Privacy policy

Effective: January 1, 2023.

The website www.mercurysummer.com (the "Website") and the brand Mercury Summer is owned and operated by 92nd Division (referred to as the "Company," "We," "Our," or "Us").

This Privacy Policy (the "Policy") explains how the Company collects, stores, uses, discloses, or otherwise processes the personal information of its clients and prospects (referred to as the "User," "you," or "your") when visiting or using the Website.

The Company takes its responsibilities as a controller of your personal information provided or collected on the Website seriously, in compliance with Singapore's Personal Data Protection Act 2012 (PDPA) and any applicable amendments or re-enactments of the PDPA. We recognize the importance of protecting your personal information and strive to ensure compliance with the PDPA.

If there are any modifications to this Policy, the Company will notify you by posting a public notice on the Website's bulletin board or by providing individual notice through mail, text messages, emails, or other appropriate methods.

Collection of Personal Data

We may collect personal data from you when you interact with our website, make purchases, register an account, subscribe to our newsletters, or contact our customer support. The types of personal data we collect may include your name, contact information, payment details, and any other information you voluntarily provide.

Personal information collected by the Company may include:

Information provided by the Users:

Account Registration	When you register directly on the Website: [Required] Name, E-mail address, phone number, password, encoded identification information (CI) [Optional] Gender, birth date, national information When you register through Google or Facebook: [Required] ID, Name, E-mail address, phone number, gender, birth date, CI [Optional] Gender, birth date When you are a minor: [Required] Information of legal representatives (name, birth date, CI of legal representatives)
Provision of Services or Products	[Required] Information of ordering and/or receiving person (name, e-mail address, phone number, address)
Customer Services (inquiry, reservation, return and/or repair of the products)	[Required] Name, E-mail address, details of the inquiry (purchase and payment records, repair records, reservation records) [Optional] Birth date, gender, national information, phone number, address, purchase location and date
Payment	[Required] Credit card details, bank account details
Refund	[Required] Name, history for shipping and billing, bank account details
Marketing and advertising	[Optional] Name, E-mail address, phone number, birth date, cookies, IP address
Contents	Image information taken and uploaded by the customer from participatory content

Information collected while the Users use services:

In addition to the information directly provided by the Users, the Company may collect information during the Users' use of the services provided.

Log information

IP address, log data, use time, search word input by the user, visited pages, internet protocol address, cookies, purchase and payment records, access suspension records

Method of Collection

The Company collects Users' information through the following methods:

Webpage, written form, fax, telephone calling, emailing, WhatsApp, tools, and cookies for the collection of created information.
Information provided by partner companies.

Use of Personal Data

The Company utilises the collected information of Users for the following purposes:

Member management and identification.
To detect and prevent unauthorised or fraudulent use, as well as abuse of the service.
Performance of contracts, service fee payment, and settlement related to the provision of requested services.
Providing customer service and other related services to you.
Improving existing services and developing new services.
Notifying users about changes in Company sites or applications, as well as policy updates.
Facilitating connections between users who already know each other and, with your permission, allowing other users to connect with you.
Conducting statistical analysis on member's service usage to provide personalised services and targeted advertisements.
Sharing information about promotional events and opportunities for participation.
Compliance with applicable laws or legal obligations, including government requests.
Using information with the prior consent of the users, such as for marketing and advertising purposes.

The Company acknowledges that if it intends to use the information for purposes other than those expressly stated in this Policy, it will obtain the Users' consent beforehand

Disclosure of Personal Data

The Company may disclose your personal data to third parties, such as service providers, business partners, and affiliates, to fulfil the purposes mentioned above. These third parties are contractually obligated to protect your personal data and can only use it for the specified purposes.

The Company will not disclose personal information to third parties except in the following cases:

When the Company discloses the information to its affiliates, partners, and service providers.
When the Company's affiliates, partners, and service providers perform services on behalf of the Company, such as bill payment, order execution, product delivery, communication (sending messages, etc.), and dispute resolution (including payment and delivery disputes).
When the Users provide prior consent for disclosure.
When the User chooses to receive information about products and services from specific companies by sharing their personal information with those companies.
When the User chooses to allow sharing of their personal information with other companies' sites or platforms, such as social networking sites.
In other cases where the User gives prior consent to share their personal information.
When disclosure is required by law.
If disclosure is mandated by law enforcement agencies for crime detection, following the procedures and methods prescribed in applicable laws and regulations.

Protection of Personal Data

The Company implements appropriate security measures to safeguard your personal data from unauthorised access, disclosure, alteration, or destruction. However, please note that no data transmission over the internet or electronic storage method is completely secure, and we cannot guarantee absolute security.

The Company considers the security of users' personal information to be of utmost importance. We have implemented the following security measures to protect your personal information from unauthorised access, disclosure, use, or modification:

Encryption of personal information: We encrypt users' personal information to ensure secure transmission.
Use of encrypted communication zone: We transmit users' personal information through secure and encrypted communication channels.
Secure storage of important information: We encrypt and securely store vital information, such as passwords.
Countermeasures against hacking: We have implemented systems that control external access to prevent unauthorised access, leakage, or damage to users' personal information caused by hacking or computer viruses.
Establishment and implementation of internal management plans: We have established and executed internal management plans to ensure the security of personal information.
Installation and operation of access control systems: We have implemented access control systems to manage and control access to personal information.
Measures to prevent forgery or alteration of access records: We take measures to prevent unauthorised forging or alteration of access records.

By implementing these security measures, we strive to protect your personal information to the best of our abilities.

Retention of Personal Data

The Company retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations.

Once the purpose for collecting personal information has been achieved, we follow specific procedures, deadlines, and methods for the disposal of such information, as outlined below:

Procedure for disposal:

Upon achieving the intended purpose, the information provided is transferred to a separate database (or separate documents for paper-based information). In accordance with our internal policies and relevant laws, such as the "Act on the Consumer Protection in Electronic Commerce" and the "Protection of Communications Secrets Act," the information is stored for a designated period or promptly disposed of.

Deadline for disposal:

Personal information will be disposed of within 5 days from the last date of possession, either when the retention period of the user's personal information has expired, it is no longer needed due to the achievement of its intended purpose, revocation of a specific service, or business closure, among other reasons.

Method of disposal:

Electronic files containing personal information are deleted in a manner that prevents technical recovery. Printed information is either shredded or incinerated to ensure complete destruction.

Access and Correction of Personal Data

You have the right to access and correct the personal data we hold about you. If you need to update or amend your personal data, please contact us using the information provided below.

As the main agents of the information, you or your legal representatives have the following rights regarding the collection, use, and sharing of personal information by the Company:

Right to access personal information:

You or your legal representatives may access the information and review the records of the collection, use, and sharing of the information in accordance with applicable laws.

Right to rectification:

You or your legal representatives may request the correction of inaccurate or incomplete information.

Right to erasure:

You or your legal representatives may request the deletion of the information once its purpose has been fulfilled and consent has been withdrawn.

Right to restriction of processing:

You or your legal representatives may temporarily suspend the processing of personal information in cases of disputes regarding information accuracy, legality of processing, or if retention is necessary.

Right to data portability:

You or your legal representatives may request the provision or transfer of the information.

Right to object:

You or your legal representatives may suspend the processing of personal information used for direct marketing, legitimate interests, official duties and authority, research, and statistics.

Right to automated individual decision-making, including profiling:

You or your legal representatives may request the cessation of automated processing of personal information, including profiling, if it has a significant impact or legal effect on you.

To exercise the above rights, contact the Company by sending a document or email, or using the telephone with the required written form (details provided below). The Company will promptly take necessary measures and provide notice of the results within ten (10) business days. However, the Company may reject your request only to the extent that there are proper or equivalent legal grounds.

Protection of Personal Information of Children

As a general principle, the Company does not collect any information from children under the age of 16 or the equivalent minimum age as required by relevant laws in the jurisdiction. The Company's website, products, and services are primarily intended for adults. The Company's website or application includes an age restriction function to prevent children from using it, and the Company does not intentionally collect personal information from children through this function.

However, if the Company unavoidably collects personal information from children under the age of 16 or the equivalent minimum age as required by relevant laws in the jurisdiction, the Company will take additional measures to protect their personal information, including:

Verifying, to the best of its efforts, whether the individuals are children requiring consent from their guardian and ensuring that the consenting person is authorised.
Obtaining consent from the parents or guardians of children to collect their personal information or directly sending information about the Company's products and services.
Providing parents or guardians of children with a notice regarding the Company's privacy protection policy for children, including the types of personal information collected, the purposes for which it is collected, and any sharing of such information.
Granting legal representatives of children the right to access, correct, or delete personal information, temporarily suspend the processing of personal information, and request the withdrawal of previously given consent.
Limiting the collection of personal information to only what is necessary for children's participation in online activities, avoiding excessive data collection.

These measures are implemented to ensure the protection of children's personal information to the extent possible.

Updates to the Privacy Policy

The Company reserves the right to amend or modify this Privacy Policy periodically to reflect changes in our practices and legal requirements. The updated Privacy Policy will be posted on our website (or through individual notice such as written document, fax, or email), and obtain consent from Users if required by applicable laws.

Others

Cross-Border Data Transfers

In certain cases, the Company may transfer your personal data to countries outside of Singapore. We will ensure that such transfers comply with applicable data protection laws, and we will implement appropriate safeguards to protect your personal data.

Third Party Sites and Services

The website, products, or services of the Company may include links to third-party websites, and the privacy protection policies of those third-party sites may differ. Therefore, it is necessary for users to additionally review the privacy policy of any third-party site linked to the Company's site.

Contact

For any further questions, please reach out to "contact@mercurysummer.com"