Privacy Policy

Scope

This Policy applies to personal data we process in connection with the Site and associated services. If you enter into a contract with us for products or services, additional terms may apply and will be provided at the point of contract.

Personal Data We Collect

We may collect and process:

• Identification and contact data: name, job title, company, email, phone, postal address.
• Account data: preferences, support history.
• Usage data: IP address, device and browser type, pages viewed, links clicked, time and date of visits, referring URLs.
• Marketing and communications data: your preferences for receiving marketing from us and your communication preferences.
• Transactional data: records of enquiries, quotes and purchases (if applicable).

How we collect data

• Direct interactions: forms on the Site, emails, phone calls, event registrations, contract negotiations.
• Automated technologies: cookies, pixels and similar technologies.
• Third parties: analytics providers, marketing platforms, social networks, partners or public sources, in accordance with law.

Why we use your data (purposes and legal bases)

We process personal data for:

• Operating and securing the Site; diagnosing and preventing fraud or abuse (legitimate interests; compliance).
• Responding to enquiries, providing quotes and proposals (contract; legitimate interests).
• Performing and administering contracts with you or your organisation, including billing and support (contract; legal obligations).
• Sending service communications (contract; legal obligations).
• Sending marketing communications where permitted and managing preferences (consent; legitimate interests).
• Improving our Site, services and user experience through analytics (legitimate interests; consent where required).

Data Processing and Storage Consent

• Consent to processing: Where required by law, we will ask you to provide clear, informed consent for the collection, use or disclosure of your personal data for specified purposes. You may withdraw consent at any time using the contact details below or the preference links we provide. Withdrawal does not affect processing carried out before withdrawal.
• Deemed consent for contract necessity: Where the collection, use or disclosure of personal data about you is reasonably necessary for the performance of a contract between you and Guardian Pro Pte. Ltd. (or to take steps at your request prior to entering into a contract), your consent is deemed to be provided for that purpose to the extent permitted by applicable law. In such cases, we will limit processing strictly to what is necessary for contract performance and will also rely on the lawful basis of contract.
• Consent to storage: By using the Site and, where required, providing consent, you acknowledge and agree that your personal data may be stored, processed and transferred as described in this Policy.

Cookies and similar technologies

We use cookies and similar technologies to operate the Site, remember preferences, analyse usage and, where permitted, tailor content. For details, including how to manage your choices, please see our Cookie Policy.

Sharing your data

We may share personal data with:

• Service providers (processors) who provide hosting, analytics, marketing, CRM, payment, security, support and other services under contract and subject to confidentiality and data protection obligations.
• Professional advisers (lawyers, auditors, insurers) under duties of confidentiality.
• Group companies and business partners where relevant to your relationship with us and permitted by law.
• Authorities, regulators or courts where required to comply with law or to protect our rights or users.
• A purchaser or successor in the event of a merger, acquisition or reorganisation, in accordance with applicable law.

Cross border transfers

Your personal data may be transferred to and processed in countries outside Singapore or your home jurisdiction. Where we do so, we will ensure appropriate safeguards are in place, such as adequacy decisions or technical and organisational measures where appropriate (for example, encryption in transit and at rest, access controls and data minimisation).

Storage and security

We take all reasonable precautions and implement all necessary safeguards to protect personal data against unauthorised access, alteration, disclosure or destruction. Measures include:

• Access controls based on least privilege and role based security
• Encryption in transit and at rest where appropriate
• Network and endpoint security, vulnerability management and logging
• Secure development and change management practices
• Vendor due diligence and contractual security requirements
• Staff training and confidentiality obligations

Despite these measures, no system is completely secure. We maintain incident response procedures and will notify you and/or regulators of a data breach where we are legally required to do so.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting or reporting requirements. Retention periods depend on the type of data and context of processing. We will securely delete or anonymise data when it is no longer needed.

Your rights

Subject to applicable law, you may have the right to:

• Access your personal data and receive a copy
• Rectify inaccurate or incomplete data
• Erase data in certain circumstances (right to be forgotten)
• Restrict or object to processing, including direct marketing
• Data portability for information you provided to us
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise your rights, please contact us at connect@guardianproltd.com.

Marketing communications

We may send you marketing about our services if you have opted in, if you are a corporate subscriber under applicable rules, or where otherwise permitted by law. You can opt out at any time via the unsubscribe link in our emails or by contacting us.

Automated decision making

We do not undertake decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects, unless we have a lawful basis and provide you with required information.

Third-party links

The Site may include links to third party sites, plug ins or applications. We do not control third party sites and are not responsible for their privacy statements or practices.

Changes to this Policy

We may update this Policy from time to time. Where required, we will notify you of material changes.

Contact us

If you have questions about this Policy or our data practices, please contact us using the information at the top of this document.

Complaints

You have the right to make a complaint at any time to your local data protection authority.