Privacy and Policy

Data Protection Policy (Surveys – Internal Use Only)

Use and Disclosure of Personal Data

We use personal data solely for the following purposes:

We do not share, sell, or disclose your identifiable personal data to any third party, client, partner, or external organisation. Survey responses may be used internally in aggregated or anonymised form only. No external reporting of identifiable data occurs.

All other sections remain unchanged.

 

We generally do not collect your personal data unless it is provided to us voluntarily by you directly or via a third party who has been duly authorised by you to disclose your personal data to us after you have been notified of the purposes for which the data is collected, and you have provided written consent to the collection and usage of your personal data for those purposes, or collection and use of personal data without consent is permitted or required by the PDPA or other laws. We shall seek your consent before collecting any additional personal data and before using your personal data for a purpose which has not been notified to you (except where permitted or authorised by law).

We may collect and use your personal data for any or all of the following purposes:

• performing obligations in the course of or in connection with our provision of the goods and/or services requested by you;
• managing your relationship with us;
• any other purposes for which you have provided the information.

We may disclose your personal data:

• where such disclosure is required for performing obligations in the course of or in connection with our provision of the goods and services requested by you; or
• to third party service providers, agents and other organisations we have engaged to perform any of the functions with reference to the above mentioned purposes.

 

We implement reasonable organisational, physical, and technical security measures to protect personal data. Access is limited to authorised staff on a need-to-know basis under confidentiality obligations. Third-party processors are bound by equivalent protections via contracts.

 

We rely on you for accuracy but take reasonable steps to keep data current when used for decisions affecting you. Notify us of changes at business@tla.asia.

Personal data is retained only as long as necessary for the notified purpose or legal requirements—typically up to 6 years. Thereafter, it is securely deleted, destroyed, or anonymised.

 

 

You may:

Contact our DPO with identity verification. Withdrawal does not affect prior lawful processing or PDPA exceptions.

 

Submit written withdrawal to the DPO. We process within reasonable time, notify consequences (e.g., inability to process leads), and cease further use/disclosure unless permitted by law.

 

Overseas transfers occur only where the recipient provides comparable PDPA-standard protection. We notify you if applicable.