1. Who are we?
We are a digital services company operating in Korea with a team of experts in digital, design, and data, aiming to provide impressive digital experiences to our customers.
2. Who is responsible for your personal information?
We will clearly specify who is responsible for your personal data.
If you are a Guest and apply for a role advertised on our Platform,
we will jointly process your application details (including any personal data)
with the advertiser to whom you applied.
In such cases, both we and the advertiser act as data controllers (or the equivalent term in your jurisdiction) of your personal data.
In all other cases where we collect your personal data,
we act solely as the data controller of that information.
The data controller (or its equivalent) for your personal data is defined as follows:
a. YAXOK Limited — for all general YAXOK users.
b. YAXOK users and designated entities — as joint or independent data controllers, depending on applicable data protection laws.
3. What personal information do we collect?
We collect various types of information about you depending on how you interact with us and use our products and services.
For example, to sign up as a registered user on our Platform or to access YAXOK Services (including as a Guest), you must provide basic information such as your name and email address.
If you are a Guest and create a profile, we may collect additional personal information on behalf of our advertisers, depending on your ownership status.
The main types of information we may collect (including personal information) include, but are not limited to, the following:
a. If you are a registered user
- General Data: Name, email address, and password. When setting up your profile, you may provide your country of residence (including home and preferred location) and other personal details uploaded to the Platform or displayed in your candidate profile.
- Guest-Specific Data: Depending on the advertiser, we may collect personal details such as your resume, cover letter, answers to role-related questions, or selection criteria.
- Contact Data: Email, mobile number, home and contact addresses, company information (if applicable), and linked login accounts (Google, Facebook, Apple ID). For companies, we may also collect the company name, business address, and primary contact details.
- Usage and Device Data: Visit logs, device ID, cookies, pages visited, search and click activity, IP address, browser type, operating system, timestamps, and clickstream data. This information is collected automatically through cookies placed on your browser or device.
- Third-Party Data: Name, email, mobile number, address, and work-related information shared through external platforms.
- Location Data: Home or contact address and device location (only collected if permission is granted, and stored locally on your device).
b. If you are an unregistered user
We may still collect certain information such as usage and device data, contact data, and/or location data.
This typically occurs when you contact us via phone, email, or other online interactions without registering.
c. If you are a juvenile user
If you are under the minimum age set by applicable privacy laws, you confirm that your parent or legal guardian is aware of and agrees to this Privacy Policy.
Where required by law, you are responsible for obtaining valid parental consent before providing any personal information.
We may request proof of such consent and reserve the right to delete your data if consent cannot be verified.
We are not liable for any personal data collected without proper parental consent.
d. Other categories of personal information
We may also collect any other personal information that you voluntarily provide when cooperating with us, such as during surveys, promotions, or other engagements.
4. Do you collect sensitive information?
In most cases, we do not need to collect sensitive information from you when you interact with us.
You should not provide or disclose any sensitive information that is unnecessary or irrelevant.
Guests should pay particular attention to this and avoid sharing sensitive data unless absolutely required.
However, in certain circumstances, we may collect and process your sensitive information.
We only do so under the following conditions:
a. You have voluntarily included sensitive information in documents or other materials provided to the Owner during the engagement process, or in your profile, and you thereby consent to our collecting and processing it.
b. You have explicitly consented to D’craft sharing your sensitive information with us.
c. There is another valid legal basis that allows us to collect and process such information.
5. How do you collect personal information?
We collect your personal information in a number of different ways:
a. Directly from you
We collect your personal information directly from you (including but not limited to) when you register and create an account with us, use our products and services (including when you communicate with us), or simply visit our Platforms.
b. Exploration Group
We may also receive or collect your personal information from other entities within the D’craft Group from time to time, in accordance with the relevant entity’s privacy policy and/or applicable privacy laws or other applicable laws (as applicable).
c. Indirectly
We may also collect your personal information through the following third parties:
When you register and log in to your account through Google, Facebook, or Apple.
If you register or log in using your Google or Facebook login details or Apple ID, you grant Google, Facebook, or Apple (as applicable) permission to share your data with us, such as your name and email address.
If you already have an account registered with the same email address, your existing account will be linked to the login information of your linked account.
When using an Apple ID, you can choose to hide your email address from us, and instead, Apple will provide us with a random email address to be linked to your account.
Please note that updating your email address by accessing the “Settings” section of your account will not unlink your account from the login details of your linked account.
You can unlink your Google login details from the “Linked Accounts” page of your Google Account.
You can unlink your Facebook login details in the “Apps & Websites” settings of your Facebook account.
You can unlink your Apple login details using the “Sign in with Apple” or “Apps Using Apple ID” settings in your Apple ID account settings.
Even if you unlink a linked account, we will still retain the personal information you shared with us when you first registered your account.
For example, when we work with third parties, such as service providers and partners (including recruitment software providers).
If you are a Guest, we may collect additional personal information about you through the Owner if that information is captured on our Platform during the application process.
We may also collect personal information about you from government, law enforcement, and regulatory authorities, including but not limited to police, immigration, customs, and border security agencies, where required.
d. Online Activities
When you use the Platform of any entity within D’craft and interact with our advertising on third-party websites, we use cookies to collect usage and device data about you.
For more information about cookies, usage, and device data, see Section 11 below.
6. How do we use your personal information?
We collect personal information from you where we have a legal basis to do so and for the purposes set out below.
a. To provide products and services to you
We use your information to provide products and services, including but not limited to: supporting Owner roles, recruitment processes, processing transactions, and identifying you as a registered user (including through the use of tools that incorporate artificial intelligence and machine learning).
Personal Data Categories: General Data, Contact Data, Background Data, Usage and Device Data, Third Party Data, Location Data
Legal Basis: Contractual obligations, Legitimate interests, Notice and/or consent (where required by applicable data protection laws)
We also use your information to personalize and improve our products and services. Your information may be used in AI and machine learning systems to personalize features and user experience. This may include: providing advertisers with accessibility signals (likelihood of candidate response), recommending questions for advertisers to ask candidates, and assessing candidate suitability for job opportunities using resumes and other elements. Such assessments may be displayed to both candidates and advertisers, and may involve automatic processing using personal data.
Personal Data Categories: General Data, Contact Data, Background Data, Usage and Device Data, Location Data
Legal Basis: Legitimate interest, Notice and/or consent (where required by applicable privacy laws)
We may also contact you to provide technical or other support related to your use of our platform. Calls may be recorded for training, verification, and quality assurance purposes. SMS messages may be sent to verify user identity and help secure accounts.
Personal Data Categories: General Data, Contact Data, Usage and Device Data, Location Data
Legal Basis: Legitimate interest, Legal obligation, Notice and/or consent (where required by applicable privacy laws)
b. Marketing and Communications Purposes
We use your information to send marketing and promotional materials, including product updates, job opportunities, newsletters, surveys, and event invitations. Communications may be sent via email, SMS, push notifications, online messaging, phone, instant messaging, or social media.
Personal Data Categories: General Data, Contact Data, Background Data, Usage and Device Data, Location Data
Legal Basis: Legitimate interest, Notice and/or consent (where required by applicable privacy laws)
We track and monitor your usage and device data to personalize and manage advertising. For more information about cookies, refer to Section 11.
Personal Data Categories: General Data, Contact Data, Usage and Device Data, Location Data
Legal Basis: Legitimate interest, Notice and/or consent (where required by applicable privacy laws)
We may also conduct market research, testing, and customer surveys.
Personal Data Categories: General Data, Contact Data, Usage and Device Data
Legal Basis: Legitimate interest, Notice and/or consent (where required by applicable privacy laws)
We may send you information about products and services offered by D’craft, Owners, or other partners.
Personal Data Categories: General Data, Contact Data, Background Data
Legal Basis: Legitimate interest, Notice and/or consent (where required by applicable privacy laws)
c. As part of D’craft’s business operations
We use your data for research and development purposes, including testing, analytics, customer research, and service improvements via AI or machine learning systems.
Personal Data Categories: General Data, Contact Data, Background Data, Usage and Device Data, Location Data
Legal Basis: Legitimate interest, Notice and/or consent (where required by applicable privacy laws)
We also process personal information to verify identity, manage our services, ensure security, detect threats, and prevent fraud.
Personal Data Categories: General Data, Contact Data, Background Data, Usage and Device Data
Legal Basis: Legitimate interest, Legal obligation, Notice and/or consent (where required by applicable privacy laws)
To protect the rights, assets, and personnel of D’craft entities, we may process relevant personal information.
Personal Data Categories: General Data, Contact Data, Background Data, Usage and Device Data, Third Party Data
Legal Basis: Legitimate interest, Legal obligation, Notice and/or consent (where required by applicable privacy laws)
We may also send investor-related communications and materials.
Personal Data Categories: General Data, Contact Data
Legal Basis: Legitimate interest, Contractual obligation, Legal obligation, Notice and/or consent (where required by applicable privacy laws)
d. To meet regulatory, compliance and legal obligations
We process your data to fulfill legal and regulatory responsibilities, including responding to data rights requests or inquiries from authorities such as police, immigration, or customs agencies.
Personal Data Categories: General Data, Contact Data, Background Data, Third Party Data, Usage and Device Data
Legal Basis: Legal obligation, Notice and/or consent (where required by applicable privacy laws)
7. What happens if we are unable to collect your personal information?
It is important for us to process your personal information in order to provide you with our products and services. If you do not want us to process your information for the purposes set out in this Privacy Policy, you may have to stop using our Platform, Products or Services or your relationship with us. You may choose not to share your personal information with us. However, if you choose not to provide us with the personal information we require, we may not be able to provide you with some or all of our products or services. We also require your personal information to comply with our legal obligations. If our legal basis for processing your personal information is compliance with our legal obligations, failure to provide us with certain personal information may cause us and/or you to breach those legal obligations.
8. Who do we share your personal information with?
We may share your personal information in a variety of ways:
a. Search Group
We may share your personal information with D’craft Corporation for the purposes set out in this Privacy Policy.
b. Owner
If you are a Guest, you agree that we may share your personal information with the Owner when you apply for a job advertisement on our Platform.
By applying for an appointment, you agree that we may share the information in your profile and application with the applicable Owner, and that your information may be stored in:
- our Advertiser Center on behalf of the Owner
- the Owner’s career platform or chosen recruiting software
We are not responsible for, and cannot guarantee the security of, your personal information stored outside of our Platform by an Advertiser. You should contact the Advertiser directly if you have any questions about the status of an appointment or job advertised to us.
Depending on your profile visibility settings, we may also share your profile with the Owner through our talent search database products. This allows the Owner to view a Guest’s profile (and any personal information within it) when searching for candidates.
For more information about your profile visibility settings, and when and where advertisers can access your information, see Section 13.
Parts of your profile may be shared with Owners to support Appointment Information. If this is necessary, your Appointment Support Information and selected profile data (which may include General Data, Contact Data, Background Data, Third Party Data, and Location Data) will be shared with Owners regardless of your profile visibility setting (Standard, Limited, or Hidden).
We will notify you when your profile is included as part of Appointment Information and specify which parts of your profile will be sent to Owners along with your application.
If you choose to share your profile, resume, or other application information with an Owner, that Owner may—intentionally or unintentionally—share your information with other parties. We cannot control how Owners use, share, or store your information outside of our Platform, and we are not responsible for their actions or the security of their systems.
Advertisers are obligated to comply with all applicable laws, including data privacy regulations and specific laws relating to health information.
If a Guest has shared appointment information and wishes to access or delete their personal data, they must contact D’craft directly.
c. Third Parties
Service Providers and Partners
We may share your personal information with third parties, including service providers, contractors, and partners, for the following purposes:
- To help us provide products and services to you
- To enable you to access the products or services they offer
- To conduct surveys, tests, and customer research
- For other purposes outlined in Section 6 of this Privacy Policy
Government Authorities
We may share your personal information with relevant government agencies, law enforcement, or regulatory bodies if they are legally authorized to request it. This includes complying with court orders or other legal obligations.
Mergers, Acquisitions, or Restructuring
In the event of a merger, acquisition, or restructuring, we may share your personal information with the assignee or successor of any D’craft Group entity, or with potential purchasers of our business or assets (including their advisors).
d. Links to Third Party Sites
Some of our Platforms may include links to external websites or mobile apps that we do not own or control.
We are not responsible for the privacy practices of these third-party websites.
We strongly encourage you to review their privacy policies before using their services.
9. When do we share your personal information abroad?
We may share your personal information outside your home location in the following circumstances: a. With D’craft, the entity responsible for hosting and operating the Platform on our secure servers and storing your personal information b. With service providers, partners or other third parties who provide services to us in overseas locations, c. Where your personal information is shared with entities or businesses within the D’craft group of companies for the purposes set out in this Privacy Policy, d. Where your personal information is shared with Owners outside your home location. You can access your personal information by accessing your profile through an overseas Owner’s appointment application. Owners can view your personal information when searching for candidates within your home location or preferred location. For more information about your profile privacy settings and when Owners can access your information, see Section 13. And E. Where we believe it is necessary to comply with a legal or regulatory obligation.
10. How do you keep your information safe?
We take reasonable steps to ensure the security of our systems and to protect your personal information from misuse, interference, loss, and unauthorized access, modification or disclosure. All personal information we hold is stored on secure servers and is protected in controlled facilities. We follow accepted industry standards to protect your personal information. However, no method of transmission over the Internet or method of electronic storage is guaranteed to be always secure. Third parties (including advertisers) with whom we share your personal information are required to comply with all applicable obligations regarding the use and disclosure of your personal information as set out in applicable privacy laws and other applicable laws. If you are asked to provide your information directly to a third party (for example, if you apply for a job through an advertiser’s career platform), the use of your information by such third party is subject to that third party’s privacy policy and is not within our responsibility or control. You also play a critical role in keeping your personal information secure by maintaining the confidentiality of your password and account used on the Platform. Please notify us immediately if you become aware of any unauthorized use of your account or any breach of security.
11. How do we use cookies, usage data and device data?
We use this information for a variety of purposes, including:
- personalizing and improving your experience (e.g., remembering your details when you use auto-login),
- improving website performance,
- analyzing, developing, and testing new services or features,
- making business decisions,
- error reporting,
- facilitating online payments, and
- reporting results from our services to advertisers and business partners.
This information may be received or shared with other entities within the D’craft Group, our service providers, and partners in order to provide better products and services.
We also use cookies and similar technologies (such as device IDs) to tailor display ads from our partners and advertisers across our Platforms and other websites or apps.
Targeting is based on your interests, behavior, profile information, or data collected through these ad placements.
Display ads may be targeted to candidates, advertisers, or other visitors of that ad space.
We also collect and use device IDs to recognize you and your device across various services and platforms. For this purpose, we may share your device ID with partners and service providers.
Some pages on our Platforms may allow our partners to place cookies. These cookies are intended to collect non-personal information such as your interests and searches to deliver more relevant display ads to you on our Platforms and other websites. Non-personal information collected may be shared with third parties for ad display and targeting.
To limit our use of your data for targeted advertising, you may:
- change your browser settings to block cookies,
- adjust display ad settings in your mobile device’s system preferences, or
- opt out via your browser’s privacy settings.
Please note that disabling cookies may prevent access to some areas of our Platform and limit your ability to use certain products and services.
c. Our Apps
In addition to the above, when you access our mobile applications (our Apps), we use third-party SDKs and services that collect information related to your app usage, including install tracking and re-engagement tracking.
This data is used to tailor and measure display ads on third-party apps and websites, based on how you use or install our Apps.
To opt out of display ad tracking:
- On iOS 14.5 or later: go to Settings > Privacy > Tracking and disable tracking for the app
- On earlier iOS versions: enable “Limit Ad Tracking”
- On Android: enable “Opt out of interest-based ads” in system settings
d. Third-Party Measurement
To better understand our users, we use third-party service providers to measure and analyze traffic on our Platform.
Cookies are used to collect the following metrics:
- Number of page views (impressions)
- Number of unique visitors
- Average time spent per visit
- Most common entry and exit pages
For unregistered users, this information is aggregated and used for traffic analysis.
For registered users, this data may be linked across devices and sessions to ensure more accurate aggregate usage analysis.
This data may also be shared with media and research organizations for industry benchmarking and comparison.
12. Retention of your personal information
We will retain your personal information for the period necessary to fulfill the collection and retention purposes set out in this Privacy Policy or until you request that we delete your personal information, after which we will take reasonable steps to delete your personal information (where required by applicable privacy laws). If you have provided your personal information to the Owner by applying to a job advertisement on our Platform, you must request that the D’craft administrator delete it. We may retain your personal information after you request deletion if reasonably necessary to comply with our legitimate interests, legal and regulatory obligations, resolve disputes between users, prevent and remediate fraud and/or abuse, store it in testing or back-up systems (for a period of time), or enforce this Privacy Policy and/or other Terms of Use. If information is stored in a test environment, it is stored in a closed and secure environment and is used solely for internal software testing purposes. Information stored in back-up systems is retained solely for the purpose of restoring systems in the event of data loss.
13. Request for personal information
a. General
You may make certain requests regarding the personal information we hold about you. Some of these requests only apply in specific circumstances, as outlined below.
Access
You have the right to confirm whether we hold personal information about you and to request access to that information.
- If you are a Candidate, you may access your information at any time by logging into your account and going to the “Settings” section and your profile page.
- If you are an Owner, access is available via the “Account Details” section.
- Alternatively, all users may contact us directly to access their personal information.
Correction
You have the right to correct inaccurate or incomplete personal information we hold about you.
- Guests may update their profile at any time through the “Profile” or “Settings” section.
- Owners may update their information through the “Account Details” section.
- All users may also contact us for corrections or updates.
Deletion
Applicants may request deletion of personal information by logging into their account, accessing the “Settings” section, or selecting “Delete Personal Information” on the profile page.
- Alternatively, users may contact us to request restriction or deletion of their data, or to withdraw consent for data processing.
- We may ask for identity verification before processing any such request.
- Depending on the law, we might not always be able to fulfill a specific request, but we will try to assist in other ways.
- You may also request access to any additional privacy rights available to you under applicable laws.
- We will respond as soon as reasonably practicable.
You are responsible for providing accurate, complete, and up-to-date personal information — both about yourself and any individual whose data you provide.
We reserve the right to deactivate or delete candidate profiles (including resumes or cover letters) if we believe the content is false or used inappropriately.
b. Opt-out
You may opt out of receiving communications from us.
Contact us using the details in Section 15. We will honor unsubscribe requests as soon as reasonably practicable and in accordance with applicable laws.
c. Account Deactivation
Candidates who wish to delete their profile must delete their entire account.
This ensures all associated data is removed in accordance with Section 13 of this Privacy Policy.
d. Candidate Profiles Visibility Settings
Candidates without a profile must create one when first applying for a job through our Platform.
Your profile may include your name, contact details, and profile image. The Owner may contact you using that information.
To delete your profile, you must delete your entire account in accordance with Section 13 of this Privacy Policy.
14. Updates to this Privacy Policy
We may modify this Privacy Policy at any time. You should review this Privacy Policy regularly to stay updated on any changes. In some circumstances, depending on the nature of the change, we will notify you before the changes to this Privacy Policy become effective, as required by applicable privacy laws. By continuing to use our Platform, Products or Services, you agree to any modifications to this Privacy Policy.
15. Contact Us
If you have any questions or complaints regarding this Privacy Policy or would like to contact us regarding our use or processing of your personal information, you may contact us through the channels below. You may also contact us to request a copy of this Privacy Policy in hard copy or in another format that suits your specific needs. All privacy-related complaints received by us will be referred for prompt investigation and we will respond as soon as possible. If you are still not satisfied with the resolution of your complaint, you may seek further redress from your local data protection regulator. email: mono@dcraft.co.kr tel: 02-333-2770 4F, 1, Seooreung-ro 25ga-gil, Eunpyeong-gu, Seoul
16. Language
This Privacy Policy may be translated into the local language of the region. In the event of a conflict between the English version of this Privacy Policy and the localized version, the English version shall prevail. The localized version shall be deemed to be consistent with the English version and shall be automatically modified to be consistent.
17. Definition
| Term | Definition |
|---|---|
| Newspaper | A person or entity (including a Host) that posts a job advertisement on our Platform or uses other products or services to solicit potential job candidates. |
| Advertisement Location | Has the meaning set out in Section 11 of this Privacy Policy. |
| Accessibility Signal | Has the meaning set out in Section 6(a) of this Privacy Policy. |
| Candidate | A person who uses our Platform, accesses our Services or responds to a job advertisement posted on our Platform for the purpose of seeking employment. |
| Cookies | Cookies, tags, applets, scripts and other similar technologies. |
| EEA | European Economic Area. |
| GDPR | European General Data Protection Regulation, Regulation (EU) 2016/679. |
| Home Location | Your primary residence (if you are an Applicant, your primary residence selected in your profile). |
| YAXOK User | Any user who uses D’craft’s platform or communicates with us through channels outside the D’craft platform, or a Host who procures products and/or services. |
| Linked Accounts | Google, Facebook or Apple ID login. |
| Our Apps | Has the meaning set out in Section 11(c) of this Privacy Policy. |
| Parental Consent | Has the meaning set out in Section 3(c) of this Privacy Policy. |
| Partners | Third parties who work with us to provide services to us or our users. |
| PDP Law | Law No. 27 of 2022 of Indonesia on Personal Data Protection. |
| Personal Information | Information that identifies an individual or can reasonably be used to identify an individual, including sensitive information. |
| Personal Data | See the definition of Personal Information. |
| Platforms | Includes our online websites, mobile websites, applications, products, services, features and software. |
| Privacy Laws | Applicable privacy and data protection laws governing the use of personal information. |
| Processed | The collection, use, disclosure, transfer, retention or other processing of personal information. |
| Profile | A personal profile created by a candidate on our Platform includes personal information about that candidate. |
| Registered User | A user who registers with us to access our Products and/or Services. |
| Related Person | A person related to a Registered User, such as a referee or emergency contact. |
| Related Platform | Has the meaning set out in Section 5(d) of this Privacy Policy. |
| Browse Groups | D’craft Related Entities. |
| Find Users | Any user who uses the D’craft branded platform or communicates with us, or advertisers who procure products/services. |
| Sensitive Information | Categories of personal information like racial origin, health, criminal record, etc., as defined in privacy laws. |
| Service Providers | Third parties who assist in providing products and services. |
| Shared Profiles | Ability for Candidates to share a summary version of their profile via a shareable link. |
| How to Connect to an Appointment | A way for Guests to contact Candidates by applying to an Appointment via Join Us. |
| Terms of Use | Any terms and conditions that you agree to when purchasing our products and services. |
| Product Terms | Talent Search Terms, Company Profile Terms, API Terms, and Website Terms of Use. |
| Third Party Websites | Has the meaning set out in Section 8(d) of this Privacy Policy. |
| Unregistered Users | A user who visits our Platform or communicates with us without registering. |
| Usage and Device Data | Has the meaning set out in Section 3(a) of this Privacy Policy. |
| User | Any Guest, Owner, Registered or Unregistered User who interacts with us or uses our services. |
| Young User | Defined by age and legal status per country: under 20 (Thailand), under 21 (Indonesia), under 18 (Philippines/Malaysia), under 13 (Singapore). |
18. Regional information
If you are a citizen or resident of one of the jurisdictions described below, the following jurisdiction-specific terms are supplementary and should be read in conjunction with this Privacy Policy. In the event of any conflict between the jurisdiction-specific terms relevant to your jurisdiction and the rest of this Privacy Policy, the jurisdiction-specific terms will prevail.
a. European Economic Area (EEA) and the United Kingdom (UK) If you are a resident of the EEA or the UK, the following applies to you under the GDPR or UK GDPR (as applicable), in addition to this Privacy Policy:
- You may contact us using one of the methods set out in Section 15 to request:
- A copy of the personal information we hold about you in a portable and machine-readable format
- Or request us to share your personal information with designated third parties.
b. Hong Kong We plan to use the names and contact details of registered users for direct marketing purposes regarding the following products and services and require your consent (including the option to opt-out):
- Our products and services, including job placement, newsletters, surveys, and events
- Products and services from D’craft Group companies
- Products and services provided by Owners and Partners. To unsubscribe from direct marketing, see Section 13.
c. Thailand If you are a resident of Thailand, the following applies to you under the Personal Data Protection Act B.E. 2562 (2019):
- Retention Period: We will retain your data as long as necessary to fulfill purposes described in this policy or as required by law.
- Your Rights under PDPA include:
- Right to access your data and how it was obtained
- Right to data portability
- Right to object to processing, especially for direct marketing
- Right to deletion or de-identification
- Right to stop processing
- Right to rectification
- Right to withdraw consent
- Right to lodge a complaint with the supervisory authority.
Registered users can edit their data in the ‘Profile’ or ‘Settings’ section.
d. Philippines Residents of the Philippines are entitled to rights under the Data Privacy Act of 2012, including:
- Right to be informed about data processing, profiling, and automated decisions
- Right to object to data processing, including for marketing
- Right to access information about your data and its processing
- Right to rectify inaccurate data
- Right to deletion, blocking, or suspension of your data
- Right to data portability
- Right to lodge a complaint with the National Privacy Commissioner.
e. New Zealand Some third parties we share your data with may be considered ‘foreign persons or entities’ under the New Zealand Privacy Act 2020. You authorize such disclosures and acknowledge that they may not be subject to comparable privacy laws.
f. Malaysia If a minor consents to this policy, the parent/guardian agrees to the processing of the minor’s data and to be personally bound by this policy. You may request to restrict the processing of your data, although this may affect service delivery.
g. Singapore If you are a resident of Singapore, this policy includes compliance with the Personal Data Protection Act 2012 (PDPA 2012).
- Deemed Consent: By creating an account, using services, or communicating with us, you consent to the use of your personal data.
- Exceptions to consent under PDPA 2012 may apply, including:
- Business Improvement Exception (e.g., service enhancement, profiling)
- Public Authority Exception
- Research Exception (subject to certain safeguards).
- NRIC and similar identifiers are only collected/used when:
- Legally required or
- Necessary for identity verification.
- Right to withdraw consent applies to future use/disclosure.
- Data transferred outside Singapore will be protected with comparable standards under PDPA 2012.
- Reasonable security measures are implemented to protect your personal data.
If you have any questions about these Security & Privacy,
please contact us at: info@yaxok.com