Privacy Policy
DATA PROTECTION NOTICE
This Data Protection Notice (“Notice”) sets out the basis on which Kenneth & Co (“we”, “us”, or “our”) may collect, use, disclose, or otherwise process personal data of our customers in accordance with the Personal Data Protection Act 2012 (“PDPA”) of Singapore. This Notice applies to personal data in our possession or under our control, including personal data in the possession of organisations which we have engaged to collect, use, disclose or process personal data for our purposes.
PERSONAL DATA
1. As used in this Notice:
“Customer” means an individual who (a) has contacted us through any means to find out more about any goods or services we provide, or (b) may, or has, entered into a contract with us for the supply of any goods or services.
“Personal data” means data, whether true or not, about a customer who can be identified: (a) from that data; or (b) from that data and other information to which we have or are likely to have access.
2. Depending on your interaction with us, we may collect personal data including but not limited to: name, identification numbers (e.g., NRIC, FIN, passport), contact details (address, email, phone), nationality, gender, date of birth, marital status, photographs and audio-visual information, employment and financial information (e.g., bank account details), education and immigration history, and other relevant documents such as resumes, certificates, and payslips.
3. Other terms used in this Notice shall have the meanings given to them in the PDPA where the context permits.
COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA
4. We collect your personal data:
- Directly from you, or via your authorised representative with your consent;
- From third-party partners authorised by you (e.g., sister company WOLA);
- In compliance with applicable laws where consent is not required.
5. We use your personal data for purposes including, but not limited to:
- Providing, managing, and improving our goods and services such as PR immigration applications and education packages;
- Collaborating with our sister brand and partners to facilitate internships, employment, and other related programs;
- Verifying your identity and processing payments;
- Handling queries, complaints, and feedback;
- Communicating updates, event invitations, and marketing promotions (only with your consent);
- Conducting internal analytics, reporting, and operational improvements;
- Complying with legal or regulatory obligations.
6. Disclosure to Third Parties:
We may disclose your personal data to third parties solely for the purposes listed above, including:
- Our authorised partners and affiliates such as WOLA for internship and employment services;
- Service providers and vendors who perform functions on our behalf, including CRM platforms, marketing and advertising agencies, email and SMS providers, IT support, payment processors, and data analytics providers;
- Digital advertising platforms (e.g., Meta, Google, TikTok) to enable targeted marketing campaigns, strictly with your explicit consent;
- Government agencies or law enforcement authorities as required or permitted by law.
All third parties are contractually required to protect your personal data and use it only for authorised purposes. We do not sell your personal data.
CONSENT AND WITHDRAWAL
7. By providing your personal data or engaging with us, you consent to the collection, use, and disclosure of your personal data as described herein.
8. You may withdraw your consent at any time by submitting a written request to our Data Protection Officer (DPO). We will inform you of the consequences of such withdrawal, which may include inability to provide certain services.
9. Withdrawal of consent will not affect any collection, use, or disclosure permitted or required by law without your consent.
SECURITY OF PERSONAL DATA
10. We implement reasonable administrative, technical, and physical safeguards to protect your personal data against unauthorised access, use, disclosure, modification, or loss.
11. While we strive to protect your data, no security system is completely infallible. You acknowledge and accept this inherent risk.
ACCESS, CORRECTION, AND RETENTION
12. You may request access to, or correction of, your personal data by contacting our DPO. We may charge a reasonable fee for access requests and will respond within 30 days.
13. We retain personal data only as long as necessary to fulfil the purposes outlined or as required by law. Once no longer needed, we will securely delete or anonymise your data.
CROSS-BORDER TRANSFER
14. Some third-party service providers or data storage systems may be located outside Singapore. We will ensure comparable data protection standards are maintained when transferring personal data overseas.
DATA BREACH NOTIFICATION
15. In the event of a data breach involving your personal data, we will promptly take steps to contain and investigate the incident. Where required by law, we will notify the Personal Data Protection Commission (PDPC) and affected individuals.
CONTACT INFORMATION
16. For any enquiries, requests, or complaints regarding your personal data, please contact our Data Protection Officer:
- Email: dpo@kennethac.com
- Phone: 6970 1392
- Address: 133 New Bridge Rd, #22-01/02 Chinatown Point, Singapore 059413
CHANGES TO THIS NOTICE
17. We may update this Notice periodically. Updates will be posted on our website with the effective date. Continued use of our services constitutes acceptance of any changes.
Last Updated Date: 23 July 2025
