Personal Information Collection and Handling Policy
SHIP-DA SG.PTE.LTD. (hereinafter called the “Company", “we”, “us”, “our”) is committed to protect users' personal information and also to comply with applicable laws and regulations for users’ personal information.
This privacy policy describes exactly how and why the Company collects and uses personal information from its users (this “Privacy Policy”). It also outlines additional measures that are taken to protect their personal information. Through notices on individual changes, the Company will inform clients if there are any changes to this Privacy Policy.
This policy shall take effect on 19, December, 2023
1. What and How Personal Information is collected
The Company collects and processes the following personal information related to service in a variety of ways.
Information you provide directly.
Membership registration and management
Required information: ID, e-mail address, Name, Password, Phone number, Mobile phone number, Address, Company name.
Provision of goods or services
Required information: Exporter’s/Importer’s information for international transportation
(Including but not limited to Company name, Manager name, e-mail address, Phone number, Company Address).
Statistics on customer service use and Introduction and guidance on various information and event related matters
Required information: Name, Phone number, Mobile phone number, e-mail address, Address, Inquiry
Information received indirectly from your use
Automatically collected in the process of using the service
Collected information: unique device identifiers, access record, service usage record, fraudulent record, IP address, operating system information, screen size, locational information
Your Options
You have the right to refuse to provide the Company with certain types of information. In particular cases, this can limit your ability to use services. The company will explain these limitations so you can make an informed decision.
- The Company will not collect “sensitive information”, such as racial or ethnic origin opinions, political opinions, religious or philosophical beliefs, trade-union membership, genetic and biometric data processed solely to identify a human being, a person’s sex life or sexual orientation.
- The Company will not collect personal information of under 18 years of age child.
2. Purpose(s) we collect and use personal information
The Company collects only minimum range of personal information according to the consent of customer and processes the personal information for the purpose of the collection.
The Company uses the collected personal information for the following purposes:
Membership Registration and Management
- To confirm the intention to join as a member
- To identify yourself to provide membership service
- To maintain and to manage membership
- To prevent illegal use of services
- To give various notices
- To keep records for dispute resolution
Provision of goods or services
- To provide services
- To send bills
- To provide contents
- To provide customized content and personalized services based on your past activities
- To verify identity
Use in marketing and advertising
- To develop new services
- To provide customized content and personalized services based on your past activities
- To provide advertising and promotions
- To help you or your device register for services
- To provide customized content and personalized services based on your past activities
- To provide advertising, promotions, and offers that can interest you
- For assessment and analysis of the Company’s market, customers, products, and services to help us better understand the Company’s customers
[For European Economic Area (EEA) Residents only]
The Company is the data controller of your personal information as described above.
If you give consent, you can always revoke by contacting us as specified in contact information below of this Privacy Policy.
3. Sharing and provision of collected personal information
In principle, the Company does not disclose any of the personal information collected;
But only to those who need it to further provide services or to help with your requests.
We will also disclose your information to the following entities, only to the extent that this will be necessary to provide the company’s services.
(1) Affiliates: Other ShipDa Group companies which we control or own, Affiliates may also include other companies related by common or control.
| Company Name | SELLER-NOTE Co.Ltd. (South Korea) |
|---|---|
| Personal Information | name, mobile number, phone number, departure(pickup) address, arrival address, e-mail and other information you provide directly. |
| Purpose of sharing | • To proceed export/ import/ customs clearance • To provide quotes • To arrange logistics and provide tariff services • To provide data analytical logistics service |
| Retention Period | • At least the duration for which the information is used to provide you with a service • As required under law, a contract, or with regard to the company’s statutory obligations |
(2) Service Providers: Companies that provide services for or on behalf of us, such as companies that help us with customer contact centers, customer care activities, customer event organizers, advertising (including customized advertising on our websites, third-party websites, or online platforms), conducting customer satisfaction surveys, or billing, or that send emails on our behalf, performing data analytics, or operating data management platforms. These providers are also committed to protecting your information.
| Company Name | View Full List |
|---|---|
| Personal Information | name, mobile number, phone number, departure(pickup) address, arrival address, e-mail and other information you provide directly. |
| Purpose of sharing | • To proceed export/ import/ customs clearance • To provide quotes • To arrange logistics and provide tariff services • To provide data analytical logistics service |
| Retention Period | • At least the duration for which the information is used to provide you with a service • As required under law, a contract, or with regard to the company’s statutory obligations |
| Company Name | Zendesk, Inc. |
|---|---|
| Contact Information | privacy@zendesk.com Tōkyōtochūōku Kyōbashi 2 - 2 - 1 Kyōbashi edoguran |
| Purpose of sharing | Name, e-mail address, Phone number, Position, Company name, Type of business※ The above required information includes not only the initially collected information, but also information changed due to information modification |
| Purpose of sharing | • To operate and manage customer service system • To provide customer support |
| Retention Period | • At least the duration for which the information is used to provide you with a service • As required under law, a contract, or with regard to the Company’s statutory obligations |
| Company Name | Mailchimp |
|---|---|
| Contact Information | privacy@mailchimp.com The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000Atlanta, GA 30308 USA |
| Purpose of sharing | Name, e-mail address, Phone number, Position, Company name, Type of business※ The above required information includes not only the initially collected information, but also information changed due to information modification |
| Purpose of sharing | • To operate and manage customer service system • To provide customer support (e.g., sending an email to customers) |
| Retention Period | • At least the duration for which the information is used to provide you with a service • As required under law, a contract, or with regard to the Company’s statutory obligations |
(3) Parties in Connection with Corporate Transactions:
The Company may disclose your information to a third party as part of a merger or transfer, acquisition or sale, or in the event of a bankruptcy.
(4) Instances can disclose your information without first obtaining your consent:
Please note that the Company may disclose your personal data to third parties without first obtaining your consent in certain situations, including, without limitation, the following:
- (a) cases in which the disclosure is required based on the applicable laws and/or regulations;
- (b) cases in which the purpose of such disclosure is clearly in your interests, and if consent cannot be obtained in a timely way, provided that we shall, as soon as may be practicable, notify you of the disclosure and the purposes of the disclosure;
- (c) cases in which the disclosure is necessary to respond to an emergency that threatens the life, health or safety of yourself or another individual;
- (d) cases in which there are reasonable grounds to believe that the health or safety of yourself or another individual will be seriously affected and consent for the disclosure of the data cannot be obtained in a timely way, provided that we shall, as soon as may be practicable, notify you of the disclosure and the purposes of the disclosure;
- (e) cases in which the disclosure is necessary for any investigation or proceedings;
- (f) cases in which the personal data is disclosed to any officer of a prescribed law enforcement agency, upon production of written authorization signed by the head or director of that law enforcement agency or a person of a similar rank, certifying that the personal data is necessary for the purposes of the functions or duties of the officer; and/or
- (g) cases in which the disclosure is to a public agency and such disclosure is necessary in the public interest.
The instances listed above are not intended to be exhaustive. For an exhaustive list of exceptions, you are encouraged to peruse the First and Second Schedules of the Personal Data Protection Act 2012 (the “PDPA”) which is publicly available at https://sso.agc.gov.sg/.
(5) Other parties with your consent or at your direction: In addition to the disclosures described in this Privacy Policy, we may share information about you with third parties when you separately consent to or request such sharing.
4. Transfer to other countries of personal information collected
To provide services to you, your personal information may be transferred, stored and processed within and outside of Singapore as table below.
Where personal information is transferred by the Company to any third parties outside of Singapore, we will ensure that such transfers are compliant with the requirements under the PDPA. However, please note that the data protection and other laws of countries to which your information may be transferred might not be as comprehensive as those in your country.
| Recipients of personal Information | View Full List |
|---|---|
| Items of personal Information | name, mobile number, phone number, departure(pickup) address, arrival address, e-mail and other information you provide directly. |
| Purpose of using personal Information | • To proceed export/ import/ customs clearance • To provide quotes • To arrange logistics and provide tariff services • To provide data analytical logistics service |
| Country and Method transferred | • Country transferred: Refer to the “Country Transferred” column in the List • Date transferred: Transmission through the network at the time of using the Internet-related services provided on the ShipDa representative website. |
| Period of Retention | • At least the duration for which the information is used to provide you with a service • As required under law, a contract, or with regard to the company’s statutory obligations |
| Recipients of personal Information | Zendesk, Inc. |
|---|---|
| Contact Information | privacy@zendesk.com Tōkyōtochūōku Kyōbashi 2 - 2 - 1 Kyōbashi edoguran |
| Items of personal Information | Name, e-mail address, Phone number, Position, Company name, Type of business※ The above required information includes not only the initially collected information, but also information changed due to information modification |
| Purpose of using personal Information | • To operate and manage customer service system • To provide customer support |
| Country and Method transferred | • Country transferred: Japan • Date transferred: Transmission through the network at the time of using the customer services provided on the ShipDa representative website. |
| Period of Retention | • At least the duration for which the information is used to provide you with a service • As required under law, a contract, or with regard to the Company’s statutory obligations |
| Recipients of personal Information | Mailchimp |
|---|---|
| Items of personal Information | privacy@mailchimp.com The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA |
| Personal Information | Name, e-mail address, Phone number, Position, Company name, Type of business※ The above required information includes not only the initially collected information, but also information changed due to information modification |
| Purpose of using personal Information | • To operate and manage customer service system • To provide customer support (e.g., sending an email to customers) |
| Country and Method transferred | • Country transferred: USA • Date transferred: Transmission through the network at the time of sending e-mails. |
| Period of Retention | • At least the duration for which the information is used to provide you with a service • As required under law, a contract, or with regard to the Company’s statutory obligations |
[For European Economic Area (EEA) Residents Only]
In addition, your use of the services can also involve the transfer, storage, and processing of your personal information to other countries;
such countries include, without limitation, countries in the European Economic Area, the United States of America, China, Singapore, Vietnam, India, Canada, the Philippines, and Japan.
The Company will take appropriate measures, in compliance with applicable law, to ensure that your personal information remains protected.
Such measures include the use of Standard Contractual Clauses to safeguard the transfer of data outside of the EEA.
To request more information or to obtain a copy of the contractual agreements in place, contact us. See the contract information section below.
5. Retention Period of Personal Information
The Company disposes of personal information as soon as it is no longer required to fulfill the original purposes of collecting and using the information.
Each personal information processing and retention period is as follows:
Membership registration and management (Required information: Identification Numbers, e-mail address, Name, Password, Phone number, Mobile phone number, Address, Company name)
- In the cases of following reasons, until the end of the reasons
- If an investigation is in progress due to a violation of the relevant laws and regulations, until the investigation is completed.
- In case of remaining debts and debts due to service use, until the relevant receivables and debts are settled.
Provision of goods or services (Required information: Exporter’s/Importer’s information for international transportation→Company name, Manager name, e-mail address, Phone number, Company Address)
- Records on collection/processing and use of credit information: 3 years
- Records on consumer complaints or dispute resolution: 3 years
- Records on payment and supply of goods: 5 year
- Records on contract or subscription withdrawal: 5 years
Automatically collected in the process of using the service (Collected information: unique device identifiers, access record, service usage record, fraudulent record, IP address, operating system information, screen size, locational information) → the Company may store the personal information during the period which the personal information is needed for the Company to provide the services.
In case any applicable laws and regulations require any specific retention period for a personal information, the Company will store the personal information during the specific retention period required by the applicable laws and regulations.
6. Measures to Ensure the Security of Personal Information
The Company takes the following technical, administrative, and physical measures needed to ensure security:
(1) Establishment and Execution of Internal Management Plan
The Company establishes an internal management plan and executes it to protect personal information.
(2) Reducing and Training Personnel for the Handling of Information
The Company appoints and minimizes the number of employees who handle personal information, and implements measures to manage personal information more efficiently.
(3) Restrictions on Access to Personal Information
The Company takes the necessary steps to monitor access to personal information. This is done by granting, changing, and removing access to the database systems where personal information is handled and stored. The Company also deploys and uses an intrusion prevention system to control unauthorized access.
(4) Keeping Access Records and Preventing Tampering
The Company retains records of access to the personal information handling system (e.g. web log and summary data) for at least 6 months and uses security features to prevent tampering, theft and any loss of access records.
(5) Technical Measures against Hackers
To prevent the loss, destruction of, or damage to personal data caused by hackers, the Company has installed security software that has regular updates and monitoring. In addition, the Company has also installed a system in off-limits areas for technical/physical monitoring and blocking. Furthermore, the Company also provides network traffic monitoring and the detection of any attempts to, for example, make illegal changes to information.
The Company takes physical and technical safeguards to secure the information we collect. However, please note that although the Company takes reasonable steps to protect your information, no website, Internet transmission, computer system, or wireless connection is completely secured.
7. User's or Legal Representative's Rights and How to Exercise Them
The Company would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access:
You have the right to request the Company for copies of your personal data by contacting us as specified in contact information below.
The right to rectification:
- You have the right to request the Company for copies of your personal data by contacting us as specified in contact information below.
- Viewing and correcting personal information can be done through "MyPage > Settings > User” menu.
The right to erasure:
- You have the right to request that the Company erases your personal data, under certain conditions
- The deletion of personal information can be done by withdrawing through "MyPage > Settings > User > Leave" menu. The deletion can be done by contacting us as specified in contact information below.
- Withdrawal of consent to collect and use personal information can be performed by withdrawing through "MyPage > Settings > User > Leave" menu.
The right to restrict processing:
You have the right to request that the Company restricts the processing of your personal data, under certain conditions.
The right to object to processing:
You have the right to object to the Company’s processing of your personal data, under certain conditions.
The right to data portability:
You have the right to request that the Company transfers the data that we have collected to another organization, or directly to you, under certain conditions
Personal information that is cancelled, restricted or deleted, from the request of the user or their legal representative, will be handled and described as Retention Period of Personal Information. This information will not be accessed or used for any other purpose.
8. Cookies
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. Cookies eliminate the inconvenience of re-entering by storing the ID entered by the member on the login screen and automatically displaying the saved ID upon re-login. When you visit the Company’s websites, the Company can collect information from you automatically through cookies or similar technology.
There are a number of different types of cookies, however, the Company’s website uses
- Strictly necessary Cookie - the Company uses these cookies to maintain your session.
- Preferences Cookie - the Company uses these cookies to recognize you on the Company’s website and remember your previously selected preferences. These could include what language you prefer and location you are in.
- Statistics Cookie - the Company uses these cookies for statistic purpose.
- Marketing Cookie - the Company uses these cookies for marketing purpose.
You can set your browser not to accept cookies at settings on web browser > internet options > privacy > Block sites. However, in a few cases, part of the Company’s website features cannot function as a result.
9. Manager in Charge of Personal Information Management
The Company appoints the following department or representative to protect personal information and handles complaints relating to personal information.
- Name: Data Protection Officer
- Contact Telephone (Office): +82 2 6956 7768
- Email: jongha.kim@ship-da.com
Users can file complaints related to privacy and security issues that can arise from their use of the Company's services to the Chief Privacy Officer or the responsible department. The Company will promptly provide satisfactory answers to users' complaints.
10. Duty to Notify
As part of our efforts to ensure that we properly manage, protect and process your personal information, we will be reviewing our policies, procedures and processes from time to time.
We reserve the right to amend the terms of this Privacy Policy at our absolute discretion. If the Company makes any additions, deletions, or changes to the present Privacy Policy, it will notify through "Notices" on its website at least seven (7) days prior to such changes.
You are encouraged to visit above website from time to time to ensure that you are well informed of our latest policies in relation to personal information protection.
Notification Date: 19, December 2023
Enforcement Date: 19, December 2023
