One Mission Pte. Ltd. of UEN201809820C (hereinafter referred to “One Mission”; “we”; “us”; “our”) is committed to safeguarding the personal data entrusted to it by individuals. This Privacy Notice (“Notice”) explains how One Mission collects, uses and discloses your personal data so we can serve you better. It also sets out how you can update us or request to be unsubscribed from our records.
By visiting our website, using our services, or providing us with your Personal Data, you acknowledge that you have read and understand the practices, terms and conditions described in this Privacy Notice.
- Your Personal Data
1.1 In this Notice and under the Personal Data Protection Act (2012) (“PDPA”), “Personal Data” refers to any data or information (whether true or not) about you from which you can be identified, either (i) from that data; or (ii) from that data and other information to which we have or are likely to have access. It includes information such as an individual’s name, identification number, address, mobile phone number, email addresses, photos and video images of a person.
1.2 Our website is not intended for minors under the age of 18. We do not knowingly collect, use or disclose Personal Data of minors under the age of 18 without the consent of their parents or legal guardians. If you become aware or suspect that such information has been inadvertently collected, please inform us immediately by contacting our Data Protection Officer (DPO) (refer to Section 9 (Contacting Us)).
- Collection, Use and Disclosure of Personal Data
2.1 Purposes for Personal Data collection, use and disclosure
One Mission may collect, use and/or disclose your Personal Data for the purposes listed below as well as for other purposes you specifically consent to:
a) Registration and use of your user account on our websites or mobile applications, which includes allowing you to set up a unique password so that you can access our websites or mobile applications, or the use of a guest account on our websites or mobile applications. We may use your Personal Data to update, maintain, amend, process a record of your activities on our websites or mobile applications, including purchases made by you or updates to your account. Without limiting the generality of Section 1.1 above, some of the Personal Data we may collect about you includes but is not limited to the following:
• your mobile phone number to which we will use to send authentication codes via SMS to verify your identity;
• your full name, gender, birthdate, and email address; and
• your account status and activities relating to your user account.
b) When you make purchases using our websites or mobile applications, we will have to collect your Personal Data to administer, process, manage and complete your transaction, including but not limited to making warehousing, picking, packing and delivery arrangements, and communicating with you. Without limiting the generality of Section 1.1 above, some of the Personal Data we may collect about you includes but is not limited to the following:
• your product searches on our websites or mobile applications, to provide autocomplete functionality or to provide you with information about products related to your search. Please note that your search results do not constitute Personal Data unless we combine it with other information about you that would allow us to identify you. If we do so, we will treat your search keywords as your Personal Data and store and secure your Personal Data in the manner described under this Notice. We may also use this Personal Data to improve our services;
• your transaction history and payment details when you make a purchase through our websites or mobile applications, which includes the products that you have purchased, order number, time of order, payment amount and payment method. We collect this information (“Order Information”) to complete and secure your transaction, to allow you to review your order and to provide related customer services to you. When you click to make payment, you agree to be directed to a website operated by a third party payment gateway provider who will process and complete your payment to us. Your use of the payment website will be as governed by the provisions of Section 7.1 below. We do not collect or store any of your credit or debit card details or your bank account details. We also use the Order Information to verify your identity, confirm the transaction, process payment and complete delivery and assist you with queries about your order. Further, we may use such Order Information to detect irregular activities to protect your transactions and user account; and
• your name, contact information and Order Information in order to verify your identity if you contact us, and to assist you as you may request, and monitor and improve our customer support services.
c) We may also collect Personal Data from our suppliers, service providers, business partners and contractors. We have a legitimate interest in contacting our suppliers, service providers, contractors and business partners and communicating with them concerning normal business administration such as billing, procurement and logistical services.
d) Marketing and advocacy purposes, including but not limited to informing you about the products, services, events and activities of One Mission and its related organisations, or other information which may be of interest to you, analysing your preferences, online behaviour and transactional behaviour to gain insights so that we can customise the content and types of news, updates, products and services that we present to you through our websites or mobile applications, social media and other means of communication, sending you voluntary surveys and questionnaires from time to time. We may send you communications for marketing advocacy purposes by email, through your user account, post, telephone, SMS or social media messaging.
You have the right to ask us not to process your Personal Information for marketing purposes. Before collecting your Personal Information, we will inform you if we intend to use it for marketing purposes, or if we intend to disclose it to any third party for marketing purposes.
We will give you choices about your Personal Information. Some choices are presented up front in the form of opt-in notices or acceptance boxes for marketing to you or sharing your Personal Information with third parties. You always have the choice to opt-out if you later change your mind. One form of opt-out is clicking the Unsubscribe link in a marketing email. This will take you off our marketing email list. If you do not wish to receive direct marketing material from us or a third party, in addition to following the “Unsubscribe” instructions in a marketing email, you can inform our DPO at the contact details provided below (refer to Section 9 (Contacting Us)).
e) Administration and other servicing purposes, including but not limited to the following:
• To process and administer payments, billings, accounts, benefits/entitlements, credit and reference checks, debt-recovery matters;
• To perform internal operations necessary to provide our services, including troubleshooting software bugs and operational problems, conducting data analysis, testing and research, monitoring and analysing usage and activity trends;
• For compliance monitoring and audit reviews;
• To investigate allegations or suspicions of fraud, misconduct, any unlawful action or omission;
• To archive, back-up or destroy Personal Data; and/or
• To inform you of changes and updates to our services, policies, terms and conditions and other administrative information.
f) Analytics, research, business development and improvement purposes, including but not limited to the following:
• To understand and improve your user experience with our services, websites and mobile applications;
• To derive further attributes relating to you based on your Personal Data, in order to provide you with more targeted and/or relevant information;
• To improve, enhance and develop our current technology, operations and services;
• To improve, enhance or develop new services, websites or mobile applications and new methods or processes for business operations; and/or
• To learn or understand behaviour and preferences of existing or prospective users and identify goods or services that may be suitable for them.
g) To comply with applicable rules, laws and regulations as well as the legal process or legal requirements of any court of competent jurisdiction, government agency or law enforcement authority.
The purposes listed in Section 2.1 may continue to apply even in situations where your relationship with us has been terminated or altered in any way, for a reasonable period thereafter.
2.2 How we collect your Personal Data
One Mission may collect your Personal Data in various ways, including without limitation, when you:
• visit our premises, which are monitored by CCTV surveillance;
• visit and/or use our websites or mobile applications;
• attend/participate in our events, as photos and/or video recordings may be taken;
• intern with us;
• register with us for a user account, our services or events/activities;
• interact with any of our employees, interns, board and committee members, for example via meetings (physical and online), emails or telephone calls;
• respond to our requests for additional Personal Data;
• request that we contact you, for example to be included in a mailing list;
• respond to our initiatives or programmes; and/or
• participate in any research and/or survey conducted by us or our partners/vendors.
We may also collect Personal Data where required or permitted by laws or regulations binding on One Mission for any purpose.
We do not sell or rent any Personal Data that we collect and store.
2.3 Who we may disclose your Personal Data to
We may provide your Personal Data to various third parties for the purposes mentioned above. Such third parties include without limitation:
• financial institutions, payment service providers, payment processors and facilitators;
• debt collectors;
• credit bureaus and other credit reporting agencies;
• background check and anti-money laundering service providers;
• transport, warehousing and logistics service providers;
• recipients of the products that you have purchased;
• cloud-based service providers;
• marketing partners and marketing platform providers;
• data analytics providers;
• research partners, including those performing surveys or research projects in partnership with One Mission or on One Mission’s behalf;
• One Mission’s API developers;
• One Mission interns;
• Professional advisors such as lawyers and auditors;
• Any liquidator, receiver, official assignee/trustee, judicial manager or any other person appointed under or pursuant to any applicable law or court order in connection with the bankruptcy, liquidation, winding up, judicial management or any other analogous process in respect of any individual, company or business;
• Law enforcement officials;
• Government agencies and regulatory bodies;
• Other third-party service providers; and/or
• Any other party to whom you authorise us to disclose your Personal Data.
2.4 Consent
One Mission will always seek your consent to collect, use or disclose your Personal Data, except in specific circumstances where collection, use or disclosure without consent is authorised or required by law. One Mission may not be able to fulfil certain services if you are unwilling to provide consent to the collection, use or disclosure of certain Personal Data. One Mission may assume that you have consented to the collection, use and disclosure of your Personal Data in situations where you provided Personal Data for obvious purposes.
2.5 Notification Obligation
Either before or when we collect your Personal Data, One Mission shall inform you of the purpose for which the Personal Data is collected, except when such Personal Data is provided by you for an obvious purpose (for example, when you provide Personal Data to register for an event, as such the purpose is for that event participation; or when you provide Personal Data to purchase products on our websites or mobile applications, as such the purpose is for that product purchase).
2.6 Accuracy Obligation
One Mission generally relies on the Personal Data provided by you (or your authorised representative). To ensure that your Personal Data is current, complete and accurate, please update us if there are changes to your Personal Data by informing our DPO at the contact details provided below (refer to Section 9 (Contacting Us)). One Mission will not be responsible for relying on inaccurate or incomplete Personal Data provided to us. Failure to provide complete and accurate information may result in our inability to provide you with the products and/or services you have requested and/or other administrative delays.
- Security and Storage
3.1 Protection of your Personal Data
We will endeavour to protect your Personal Data in our possession and will guard against risks of unauthorised access, collection, use, disclosure, copying, modification, disposal or destruction, through reasonable and appropriate security measures. We will endeavour to implement appropriate physical, electronic and managerial procedures to safeguard and secure the Personal Data in our possession.
3.2 Storage and Transfer of your Personal Data
The Personal Data that we collect from you may be stored in Singapore or such other location as we deem necessary to efficiently render One Mission services. We also use cloud-based applications and services to store and process your Personal Information, which may result in your Personal Information being stored outside your country of residence. By providing your Personal Information to us, you fully understand that One Mission may transfer, process and store your Personal Information outside of your country of residence where data protection standards may be different, and disclose your Personal Information to overseas service providers who may not fully comply with the particular laws of your country. However, even in countries whose laws provide for less protection for your Personal Information, One Mission will still handle your Personal Information in the manner described in this Privacy Policy and in conformity with all applicable laws.
3.3 Retention of your Personal Data and Requests to Delete your Personal Data
We will only retain your Personal Data for as long as it is necessary for our business or legal purposes. You may request that your Personal Data be deleted by contacting our DPO (refer to Section 9 (Contacting Us)). Do note that we will not be able to delete your Personal Data if we require it for business or legal purposes. In such circumstances, you may nevertheless withdraw your consent to the further use or disclosure of your Personal Data (refer to Section 4 (Withdrawal of Consent)).
- Withdrawal of Consent
4.1 If you wish to withdraw your consent to any collection, use or disclosure of your Personal Data as set out in this Notice, you may contact the DPO (refer to Section 9 (Contacting Us).
4.2 Please note that if you withdraw your consent to the collection, use, and/or disclosure of your Personal Data, depending on the nature of your request, we may not be able to continue providing our services or perform our contractual obligations to you. Such withdrawal may also result in the termination of any agreements or arrangements you have with us. One Mission’s legal rights and remedies are expressly reserved under such circumstances.
4.3 One Mission will strive to effect your withdrawal of consent within 10 working days of your withdrawal and will notify you if more time is required. Please note that withdrawing consent does not affect our right to continue to collect, use and disclose Personal Data where such collection, use and disclose without consent is permitted or required under applicable laws.
- Access to and Correction of Personal Data
5.1 If you wish to make (a) an access request for access to a copy of the Personal Data which we hold about you or information about the ways in which we use or disclose your Personal Data, or (b) a correction request to correct or update any of your Personal Data which we hold about you, please submit your request to One Mission’s DPO (refer to Section 9 (Contacting Us)) identifying yourself and indicating the Personal Data that the request concerns.
5.2 One Mission will respond to your request as soon as reasonably possible. However, please note that we may refuse your request under certain circumstances as laid out under the PDPA. Please note that a reasonable fee may be charged for an access request. If so, One Mission will inform you of the fee before processing your request.
5.3 If we are unable to respond to your access or correction request within 30 days after receiving your request, we will inform you in writing within 30 days of the time by which we would be able to respond to your request.
- Use of Cookies
6.1 We use “cookies” where a small data file is sent to your browser to store and track anonymised information about you (“Aggregate Information”) when you use our websites or mobile applications. You cannot be identified from Aggregate Information. Cookies are used to track information such as the number of users, their frequency of use, profiles of users, their preferred sites, their preferences, the effectiveness of a campaign, the amount of traffic on our webpages, the number of page views (or page impressions) that occur on our websites and/or mobile applications, and common entry and exit points into our websites and/or mobile applications.
6.2 The Aggregate Information collected is used to assist us in analysing the usage of our websites and/or mobile applications and improving our websites, mobile applications and services.
6.3 Should you wish to disable the cookies associated with these technologies, you may do so by changing the setting on your browser. However, you may not be able to enter or use certain part(s) of our websites, mobile applications or services.
6.4 One Mission’s websites and/or mobile applications may contain social media features, such as Facebook “Share” buttons. These features may collect information about your device’s IP address, set cookies to facilitate interaction with social media features or link you to a social media website where you may post Personal Data. All interactions with social media features are governed by the privacy policy of the social media company providing the feature.
- Third Party Sites
7.1 Our websites and mobile applications may contain links to other websites and applications operated by third parties for your convenience and information. You access these websites and applications at your own risk. To the fullest extent permitted under the law, we are not responsible for a third party’s acts, omissions, data policies or their use of cookies or other tracking technologies, nor the content or security of any third party websites and applications, even if linked to our websites and applications. Any such responsibility and liability is expressly disclaimed and excluded. We recommend that you check the applicable data protection policy of the third party to determine how they will handle any information they collect from you.
- Data Breach Notification
8.1 Even with reasonable protection measures in place, there may be a possibility of a data breach. In the event the data breach is assessed to be notifiable, One Mission will notify the affected individuals as soon as practicable, at the same time or after notifying the Personal Data Protection Commission. If the breach warrants notification to the Commission, One Mission will make notification as soon as practicable but no later than three (3) calendar days upon our assessment.
- Contacting Us
9.1 Should you have any requests, questions or feedback relating to the collection, use or disclosure of your Personal Data, or if you wish to know more about our data protection policies and practices, please contact our DPO at dpo@onemission.sg
.
9.2 We may ask you to verify your identity before we can act on your request or question. We may conduct an identity verification by phone call or email. Depending on your request, we may ask for information such as your name and your contact number. We may also ask you to provide a signed declaration confirming your identity.
9.3 We treat all complaints about a breach of the privacy laws seriously. If you have made a complaint, our DPO will investigate your complaint and respond to you within a reasonable time.
- Changes to this Privacy Notice
10.1 We may from time to time update this Notice to ensure that it is consistent with our future developments, industry trends and/or any changes in legal or regulatory requirements. The latest version of this Notice will be posted here. Your continued use of our website, mobile applications and services constitutes your acknowledgement and acceptance of any changes to this Notice.
Effective: 1 January 2025
Updated: 6 January 2025