Eureka! Campaign Associates Pte Ltd ("we", "us", "our") is committed to protecting the personal data of our customers, employees, business partners and other individuals we interact with. This Privacy Policy explains what personal data we collect, why we collect it, how we use, disclose, store and protect it, and the choices and rights available to you. This Policy is prepared in accordance with the Personal Data Protection Act 2012 (PDPA) and aligned with the Data Protection Trustmark (DPTM) standard, SS 714:2025.

 

1. Personal Data We Collect

We may collect the following categories of personal data, depending on your relationship with us:

• Identification and contact information (e.g., name, NRIC/passport number, address, phone number, email address);

• Account and transaction information (e.g., order history, payment details, service usage records);

• Employment-related information, where you are an employee, contractor or job applicant;

• Technical information collected through our website or applications (e.g., IP address, device identifiers, browser type), where applicable;

• Any other information you voluntarily provide to us, such as through forms, surveys, or correspondence.

We collect only the personal data that is necessary for the purposes set out in this Policy.

​

2. How We Collect Personal Data

We collect personal data:

• directly from you, such as when you make a purchase, register an account, submit a form, or contact us; and

• from third parties acting on our behalf or with your consent, such as business partners, service providers or publicly available sources, where permitted by law.

​

3. Purposes for Collection, Use and Disclosure

We collect, use and disclose your personal data for the following purposes, where relevant to your relationship with us:

• processing and fulfilling orders, transactions and service requests;

• verifying your identity and managing your account;

• responding to your enquiries, feedback or complaints;

• complying with legal and regulatory obligations;

• managing our employment or contractual relationship with you, where applicable;

• sending you service-related communications and, where you have opted in, marketing communications; and

• improving our products, services and website.

Where required, we will notify you of the specific purpose(s) at or before the point personal data is collected, including whether providing the data is necessary and the consequences of not doing so.

 

4. Consent and Your Choices

We will obtain your valid or deemed consent before collecting, using or disclosing your personal data, unless an exception applies under the PDPA or other applicable law.

You may exercise choice over how your personal data is collected, used or disclosed, including opting out of marketing communications at any time. Where personal data is collected for marketing purposes, we will provide an opt-in consent mechanism rather than opt-out, together with data protection settings that are accessible and easy to understand.

You may withdraw your consent at any time by contacting our Data Protection Officer using the details in Section 9. We will inform you of the likely consequences of withdrawal before giving effect to it, and will act on your request within a reasonable timeframe, which we will communicate to you.

 

5. Disclosure of Personal Data

We may disclose your personal data to:

• our employees and authorised personnel who require the data to perform their duties;

• service providers and data intermediaries engaged to process personal data on our behalf (e.g., IT service providers, payment processors, logistics partners), who are contractually bound to protect your data to a standard equivalent to our own;

• regulators, public agencies, courts or law enforcement authorities, where required or permitted by law; and

• any other party with your consent.

We do not disclose personal data for purposes beyond those for which consent was obtained, except as permitted or required by law.

 

6. Overseas Transfer of Personal Data

Where we transfer personal data outside Singapore (including to service providers or group companies located overseas), we will take appropriate steps to ensure the overseas recipient provides a standard of protection comparable to the protection under the PDPA and will only transfer data using mechanisms permitted under applicable law.

​

7. Retention and Disposal

We retain personal data only for as long as necessary to fulfil the purpose(s) for which it was collected, or as required for legal or business purposes. When personal data is no longer needed, we will securely dispose of, destroy or anonymise it so that it cannot be recovered or used to re-identify you. You may request information on the retention period applicable to your personal data, or confirmation that we no longer retain it, by contacting our DPO.

 

8. Protection of Personal Data

We implement appropriate physical, technical and administrative safeguards to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or loss, including regular security testing such as vulnerability assessments and penetration testing commensurate with the sensitivity of the data involved. Where we engage third parties to process personal data on our behalf, we require them to maintain security standards at least equivalent to our own.

 

9. Your Rights and How to Contact Us

Subject to applicable exceptions under the PDPA, you have the right to:

• request access to the personal data we hold about you;

• request correction of personal data that is inaccurate, incomplete or outdated; and

• withdraw consent for the collection, use or disclosure of your personal data.

To exercise any of these rights, or if you have any queries, complaints or feedback regarding this Policy or our handling of your personal data, please contact our Data Protection Officer:​​​​​​