DD Consulting (the "Company") respects your privacy and we acknowledge that you have certain rights related to any personal data we collect from you and we have certain obligations in respect of the same.
This privacy policy ("Privacy Policy") discloses our privacy principles and/or our practices for gathering, collecting, storing, using and/or disclosing your personal data. We encourage you to review this Privacy Policy so that you may understand how we may collect, use, disclose, and process your personal data in accordance with the Personal Data Protection Act ("PDPA").
For the avoidance of doubt, "personal data" means data, whether true or not, about an individual (customer) who can be identified (i) from that data; or (ii) from that data and other information to which the organization has or is likely to have access. References to "us" or "we" shall refer to the Company.
The Company has different channels of collecting personal data, but each are committed to complying with this Policy in its collection, use and disclosure of personal data, to ensure that there is accountability and uniformity in the way we protect your personal data. Although this Policy is in common use, each is responsible to you to the extent of its own collection, use and disclosure of your personal data, and its own actions.
This Policy applies to all personal data you provide to us, or that we may collect about you. Please do not provide any personal data to us if you do not accept this Policy.
We may also require you to accept this Policy when you contact, interact, transact or deal with us, or when you access and use our websites, applications or services. If you notify us that you do not accept this Policy, we may not be able to establish a relationship with you or be able to service your requests.
You may contact our Data Protection Officer if you have any queries or feedback on our personal data protection policies and procedures, or if you wish to make any request, you may send an email to: DPO@ddynamics.net
We may amend this Policy from time to time without notice to you, to comply with applicable laws or as we update our data usage and handling processes. The updated Policy will supersede earlier versions and will apply to personal data provided to us previously.
The Personal data we collect depends on the purposes for which we require the personal data and what you have chosen to provide. This may include your name, address, contact information (e.g. telephone number and email address), identification number, photograph, video image and any other information that may identify you or is personal to you.
We collect personal data relevant to our relationship with you. We may collect your personal data directly or indirectly through various channels, including when:
Our website and applications may also contain or involve certain technologies that automate the collection of data (including personal data). These technologies include cookies, web beacons and web analytics. If you do not wish to have your data collected through such technologies you may disable the operation of these technologies on your devices (where possible), or you may refrain from using our websites and applications.
Your provision of personal data to us is voluntary and you have the right to withdraw your consent for us to use your personal data at any time by contacting and submitting a request to us. Your withdrawal will take effect after your request is processed. However, if you choose not to provide us with the personal data we require, it may not be possible for us to fulfil the purposes for which we require the personal data, including providing products and services which you need from us.
In certain circumstances, you may also provide the personal data of persons other than yourself. If you do so, you are responsible for informing him / her of the purposes for which we require his/her personal data and warrant that you are validly acting on behalf of him / her to consent to our collection, use and disclosure of his / her personal data.
You must ensure that all personal data that you provide is true, accurate and complete and promptly inform us of any changes to the personal data.
If you are a child, minor or not of legal age, please inform and seek the consent of your parent or guardian, before you provide your personal data to us. If you are a parent or guardian and you have reason to believe your child or ward has provided us with their personal data without your consent, please contact us to request for erasure of their personal data.
We collect, use and disclose your personal data where:
Generally, we collect, use and disclose your personal data for purposes connected or relevant to our business, including:
Where you give us consent, we collect, use and disclose your personal data for purposes of:
Our legitimate business interests include:
We may also collect, use, disclose and process your personal data for other purposes, without your knowledge or consent, where this is required or permitted by law.
When using your personal data to contact you for the above purposes, we may contact you via mail, e-mail, SMS, telephone, pop-up notifications (when you are using our applications), or any other means.
We will not contact you for marketing purposes unless with your consent, or we are exempted by applicable law from having to obtain consent. When contacting you for marketing purposes, we will not contact you through your telephone number, unless you have specifically consented to such a mode of communication. If you do not wish to receive any communication or information from us, or wish to restrict the manner by which we may contact or send you information, you may contact us to do so.
We may also disclose or share your personal data in connection with the purposes described below, including to the following parties:
When disclosing personal data to third parties, we will (where appropriate and required by applicable law) enter into contracts with these third parties to protect your personal data in a manner that is consistent with applicable laws and/or ensure that they only process your personal data in accordance with our instructions.
We keep your personal data only for so long as we need the data to fulfil the purposes we collected it for, and to satisfy our business and legal purposes, including audit, accounting or reporting requirements. How long we keep your personal data depends on the nature of the data, e.g. we keep personal data for at least the duration of the limitation period for bringing claims if the personal data may be required to commence or defend legal proceedings. Certain information may also be retained for longer, e.g. where we are required to do so by law. Typically, our data retention period is from 6 years upwards, depending on the limitation period.
In some circumstances we may anonymise your personal data so that it no longer identifies you, in which case we are entitled to retain and use such anonymised data without restriction, including for data analytics.
While we take reasonable precautions to safeguard your personal data in our possession or under our control, we cannot be held responsible for unauthorised or unintended access that is beyond our control, including hacking or cybercrimes. We also do not guarantee that our websites and applications are invulnerable to security breaches, or that your use of our websites and applications is safe and protected from viruses, worms, Trojan horses, and other vulnerabilities.
You enjoy certain rights at law in relation to your personal data that we hold or control. These rights include:
If you wish to exercise your rights, you may contact us to do so. We may require that you submit certain forms or provide certain information to process your request. Where permitted by law, we may charge you a fee to process your request. We may also be permitted under applicable laws to refuse a request.
We may be permitted under applicable laws to refuse your request to exercise your rights, for example, we may refuse (a) a request for erasure where the personal data is required for in connection with claims; or (b) an objection request and continue processing your personal data based on compelling legitimate grounds for the processing.