1. INTRODUCTION

• 1.1

  Indigo Precious Metals Pte Ltd (“Company”, “we”, “us”, or “our”) is committed to protecting the confidentiality and privacy of personal data.

• 1.2

  This Privacy Policy explains how we collect, use, disclose, store, and protect personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”).

• 1.3

  By engaging our services, accessing our Website, or providing personal data to us, you consent to the practices described in this Privacy Policy.

2. PERSONAL DATA WE COLLECT

• 2.1

  “Personal Data” refers to data about an individual who can be identified from that data.

• 2.2

  We may collect the following types of personal data:

• a)

  Full name;

• b)

  NRIC / FIN / Passport number;

• c)

  Date of birth;

• d)

  Residential and mailing address;

• e)

  Contact number and email address;

• f)

  Occupation and employment information;

• g)

  Bank account details;

• h)

  Transaction history;

• i)

  Copies of identification documents;

• j)

  Source of funds information;

• k)

  Any other information required for compliance purposes.

• 2.3

  For corporate customers, we may collect:

• a)

  Company registration details;

• b)

  Directors’ and shareholders’ information;

• c)

  Beneficial ownership details;

• d)

  Corporate documents.

3. PURPOSES OF COLLECTION

•  

  We collect and use personal data for the following purposes:

• a)

  Processing purchases and transactions;

• b)

  Administering accounts and services;

• c)

  Conducting customer due diligence under AML/CFT requirements;

• d)

  Verifying identity;

• e)

  Complying with legal and regulatory obligations;

• f)

  Managing storage and vaulting, and related custody services, where applicable;

• g)

  Responding to enquiries and requests;

• h)

  Maintaining internal records;

• i)

  Improving our services and website;

• j)

  Preventing fraud and unlawful activity.

4. LEGAL AND REGULATORY DISCLOSURES

• 4.1

  We may disclose personal data where required by law, regulation, court order, or regulatory authority.

• 4.2

  Under the Precious Stones and Precious Metals (Prevention of Money Laundering and Terrorism Financing) Act 2019 and other applicable laws, we may disclose information to competent authorities without prior notice.

• 4.3

  We may file suspicious transaction reports where legally required.

5. DISCLOSURE TO THIRD PARTIES

• 5.1

  We may disclose personal data to:

• a)

  Banks and payment service providers;

• b)

  Logistics providers;

• c)

  Insurance providers;

• d)

  Professional advisers (lawyers, auditors, compliance consultants);

• e)

  Regulatory authorities;

• f)

  IT service providers and system vendors.

• 5.2

  Third parties engaged by us are required to maintain confidentiality and data protection standards consistent with the PDPA.

6. DATA RETENTION

• 6.1

  We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy.

• 6.2

  For regulatory compliance, certain records may be retained for a minimum of five (5) years or such longer period as required by law.

• 6.3

  When no longer required, personal data will be securely destroyed or anonymised.

7. DATA SECURITY

• 7.1

  We implement reasonable administrative, physical and technical safeguards to protect personal data from:

• a)

  Unauthorised access;

• b)

  Collection;

• c)

  Use;

• d)

  Disclosure;

• e)

  Copying;

• f)

  Modification;

• g)

  Disposal.

• 7.2

  Despite our safeguards, no transmission over the internet is completely secure. Customers transmit data at their own risk.

8. ACCURACY OF DATA

• 8.1

  Customers are responsible for ensuring that personal data provided is accurate and up to date.

• 8.2

  The Company shall not be responsible for consequences arising from inaccurate information provided.

9. ACCESS AND CORRECTION

• 9.1

  You may request access to your personal data or request corrections by contacting us in writing.

• 9.2

  We may charge a reasonable administrative fee for access requests.

• 9.3

  We may refuse access where permitted under the PDPA.

10. WITHDRAWAL OF CONSENT

• 10.1

  You may withdraw consent to the collection, use or disclosure of personal data by written notice.

• 10.2

  Withdrawal of consent may affect our ability to provide services, and does not affect any collection, use, disclosure, or retention of personal data that is required or permitted by law.

11. COOKIES AND WEBSITE DATA

• 11.1

  Our Website may also use analytics tools to help us understand website usage and improve user experience.

• 11.2

  Cookies may collect:

• a)

  IP address;

• b)

  Browser type;

• c)

  Pages visited;

• d)

  Time spent on website.

• 11.3

  Users may adjust browser settings to decline cookies.

12. CROSS-BORDER TRANSFER

• 12.1

  Where personal data is transferred outside Singapore, we will take reasonable steps to ensure comparable protection standards are applied.

13. CONTACT INFORMATION

For any queries regarding this Privacy Policy or personal data matters, please contact:

Indigo Precious Metals Pte Ltd
Email: [email protected]

Attention: Data Protection / Privacy Matters
Telephone: +65 6223 0185

14. POLICY UPDATES

• 14.1

  The Company may update this Privacy Policy from time to time.

• 14.2

  The latest version will be published on our website.