and which is neither the Company nor an Affiliate of the Company.
  - “User” or “you” means the individual accessing or using the Platform to search for, obtain and/or provide the Solutions.
- Except as otherwise defined above, capitalised terms in this Privacy Policy have the same meanings as those given in the Platform Terms of Use.
HOW WE COLLECT YOUR PERSONAL DATA
- We receive your Personal Data when you:
  - register an account on the Platform;
  - use the Platform or any of the Solutions; and/or
  - contact or engage with us for any of the purposes listed above.
- In connection with the Solutions, and to the extent permitted by applicable laws (including Data Protection Laws), we may also be collecting from sources other than yourself, your Personal Data, for one or more of the Purposes, and thereafter using, disclosing and/or processing such Personal Data for one or more of the Purposes.
- We may combine information we receive from other sources with information you give to us and information we collect about you. We may use this information and the combined information for the Purposes (depending on the types of information we receive). If you suspect that any of your Personal Data has not been lawfully disclosed to us, please contact us (details are set out at the start of this Privacy Policy).
- Unless otherwise stated, this Privacy Policy does not cover any collection, use or disclosure by third-parties, including through any applications, websites, products or services that we do not control or own.
- Other than as stated in this Privacy Policy, we do not collect or process any other Personal Data.
TYPES OF PERSONAL DATA WE COLLECT
- In connection with your use of the Platform or the Solutions, we may collect the following Personal Data from you:
  - your contact and registration information such as your name, your organisation’s name, date of birth, email and mailing addresses and/or telephone number;
  - specific usage data from your use of the Platform and the Solutions;
  - technical information related to your use of the Platform and the Solutions, such as IP addresses, browser information and mobile device information;
  - if applicable, payment details in order to process payments for purchases made on the Platform or as part of the Solutions;
  - aggregated information such as statistical or usage data (note that such aggregated and statistical data may be derived from your Personal Data but is anonymised); and
- Note on third-party features: The Platform may include social media features, such as “liking” and “sharing” functions to third-party social media platforms, or links to groups formed on third-party social media platforms for the purpose of communicating information in relation to the Platform or the Solutions. These features may collect your personal information and track your use of the Platform. These social media features are either hosted by the third-party or hosted directly on the Platform. Your interactions with these features are governed by the privacy policy of the company providing such functionality.
- Note on collection of your national identification number (e.g. NRIC for Singapore Users): We are fully aware of the sensitive nature of your national identification number, and we only collect, use and disclose such information to the extent necessary under applicable laws and regulations, as well as in order to accurately establish and verify your identity to a high degree of fidelity. Please refer to the sections below for further information on how we use, disclose and maintain your Personal Data.
HOW WE PROCESS AND USE YOUR PERSONAL DATA
- We may process and use your Personal Data for the following purposes:
  - to facilitate and administer your use of the Platform and the Solutions;
  - to administer and keep track of your participation in the Solutions, including verifying your information in connection with your use of the Platform and the Solutions to monitor and analyse your use of the Platform and the Solutions;
  - to personalise your user experience on the Platform and in your use of the Solutions;
  - to monitor and analyse your use of the Platform and the Solutions;
  - to inform you of updates and announcements regarding the Platform and the Solutions, including providing you with regular communications and newsletters from the Company;
  - to enforce the Platform Terms of Use, including managing our licenses and partnerships;
  - to comply with court orders and warrants, and assist law enforcement agencies, to collect debts, prevent fraud, misappropriation, infringements, identity thefts and any other misuse of the Platform and the Solutions, and to take any action in any legal dispute or proceeding;
  - to improve the Platform and the Solutions; and/or
  - to contact you with information in relation to your use of the Platform and the Solutions, or at your request.
- Our legal basis to process and use the Personal Data of Users as the Data Controller is where:
  - Users have given their consent for one or more specific purposes (such as the Purposes).
  - Data Protection Laws permit a Data Controller to process Personal Data until the User objects to such processing (also known as opting-out), without having to rely on consent or any other legal basis. Note that this does not apply, whenever the processing of Personal Data is subject to the General Data Protection Regulation governing the Personal Data of Users from the European Union;
  - processing and use of Personal Data is necessary for:
    - the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
    - the establishment, exercise or defence of legal claims or proceedings;
    - compliance with a legal and regulatory obligation to which the Data Controller is subject;
  - processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Data Controller;
  - processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party; and
  - where otherwise permitted or not prohibited under Data Protection Laws.
- We may collect, use, disclose or process your Personal Data for other purposes that do not appear in this Privacy Policy. However, we will notify you of such other purposes at or before the time of obtaining your consent, unless processing of your Personal Data without your consent is permitted by Data Protection Laws.
- Your Personal Data is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. Depending on the User's location, transfers of Personal Data may involve transferring the User's Personal Data to a country other than their own.
HOW WE DISCLOSE OR EXPORT YOUR PERSONAL DATA
- We may need to disclose your Personal Data to trusted third-parties, whether located within or outside Singapore, for one or more of the Purposes, as such third-parties, would be processing your Personal Data for one or more of the above Purposes (“Third-Party Processors”). In this regard, you hereby acknowledge, agree and consent that we are permitted to disclose your Personal Data to such Third-Party Processors (whether located within or outside Singapore) for one or more of the above Purposes and for the Third-Party Processors to subsequently collect, use, disclose and/or process your Personal Data for one or more of the above Purposes. Without limiting the generality of the foregoing, such Third-Party Processors include:
  - any of our agents, contractors or third-party service providers that process or will be processing your Personal Data on our behalf including but not limited to those which provide administrative or other services to us;
  - our professional advisers, for example, our auditors and lawyers, as well as our insurers;
  - the Third-Party Providers;
  - third-parties to whom disclosure by us is for one or more of the Purposes and such third-parties would in turn be collecting and processing your Personal Data for one or more of the Purposes; and
  - any actual or proposed assignee or transferee of the business of the Company, or a merged entity in the event the Company is merged to create the said merged entity.
- Where we disclose your Personal Data, we will do so only in accordance with Data Protection Laws. This includes taking steps to ensure the security and privacy of your Personal Data, and where required, it will be subject to contractual terms ensuring the security and protection of any Personal Data under any sub-processor or data intermediary, whether within or outside of Singapore.
- A list of our current Third-Party Processors is set out at the end of this Privacy Policy.
HOW WE MAINTAIN YOUR PERSONAL DATA
- Security of your Personal Data is important to us. We will put in place reasonable security arrangements to ensure that your Personal Data is adequately protected and secured. Appropriate security arrangements will be taken to prevent any unauthorised access, collection, use, disclosure, copying, modification, leakage, loss, damage and/or alteration of your Personal Data. However, we cannot assume responsibility for any unauthorised use of your Personal Data by third-parties which are wholly attributable to factors beyond our control.
- We will put in place measures such that your Personal Data in our possession or under our control is destroyed and/or anonymised as soon as it is reasonable to assume that (i) the purpose for which your Personal Data was collected is no longer being served by the retention of such Personal Data; and (ii) retention is no longer necessary for any other legal or business purposes.
COOKIES
- We may also obtain information about your use of the Platform and the Solutions through the use of 'cookies' which enable us to make certain parts of the Platform easier to use and to improve the Platform and the Solutions generally.
- A cookie is a small file which asks permission to be placed on your device’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular website or web-based application. Cookies allow web-based applications to respond to you as an individual. The website or web-based application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
- We may use traffic log cookies to identify which pages are being used. This helps us analyse data about web-based traffic and improve the Platform and the Solutions in order to tailor it to user needs. If we do use such cookies, we will only use this information for statistical analysis purposes and then the data is removed from the system thereafter.
- Overall, cookies help us provide you with a better Platform and better Solutions, by enabling us to monitor which sections you find useful and which you do not. A cookie in no way gives us access to your device or any information about you, other than the data you choose to share with us.
- You can generally choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, some cookies are essential and some websites or web-based applications (such as automatic user logins) won’t operate as expected without them and some features of the website or web-based application may not be available.
WHERE YOU PROVIDE US WITH THIRD-PARTY PERSONAL DATA
- You should only provide us with Personal Data of third parties where expressly permitted under the Platform Terms of Use. Should you provide us with Personal Data of any individual other than yourself, you represent, undertake and warrant to us that:
  - for any Personal Data of individuals that you disclose to us, you would have prior to disclosing such Personal Data to us obtained consent from the individuals whose Personal Data are being disclosed, to:
    - permit you to disclose the individuals’ Personal Data to us for the Purposes; and
    - permit us to collect, use, disclose and/or process the individuals’ Personal Data for the Purposes;
  - at our request, you will use such form(s) or document(s) provided by us in obtaining such consents from the individuals in question (for the avoidance of doubt, we are under no obligation to you to create any such form(s) or document(s));
  - any Personal Data of individuals that you disclose to us are accurate; and
  - for any Personal Data of individuals that you disclose to us, that you are validly acting on behalf of such individuals and that you have the authority of such individuals to provide their Personal Data to us and for us to collect, use, disclose and process such Personal Data for the Purposes.
- Should you provide us with Personal Data of your child or children, you confirm, declare and agree that you are the parent and/or legal guardian of such child/children, and that we may collect, use and/or disclose your child’s or children’s Personal Data for the Purposes and in the manner as set out in this Privacy Policy.
THIRD-PARTY LINKS
- The Platform may contain links to third-party websites and applications whose data protection practices may differ from ours. We are not responsible for the content and privacy policies of these third-party websites and applications, and we encourage you to consult their privacy policies before accessing or using the third-party websites and applications.
YOUR RIGHTS IN RESPECT OF YOUR PERSONAL DATA
- If you have any questions about the processing of your Personal Data or about this Privacy Policy, if you do not accept an amended Privacy Policy, if you wish to withdraw any consent you have given us at any time, or if you wish to update or have access to your Personal Data, you are welcome to contact us through the contact details listed at the end of this Privacy Policy.
- You have the right to access and/or correct any Personal Data that we hold about you, subject to exceptions under the law. This right can be exercised at any time by contacting us through the contact details listed at the end of this Privacy Policy. We will need enough information from you in order to ascertain your identity as well as the nature of your request, so as to be able to deal with your request. All requests for correction or for access to your Personal Data must be in writing. We will endeavour to respond to your request within 30 days, and if that is not possible, we will inform you of the time by which we will respond to you.
- We may be prevented by law from complying with any request that you may make. We may also decline any request that you may make if the law permits us to do so.
- In many circumstances, we need to use your Personal Data in order for us to enable your use of the Platform and the Solutions. If you do not provide us with the required Personal Data, or if you do not accept an amended Privacy Policy or withdraw your consent to our use and/or disclosure of your Personal Data for the Purposes, it may not be possible for us to continue to enable your use of the Platform and the Solutions.
- We may charge you a fee for responding to your request for access to your Personal Data which we hold, or for information about the ways in which we have (or may have) used your Personal Data. If a fee is to be charged, we will inform you of the amount beforehand and respond to your request after payment is received.
- We are fully committed to protecting your Personal Data and ensuring that you are able to enjoy all the rights granted to you in relation to your Personal Data under Data Protection Laws. Nothing in this Privacy Policy should be construed as limiting any of your rights prescribed for under Data Protection Laws.
CHANGES TO THIS PRIVACY POLICY
- We reserve the right to make changes to this Privacy Policy at any time by giving notice to Users on this page and possibly within the Platform and/or, as far as technically and legally feasible, sending a notice to Users via any contact information available to the Company. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. It is strongly recommended to review the Platform and this Privacy Policy periodically for updates.
- Should the changes affect the processing activities performed on the basis of the User's consent, the Company shall collect consent from the User, where required.

LIST OF THIRD-PARTY PROCESSORS

Last updated: 13 July 2022

VISA/MASTER
NETS
PAYNOW
AMEX
UNION PAY
GRAB PAY
ALIPAY
WECHAT PAY