DATA PROTECTION NOTICE FOR CUSTOMERS

This Data Protection Notice ("Notice") sets out the basis on which Petssionate ("we", "us", or "our") may collect, use, disclose, or otherwise process personal data of our customers in accordance with the Personal Data Protection Act ("PDPA").

This Notice applies to personal data in our possession or under our control, including personal data in the possession of organisations that we have engaged to collect, use, disclose, or process personal data on our behalf.

PERSONAL DATA

1. Definition of Personal Data

As used in this Notice:

• "Customer" means an individual who:(a) has contacted us through any means to find out more about any goods or services we provide; or(b) may, or has, entered into a contract with us for the supply of any goods or services by us.
• "Personal Data" means data, whether true or not, about a customer who can be identified:(a) from that data; or(b) from that data and other information to which we have or are likely to have access.

2. Types of Personal Data Collected

Depending on the nature of your interaction with us, examples of personal data we may collect include:

• Name
• Residential address
• Email address
• Telephone number

3. Interpretation

Other terms used in this Notice shall have the meanings given to them in the PDPA (where the context so permits).

COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA

4. Collection of Personal Data

We generally do not collect your personal data unless:

• (a) it is provided to us voluntarily by you directly or via a third party who has been duly authorised by you to disclose your personal data to us ("authorised representative"), after:(i) you (or your authorised representative) have been notified of the purposes for which the data is collected; and(ii) you (or your authorised representative) have provided consent to the collection and use of your personal data for those purposes; or
• (b) collection and use of personal data without consent is permitted or required by the PDPA or other applicable laws.

We will seek your consent before collecting any additional personal data or using your personal data for a purpose that has not previously been notified to you, unless otherwise permitted or authorised by law.

5. Purposes of Collection and Use

We may collect and use your personal data for any or all of the following purposes:

• (a) Performing obligations in the course of, or in connection with, providing goods and/or services requested by you;
• (b) Verifying your identity;
• (c) Responding to, handling, and processing your queries, requests, applications, complaints, and feedback;
• (d) Managing our relationship with you;
• (e) Processing payments or credit transactions;
• (f) Complying with applicable laws, regulations, codes of practice, guidelines, or rules, and assisting in law enforcement or investigations by governmental and/or regulatory authorities;
• (g) Any other purpose for which you have provided the information;
• (h) Transmitting personal data to unaffiliated third parties, including service providers, agents, and governmental and/or regulatory authorities in Singapore or overseas for the purposes stated above; and
• (i) Any business purpose related to or connected with the above.

6. Disclosure of Personal Data

We may disclose your personal data:

• (a) where such disclosure is necessary for performing obligations in the course of, or in connection with, providing goods or services requested by you; or
• (b) to third-party service providers, agents, and other organisations engaged to perform functions related to the purposes stated above.

7. Continued Application

The purposes listed above may continue to apply even after your relationship with us has been terminated or altered, for a reasonable period thereafter, including where necessary to enforce our contractual rights.

RELIANCE ON THE LEGITIMATE INTERESTS EXCEPTION

8. Legitimate Interests

In compliance with the PDPA, we may collect, use, or disclose your personal data without your consent where it is in the legitimate interests of Petssionate or another person.

When relying on the legitimate interests exception, we will assess the likely adverse effects on the individual and determine that the legitimate interests outweigh any adverse effects.

9. Purposes Under Legitimate Interests

We may collect, use, or disclose your personal data for the following purposes:

• (a) Fraud detection and prevention;
• (b) Detection and prevention of misuse of services;
• (c) Network analysis to prevent fraud and financial crime, and to perform credit analysis; and
• (d) Collection and use of personal data on company-issued devices to prevent data loss.

These purposes may continue to apply even after your relationship with us has been terminated or altered, for a reasonable period thereafter.

WITHDRAWING YOUR CONSENT

10. Withdrawal of Consent

Your consent for the collection, use, and disclosure of your personal data remains valid until withdrawn in writing.

You may withdraw your consent by submitting a written request or email to our Data Protection Officer using the contact details provided below.

11. Processing of Withdrawal Requests

Upon receiving your request, we may require a reasonable period of time to process it and to inform you of any consequences arising from the withdrawal.

We generally aim to process requests within fourteen (14) business days.

12. Consequences of Withdrawal

Depending on the nature and scope of your request, we may not be able to continue providing goods or services to you. If this applies, we will notify you before completing the processing of your request.

Should you wish to cancel your withdrawal of consent, please notify us in writing.

13. Legal Exceptions

Withdrawing consent does not affect our right to continue collecting, using, or disclosing personal data where such activities are permitted or required under applicable laws.

ACCESS TO AND CORRECTION OF PERSONAL DATA

14. Requests for Access or Correction

You may submit a written request to:

• Access a copy of the personal data we hold about you;
• Obtain information about how we use or disclose your personal data; or
• Correct or update your personal data.

Requests should be directed to our Data Protection Officer.

15. Access Request Fees

A reasonable administrative fee may be charged for access requests. If applicable, we will inform you of the fee before processing your request.

16. Response Time

We will respond as soon as reasonably possible and generally within fourteen (14) business days.

If we cannot respond within thirty (30) days, we will notify you in writing of the time required to respond.

If we are unable to provide access or make a correction, we will generally explain the reasons, except where we are not required to do so under the PDPA.

PROTECTION OF PERSONAL DATA

17. Security Measures

To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks, we have implemented appropriate administrative, physical, and technical safeguards, including:

• Minimised collection of personal data;
• Authentication controls;
• Access controls;
• Good password practices; and
• Need-to-know access restrictions.

18. Internet Security Disclaimer

While we strive to protect your information and continually review and enhance our security measures, no method of transmission over the Internet or electronic storage is completely secure.

ACCURACY OF PERSONAL DATA

19. Keeping Information Current

We generally rely on personal data provided by you (or your authorised representative).

To ensure your personal data remains current, complete, and accurate, please notify our Data Protection Officer of any changes.

RETENTION OF PERSONAL DATA

20. Retention Period

We may retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable laws.

21. Disposal of Personal Data

We will cease retaining your personal data, or remove the means by which it can be associated with you, as soon as it is reasonable to assume that:

• the purpose for which it was collected is no longer being served; and
• retention is no longer necessary for legal or business purposes.

TRANSFERS OF PERSONAL DATA OUTSIDE SINGAPORE

22. Overseas Transfers

We generally do not transfer your personal data outside Singapore.

Where such transfers are necessary, we will obtain your consent where required and take reasonable steps to ensure that your personal data receives a standard of protection comparable to that provided under the PDPA.

DATA PROTECTION OFFICER

23. Contact Information

If you have any enquiries, feedback, or requests regarding our personal data protection policies and procedures, please contact our Data Protection Officer:

Contact Number: 8481 4817
Email Address: contact@petssionate.com

EFFECT OF NOTICE AND CHANGES TO NOTICE

24. Relationship with Other Agreements

This Notice should be read together with any other notices, contractual terms, and consent clauses that apply to the collection, use, and disclosure of your personal data by us.

25. Changes to This Notice

We may revise this Notice from time to time without prior notice.

You may determine whether any revision has been made by referring to the date shown below. Continued use of our services constitutes your acknowledgement and acceptance of any such changes.

Effective Date: 12 June 2026
Last Updated: 12 June 2026