隐私政策

SHF’s Commitment to Your Privacy

We understand that your privacy is very important to you, and therefore, the Singapore Heart Foundation (SHF) is committed to protecting all personal data provided by you with great effort. In compliance with the Personal Data Protection Act 2012, we will not share your personal data with a third party without your consent unless as required by written laws. We will ensure that the personal data you provided to and maintained by us will be kept strictly confidential.

This policy sets out how we collect, use, disclose and protect your personal data in our possession or within our control.

The Types of Information We Collect

The types of information we collect include records of communication between us, including from time to time, the information you provide us. This includes, but is not limited to, the following types of information:

• Personal particulars and contact details (such as name, NRIC/FIN number, address, telephone numbers, email, etc.);
• Medical records;
• Educational records;
• Financial records;
• Donation history and credit card and/or bank account details) for donors;
• Pictures/videos taken at events for media release and publicity purposes, posted on our website, social media channels, etc.

We will take reasonable measures to ensure that the personal data you provide is accurate, complete, and up-to-date, especially where the personal data is required for you to receive updates on our services or make a decision that may affect you.

Why We Collect Private Information about You

The Singapore Heart Foundation is a non-profit charitable organisation at the forefront of the battle against heart disease in Singapore. Our mis­­­sion is to promote heart health, prevent and reduce disability and death due to cardiovascular diseases and stroke.

We collect personal data of our stakeholders to better communicate with them, introduce them to our organisation, inform them of the work we do and encourage donations to carry on with our life-saving programmes.

We do not use or disclose personal data in any way other than the purpose it was collected for and which you have given your consent, where applicable. These purposes include, but are not limited to:

• Perform obligations in the course of or in connection with our provision of the programmes and/or services requested by you;
• Enable us to process, verify and respond to your donation, queries, request, payment, applications, registration, subscription, complaints and feedback;
• Managing your relationship with us;
• Send you newsletters by email or mail on the latest heart health information;
• Send you marketing information on SHF’s campaigns, contests, donation drives, events, programmes, and etc.;
• Complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;
• Any other purposes for which you have provided the information.

How We Collect Your Personal Data

We may collect personal data from you either directly or from third parties, such as event organisers.

We collect personal information about our donors, volunteers, beneficiaries, public event attendees, CPR+AED course participants, Heart Wellness Centre clients, Health Healthy Support Group members, employees, contractors and visitors to our events or centres. The ways we collect your information include, but are not limited to:

• Face to face contact;
• Electronically through our website and online surveys;
• Via social media messages or conversation;
• During phone calls, voice or image recordings;
• Whilst delivering and administering services at our facilities;
• From forms, coupons and other types of correspondence (both in writing and electronically)
• CCTV

For those below the age of 16 years or those with certified medical/mental conditions, written parental/guardian consent will be required to collect the personal data of the individuals mentioned above.

By providing personal data relating to a third party (e.g. information of your dependent, spouse, children and/or parents) to SHF, you represent and warrant that the third party has given consent for the collection, usage and disclosure of their personal data for the purposes listed above in Section 3.

How We Use Your Personal Data

We will only use your personal data for the purpose(s) we collected as set out above or otherwise permitted by law.

We will not disclose the above personal data that we collect to affiliates or third parties without your consent.

If you are a donor through our third-party fundraisers, please note the following:

SHF has engaged the services of third-party fundraisers, i.e. SALESWORKS Pte Ltd and SG Support to assist us with our fundraising and donor management efforts. Please be aware that your personal data will be made available to them for the sole purpose of donor administration.

However, do rest assured that these third-party fundraisers must strictly safeguard all received personal data, and such data shall be considered confidential and proprietary to SHF. They will not be permitted to use your personal data for any other purpose(s) other than donor administration. This has been spelt out under the Confidentiality Undertaking and PDPA Compliance sections of the signed agreement between SHF and the third-party fundraiser.

Disclosing Your Personal Data

At times, we may be legally required to disclose your personal data to Government Authorities (eg. to IRAS for submission of tax deductions). For the purpose of research, we may also share non-personal, non-sensitive and de-identified information with such organisations.

Occasionally, we may use an external vendor to process data entry, letter-shop, back up your personal data, or provide other services. As a result, we may disclose your personal data to them for these purposes.

We do not otherwise disclose or transfer your personal data to an external party without your prior consent (or where there is an exception to consent under the PDPA).

Withdrawal of Consent

You can request for withdrawal of consent by writing to our Data Protection Officer via the email address indicated in Section 10. Do note that there may be consequences related to your withdrawal of consent (e.g. without your personal contact details, we will not be able to inform you of our future events and services).

Please allow us at least 10 business days to process your withdrawal request.

Accessing and Correcting Your Personal Data

You can access your personal data held by us or find out how we have been using or disclosing your personal data in the past one year by writing to our Data Protection Officer via the email address indicated in Section 10. We may charge you a reasonable administrative fee for processing your access request.

Under certain circumstances (as specified in the PDPA), we may refuse your request to access your personal data, if it (but not restricted to):

• Threatens the safety or physical or mental health of another individual;
• Causes immediate or grave harm to the safety or physical or mental health of the individual who made the request;
• Reveals personal data about another individual;
• Reveals the identity of an individual who provided personal data about another individual; and
• Is contrary to national interest.

When you request access to your personal data, we will ask you to provide some form of identification to ensure that you are the person to whom the personal data relates. You may request a correction to your personal data held by us if you discover any inaccuracy or omission in the data.

We will endeavour to respond to you within 7 working days of receiving your request and let you know how much time we need to process your request.

Should we be unable to assist with your request, you will receive a written explanation as to why.

Securing and Retaining Your Personal Data

We take reasonable steps to ensure the security of personal data we hold about you and to protect it against loss, misuse or unauthorised access, use, modification, disclosure or destruction.

We have implemented reasonable measures to ensure our IT systems are protected and comply with applicable security standards. Only authorised personnel are permitted to access these systems and the associated databases.

We have implemented a data retention policy and will destroy any personal data we hold once there is no longer a legal or business need to retain it.

Feedback, Queries and Requests

If you have any questions about this privacy policy, want to access or correct your personal data held by us or wish to withdraw consent, you can email us at pdpa@heart.org.sg.

If you have any concerns about how we have collected, used, disclosed or managed your personal data, we request you follow the procedure set out below.

a. Submit your feedback to pdpa@heart.org.sg or post to:
SHF Data Protection Officer
9 Bishan Place #07-01
Junction 8 (Office Tower)
Singapore 579837

To effectively address your feedback, we may request further information from you about your feedback and the reasons behind it.

b. After receiving all necessary information, please allow us approximately 28 days to address your feedback.

Anonymity

It is your right to be dealt with anonymously, provided that it is lawful and practicable.

We will try to accommodate a request for anonymity wherever possible; however, we note that this may prevent us from practically and effectively communicating with you in some circumstances. If so, we will notify you.

Cookies and Links to Other Websites

Cookies

When you visit our website, a record of your visit is logged. The following data is supplied by your browser:

• Your IP address and/or domain name;
• Your operating system (type of browser and platform);
• The date, time and length of your visit to the website; and
• The resources you accessed and the documents you downloaded.

This information is used to compile statistical information about the use of our website to improve the user experience and enhance our web services. It is not used for any other purpose. If you do not want ‘cookies’ to be used, please disable them via your browser settings. Do note that certain features on our website may not be available when you disable the ‘cookies’.

Updated on 3 February 2022