Privacy Policy — Singapore Addendum (PDPA)
This addendum supplements our main Privacy Policy with the additional rights and obligations Singapore residents are afforded under the Personal Data Protection Act 2012 ("PDPA") and the guidance issued by the Personal Data Protection Commission ("PDPC").
1. Compliance framework
We process your personal data in accordance with the PDPA and the PDPC's advisory guidelines. The main Privacy Policy applies in full; this addendum sets out the specific provisions that take effect for Singapore residents.
2. Data Protection Officer (PDPA s. 11(3))
Name: Kenet · Data Protection Officer · privacy@kizzlo.com
Title: Data Protection Officer
Email: privacy@kizzlo.com
Postal address: 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051
3. Your rights under the PDPA
| Right | What you can request | How to exercise |
|---|---|---|
| Access (s. 21) | A copy of your personal data and how it has been used / disclosed in the past 12 months | Settings → Help & Safety → Privacy Rights → Download my data |
| Correction (s. 22) | Correction of inaccurate personal data | Edit your profile, or email privacy@kizzlo.com |
| Withdrawal of consent (s. 16) | Withdrawal of consent to processing | Settings → Privacy |
| Data portability (s. 26H) | Transfer of prescribed data to another organization | Email privacy@kizzlo.com |
We respond to access and correction requests within 30 days. If we cannot, we will notify you of the delay and provide a revised timeframe.
4. Consent
PDPA s. 13 requires consent (or deemed consent) for collection, use, and disclosure. Specifically:
- Account, profile, and messaging: processed under deemed consent (necessary to provide the service you signed up for).
- Marketing emails: processed only with your express opt-in. Manage in Settings → Privacy → Marketing emails.
- Analytics / diagnostics: processed only with your opt-in. Manage in Settings → Privacy → Diagnostics & crash reports.
- Identity verification: processed only with your express opt-in consent at the time of verification.
You can withdraw consent at any time. Some withdrawals (e.g. of consent to process the data necessary to maintain your account) will require us to terminate the account, since we cannot operate the service without that data.
5. Transfers outside Singapore
Some of our processing happens outside Singapore (see our subprocessor list for the full inventory). PDPA s. 26 requires that we ensure such transferred data continues to receive a standard of protection comparable to PDPA. We rely on Standard Contractual Clauses with each subprocessor and on technical and organisational measures (encryption in transit, encryption at rest, access controls, audit logging).
6. Do Not Call (DNC)
We do not currently use voice calls for marketing. If we ever do, we will check the Singapore DNC Register (www.dnc.gov.sg) before any call to a Singapore number.
7. Complaints to the PDPC
If you are not satisfied with our handling of your personal data, you may complain to the Personal Data Protection Commission:
- Website: www.pdpc.gov.sg
- Phone: +65 6377 3131
You may also pursue a private right of action under PDPA s. 32 (in limited cases involving s. 13–22 contraventions).
8. Contact
Privacy / data rights: privacy@kizzlo.com
General support: support@kizzlo.com