Indigo Precious Metals Pte Ltd (“Company”, “we”, “us”, or “our”) is committed to protecting the confidentiality and privacy of personal data.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”).

By engaging our services, accessing our Website, or providing personal data to us, you consent to the practices described in this Privacy Policy.

“Personal Data” refers to data about an individual who can be identified from that data.

We may collect the following types of personal data:

1. Full name;
2. NRIC / FIN / Passport number;
3. Date of birth;
4. Residential and mailing address;
5. Contact number and email address;
6. Occupation and employment information;
7. Bank account details;
8. Transaction history;
9. Copies of identification documents;
10. Source of funds information;
11. Any other information required for compliance purposes.

For corporate customers, we may collect:

1. Company registration details;
2. Directors’ and shareholders’ information;
3. Beneficial ownership details;
4. Corporate documents.

We may disclose personal data where required by law, regulation, court order, or regulatory authority.

Under the Precious Stones and Precious Metals (Prevention of Money Laundering and Terrorism Financing) Act 2019 and other applicable laws, we may disclose information to competent authorities without prior notice.

We may file suspicious transaction reports where legally required.

We may disclose personal data to:

1. Banks and payment service providers;
2. Logistics providers;
3. Insurance providers;
4. Professional advisers (lawyers, auditors, compliance consultants);
5. Regulatory authorities;
6. IT service providers and system vendors, including providers supporting the delivery and verification of one-time passwords (“OTPs”).

Third parties engaged by us are required to maintain confidentiality and data protection standards consistent with the PDPA.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy.

For regulatory compliance, certain records may be retained for a minimum of five (5) years or such longer period as required by law.

When no longer required, personal data will be securely destroyed or anonymised.

We implement reasonable administrative, physical and technical safeguards to protect personal data from:

1. Unauthorised access;
2. Collection;
3. Use;
4. Disclosure;
5. Copying;
6. Modification;
7. Disposal.

Despite our safeguards, no transmission over the internet is completely secure. Customers transmit data at their own risk.

Customers are responsible for ensuring that personal data provided is accurate and up to date.

The Company shall not be responsible for consequences arising from inaccurate information provided.

You may request access to your personal data or request corrections by contacting us in writing.

We may charge a reasonable administrative fee for access requests.

We may refuse access where permitted under the PDPA.

You may withdraw consent to the collection, use or disclosure of personal data by written notice.

Withdrawal of consent may affect our ability to provide services, and does not affect any collection, use, disclosure, or retention of personal data that is required or permitted by law.

Our Website may also use analytics tools to help us understand website usage and improve user experience.

Cookies may collect:

1. IP address;
2. Browser type;
3. Pages visited;
4. Time spent on website.

Users may adjust browser settings to decline cookies.

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure comparable protection standards are applied.

The Company may update this Privacy Policy from time to time.

The latest version will be published on our website.