Privacy Policy

1.1 This Privacy Policy explains how HR MONSTER PTE. LTD. (UEN 202538262Z), with its registered office at 1 North Bridge Road, #30-02, High Street Centre, Singapore 179094 ("HR Monster", "we", "us" or "our"), collects, uses, discloses and protects Personal Data when you:

• •(a) visit or use our website www.hr.monster (the "Site");
• •(b) interact with us in connection with the Site or our Services (for example, by contacting us, signing up for newsletters, downloading materials or booking a demo); or
• •(c) otherwise interact with us where this Privacy Policy is made available to you.

1.2 This Privacy Policy does not describe in full how we handle Personal Data when we provide HR Monster Services to our business customers. Where we process Personal Data as a data intermediary or processor on behalf of a customer, our processing is governed primarily by our Customer Agreement and Data Processing Addendum with that customer. In such cases, the customer's own privacy policy will typically apply to their employees' or workers' data.

1.3 By using the Site or providing us with Personal Data, you acknowledge that you have read and understood this Privacy Policy.

2.1 Depending on the context, HR Monster may act as:

• •(a) a data controller (or equivalent term under local law) in relation to Personal Data we collect about visitors to our Site, prospective customers, business contacts, marketing recipients and job applicants; and
• •(b) a data processor or data intermediary in relation to Personal Data that our business customers upload to, or process through, the HR Monster platform (for example, employee records, time and attendance data, payroll information), in which case the customer is responsible for providing appropriate privacy notices to its staff.

3.1 For the purposes of this Privacy Policy:

• •(a) "Personal Data" means information about an individual who can be identified from that data or from that data and other information to which we have access (including as defined under applicable data protection laws such as the Singapore Personal Data Protection Act 2012 ("PDPA") and, where applicable, the EU/UK General Data Protection Regulation ("GDPR"/"UK GDPR") and similar laws in other jurisdictions); and
• •(b) "Processing" means any operation performed on Personal Data, such as collection, recording, organisation, storage, use, disclosure or deletion.

4.1 We may collect the following categories of Personal Data:

• •(a) Contact and business information: name, job title, company name, business email address, business phone number, country and any other information you provide when you contact us, request a demo, sign up for newsletters, register an account or otherwise interact with us;
• •(b) Account and usage information (Site): information about how you access and use the Site, including IP address, browser type and version, device identifiers, operating system, referring URLs, pages viewed, links clicked and time spent on pages;
• •(c) Communication information: information contained in your communications with us, such as emails, online forms, support requests and feedback;
• •(d) Marketing and preference information: your preferences regarding receiving marketing from us, and information about your interaction with our marketing communications; and
• •(e) Recruitment information: if you apply for a job with us, CV or resumé, employment history, qualifications, references and any other information you voluntarily provide.

4.2 We generally do not seek to collect sensitive Personal Data (such as data relating to health, religion, ethnicity or trade union membership) via the Site. Please do not submit such information to us via the Site unless we specifically request it.

5.1 We collect Personal Data:

• •(a) directly from you, when you fill in forms on the Site, request a demo or further information, correspond with us, register for an event or download, or apply for a job;
• •(b) automatically, when you visit the Site, we may use cookies, web beacons, log files and similar technologies to collect information about your device and usage; and
• •(c) from third parties, including business partners, publicly available sources, and analytics or marketing providers, where permitted by applicable law.

6.1 We may use your Personal Data for the following purposes:

• •(a) To operate and improve the Site and Services;
• •(b) To respond to your requests and communicate with you;
• •(c) To send you marketing and updates (with consent where required by law);
• •(d) To manage our relationship with you and your organisation;
• •(e) To protect our rights, security and property;
• •(f) To comply with legal and regulatory obligations; and
• •(g) To evaluate job applications and manage recruitment.

6.2 Where we rely on consent, you have the right to withdraw your consent at any time.

7.1 HR Monster operates out of Singapore and may interact with customers and individuals across Asia and globally. We are committed to Processing Personal Data in accordance with:

• •(a) the Singapore PDPA; and
• •(b) where applicable, the GDPR, UK GDPR and other data protection laws in the jurisdictions in which we operate.

8.1 We may use cookies and similar technologies on the Site to enable the Site to function properly, remember your preferences, analyse how the Site is used and support our marketing efforts.

8.2 You can usually configure your browser to refuse all or some cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of the Site may become inaccessible or not function properly.

9.1 We may share your Personal Data with:

• •(a) Service providers: third-party vendors that provide services such as hosting, analytics, email delivery, marketing and customer support;
• •(b) Business partners and professional advisers;
• •(c) Corporate transactions: in connection with any merger, acquisition or sale of assets; and
• •(d) Legal and regulatory authorities: where required by law.

9.2 We do not sell Personal Data.

10.1 We are headquartered in Singapore and may transfer Personal Data to countries outside your country of residence, including to jurisdictions that may not provide the same level of data protection as your home jurisdiction.

10.2 Where we transfer Personal Data from the European Economic Area, the United Kingdom or Switzerland to a country that is not recognised as providing an adequate level of protection, we will implement appropriate safeguards, such as standard contractual clauses.

11.1 We implement reasonable technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

11.2 However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect Personal Data, we cannot guarantee its absolute security.

12.1 We retain Personal Data for as long as necessary to fulfil the purposes for which it was collected, including to provide the Site and our Services, comply with legal requirements, and resolve disputes.

12.2 When Personal Data is no longer required, we will delete or anonymise it, or where this is not possible, we will securely store it and isolate it from further Processing.

13.1 Depending on your location and subject to applicable law, you may have certain rights in relation to your Personal Data, which may include:

• •(a) Right of access: to obtain confirmation as to whether we process your Personal Data and to receive a copy of it;
• •(b) Right to rectification: to have inaccurate or incomplete Personal Data corrected;
• •(c) Right to erasure: to request the deletion of your Personal Data in certain circumstances;
• •(d) Right to restriction of Processing: to request that we restrict the Processing of your Personal Data;
• •(e) Right to data portability: to receive Personal Data in a structured, commonly used format;
• •(f) Right to object: to object to the Processing of your Personal Data where we rely on legitimate interests; and
• •(g) Right to withdraw consent: where we rely on consent, to withdraw your consent at any time.

13.2 To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding.

13.3 You may also have the right to lodge a complaint with your local data protection authority.

14.1 The Site is not directed to children and we do not knowingly collect Personal Data from individuals under the age of 18.

14.2 If we become aware that we have collected Personal Data from a child without appropriate consent, we will take steps to delete that information.

15.1 The Site may contain links to third-party sites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

16.1 We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Changes are effective when posted on the Site.

16.2 We encourage you to review this Privacy Policy periodically for any updates.