Privacy Policy
In short. We collect what we need to assess expert applications, match experts to client briefs and administer engagements. We do not sell personal data. You can withdraw consent, or ask for access or correction, at any time by writing to our Data Protection Officer at seahwx@retailexperts.asia.
This Policy explains how Retail Experts Network Pte. Ltd. (UEN 202626961D) ("REN", "we", "us") collects, uses, discloses and protects personal data in accordance with the Personal Data Protection Act 2012 of Singapore (the "PDPA"). It applies to the website retailexperts.asia and to our services.
1. Data Protection Officer
Our Data Protection Officer can be contacted at seahwx@retailexperts.asia, or by post to our registered office: 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051. Please direct all questions, access and correction requests, consent withdrawals and complaints to the DPO.
2. Personal data we collect
- Experts and applicants: name, contact details, LinkedIn profile, career and employment history, credentials and qualifications, expertise areas and markets covered, references, rates and availability, payment and tax details, and the results of verification and background checks conducted with your consent.
- Clients and prospective clients: name, company, role, contact details, and the contents of briefs, engagement records and correspondence.
- Website visitors: information you submit through our forms, and limited technical data necessary to operate, secure and troubleshoot the site (such as IP address and request logs held by our hosting provider).
We ask that you do not submit sensitive personal data, or personal data belonging to third parties, unless it is necessary for the purposes below.
3. Purposes for which we use personal data
We collect, use and disclose personal data to: assess expert applications and carry out vetting, verification and reference checks; match experts with client briefs and present expert profiles to prospective clients; administer engagements, contracts, invoicing and payments; operate our compliance framework, including conflict screening, attestations and record-keeping; respond to enquiries and provide support; maintain the security and integrity of our services; comply with legal, regulatory and accounting obligations; and — with your separate optional consent — send updates about the network.
4. Disclosure
Personal data may be disclosed: to clients, for expert profiles, matching and engagement administration; to experts, to the extent needed to scope and perform an engagement; to service providers who host or process data on our behalf under contractual safeguards (including our website hosting and email delivery providers); to our professional advisers, including lawyers and accountants; in connection with a corporate transaction affecting the business; and where required or permitted by law or by a regulator or court. We do not sell personal data.
5. Overseas transfer
Our website and certain processing services are hosted on infrastructure that may be located outside Singapore. Where personal data is transferred overseas, we take the steps required under the PDPA to ensure the recipient provides a standard of protection comparable to the PDPA, including binding contractual protections with our hosting and processing providers.
6. Consent and withdrawal
By submitting our forms you consent to the collection, use and disclosure described in this Policy for the stated purposes. Marketing consent is sought separately and is entirely optional. You may withdraw any consent at any time by writing to the DPO. We will explain the likely consequences of withdrawal — for example, we may no longer be able to assess your application or match you with engagements — and will give effect to your withdrawal within a reasonable time, subject to any legal obligation to retain records.
7. Access and correction
You may request access to the personal data we hold about you, and information about how it has been used or disclosed in the past year, or request that we correct an error or omission. Write to the DPO. We may charge a reasonable fee for an access request as permitted by the PDPA, and will tell you the fee before proceeding. We respond as soon as reasonably possible and in any event within the timelines the PDPA prescribes.
8. Protection and retention
We protect personal data with reasonable security arrangements appropriate to its sensitivity, including access restricted on a need-to-know basis, encrypted transmission, and vetting of the providers who process data for us. We retain personal data only for as long as it is necessary for the purposes above or as required by law, after which it is securely deleted or anonymised. Applications that are unsuccessful are retained for a limited period so that we can consider you for future opportunities, unless you ask us to delete them sooner.
9. Data breach notification
We maintain a data breach response process. Where a breach is notifiable under the PDPA, we will notify the Personal Data Protection Commission within the prescribed timelines and notify affected individuals where the PDPA requires it.
10. Third-party personal data
If you provide us with another person's personal data — for example a referee, a colleague or a client contact — you confirm that you have obtained their consent to do so and have drawn this Policy to their attention.
11. Do Not Call
We will not send marketing messages or make marketing calls to Singapore telephone numbers except in accordance with the Do Not Call provisions of the PDPA or with your clear and unambiguous consent. You may opt out of marketing at any time, and every marketing message will tell you how.
12. Cookies and analytics
The website does not use advertising cookies or third-party tracking pixels. Our hosting provider records standard server logs for security and performance. If we introduce privacy-respecting analytics in future, we will update this Policy before doing so.
13. Updates to this Policy
We may update this Policy from time to time. The current version is always published on this page with its effective date, and material changes will be notified to registered users.