Corporate Data Privacy Notice for the PRU Fintegrate Partnership Programme ("Notice")

The types of information we process for your participation in the PRU Fintegrate Partnership Programme may include:

• Personal and contact details, such as title, full name, contact details and contact details history
• Your date of birth, gender and/or age
• Your nationality
• Records of your contact with us and, if you get in touch with us online using our online services or via our smartphone app, details such as your mobile phone location data, IP address and MAC address
• Personal information which we obtain from Credit Reference Agencies and Fraud Prevention Agencies (see the section on ‘Fraud Prevention Agencies’ below), including public (for example, defaults, CCJs) and shared credit history, financial situation and financial history
• Fraud, debt and theft information, including details of money you owe, suspected instances of fraud or theft, and details of any devices used for fraud
• Criminal records information, including alleged offences
• Information we buy or rent from third parties, including demographic information, details of outstanding finance, marketing lists, publicly available information, and information to conduct due diligence on business partner engagement
• Information about your organisation’s shareholders, beneficial owners, directors, employees, guarantors and authorised representatives
• Third party transactions; such as where a person other than the account holder uses the service, information about that person and the transaction

We’ll collect personal information from the following general sources:

• From you directly
• From your team members submitting your particulars to Prudential Assurance Company Singapore, such as your name and business contact information.
• From other sources such as Fraud Prevention Agencies, Credit Reference Agencies, other lenders, publicly available directories and information (for example, telephone directory, social media, internet, news articles, business register), debt recovery and/or tracing agents, other organisations to assist in prevention and detection of crime, police and law enforcement agencies

If you give us personal information about another person (or persons), we’ll take that to mean they have appointed and authorised you to act on their behalf. This includes providing consent to:

• our processing of their personal information as stated in this Notice; and
• you are getting any information protection notices on their behalf.

If for any reason you are concerned as to whether you are permitted to provide us with the other person’s information, please contact us at the email address below before sending us anything.

We process your information because:

• You gave us permission to do so (consent);
• We need to process your information to allow us to review the submission provided to us;
• We have legal and regulatory requirements that we have to meet as a result of the collaboration that we may be working with you.

We may use your information for the following purposes

• Process your request and check your eligibility for participation in the PRU Fintegrate Partnership Programme
• Communicate with you about the PRU Fintegrate Partnership Programme;
• Meeting any legal or regulatory disclosure requirements that we are required to do.

We share your information, to allow us to review and process your participation in the PRU Fintegrate Partnership Programme to you (as set out in Part e) and meet legal or regulatory obligations, with:

• Regulators where there is a regulatory or legal requirement that we do so;
• With banks to allow us to process payments from and to you;
• Within the Prudential Group where it is necessary to do so for the efficient execution of the PRU Fintegrate Partnership 2019 or meet the interests of the group.

Depending on the uses to which we put your information we may store your information:

• On our internal servers hosted in our data centres;
• On hosted cloud services;
• With third parties who provide services to us; or
• With agents, partners and affiliates;

Where third parties are involved in storing your information then we conduct due diligence and use contractual terms to manage the protection of your information.

We may store your information in a country other than the one you are resident in. Where we do so we consider carefully the protections available to us to ensure your information is safe.

We take the security of the data you entrust us with very seriously and have a range of security and risk management policies, which are the basis for the protection we apply to your data.

Our security policies combine technical measures with processes and people management to ensure appropriate protection is available at all stages of the time that we hold your information.

These policies follow standards of good practice. They are regularly tested and validated to ensure that they provide the security that your data deserves. Where necessary they are updated and in the event of an incident (external or internal) are reviewed to ensure that we are not at risk.

Security starts at our perimeter (where we connect to the internet) and continues throughout our internal infrastructure to ensure a multi-layered approach that offers protection to your data.

We only keep your information for as long as required to for the shortlisting of successful applications for the programme or for a year whichever is longer unless there is a legal or regulatory requirement that we keep it for longer.

If you are a EU resident individual, you have a number of rights under GDPR where relevant and applicable to you:

• You can ask us for a copy of the information we hold about you;
• You can ask us to correct any information we hold about you that is incorrect;
• You can ask us to delete your information if it is no longer required and if there is no legal or regulatory requirement for us to keep it;
• You can ask us not to contact you with marketing materials;
• You can ask us not to use automated decision making about you when managing the services we provide;
• You can ask us to transfer your information to someone else¹;
• You can object to our processing sensitive information about you (this includes health, genetics, biometric information and sexual orientation); and
• You can complain to your local Privacy Regulator or commissioner.

If you, at any time, wish to:

• provide your feedback on any issues relating to your personal data or this Privacy Notice;
• exercise any of the rights in Part j) or have any questions about this notice
• withdraw your consent to any collection, use or disclosure of your personal data; or
• request to access and/or correct the personal data currently in our possession, you may wish to contact us at

Prudential Customer Service Centre
7 Straits View #01-18/19, Marina One The Heart, Singapore 018935 customer.service@prudential.com.sg
Contact Number: 1800 333 0 333

If you wish to contact PACS about a Data Protection concern, please write to The Data Privacy Officer at Data.Privacy@prudential.com.sg.