Privacy Policy

Nick Tung Pte. Ltd. (UEN 202609128E), trading as NICKTUNG, is a company incorporated in Singapore. Our registered address is 10 Ubi Crescent, #05-32, Ubi Tech Park Singapore 408564.

References to “NICKTUNG”, “we”, “us” or “our” in this Policy are references to Nick Tung Pte. Ltd.

We may collect the following categories of personal data:

• Identity data — your name, job title and company name
• Contact data — email address, telephone number and mailing address
• Enquiry data — details of your project or service request that you include in a contact form or message
• Technical data — IP address, browser type and version, time zone, pages visited and other diagnostic data collected automatically when you use our website
• Usage data — information about how you use our website and services
• Marketing data — your preferences for receiving marketing communications from us

We do not collect special categories of personal data (such as racial or ethnic origin, health, religion or biometric data) and we do not knowingly collect personal data from persons under 18 years of age.

We collect personal data through the following means:

• Direct interactions — when you complete an enquiry form, send us an email, call us or otherwise contact us
• Automated technologies — as you navigate our website, we may automatically collect technical data using cookies and similar technologies (see Section 9 below)
• Third parties — we may receive your data from referral partners, publicly available sources or analytics providers, subject to their respective privacy policies

Under the PDPA, we must have a lawful basis and a notified purpose for processing your personal data. We collect and use your personal data for the following purposes:

We will not use your personal data for purposes incompatible with those stated above without first obtaining your consent or as otherwise permitted by the PDPA.

Where we send telemarketing messages (including voice calls, SMS or fax) to Singapore telephone numbers, we will check the Personal Data Protection Commission's Do Not Call (DNC) Registry before doing so and comply with the DNC provisions under the PDPA, unless a relevant exception applies (for example, where you have given us clear and unambiguous consent to receive such messages).

We may share your personal data with:

• Service providers — third-party vendors who provide services on our behalf (such as cloud hosting, email delivery, analytics and CRM), under appropriate data processing agreements
• Professional advisers — lawyers, accountants and auditors who need the data to provide professional advice
• Regulators and authorities — government bodies, law enforcement or courts where required by law or regulation
• Business purchasers — if we sell or transfer any part of our business, personal data held by us may be one of the transferred assets, subject to the same privacy protections

We do not sell, rent or trade your personal data to third parties for their own marketing purposes.

Some of our service providers are located outside Singapore (for example, cloud infrastructure and email platforms). Where we transfer your personal data overseas, we take steps to ensure that the recipient provides a standard of protection comparable to that under the PDPA — including entering into data transfer agreements or relying on other safeguards recognised under Singapore law.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting or reporting requirements. As a general guide:

• Enquiry records where no contract results — up to 2 years from the date of the enquiry
• Client and project records — for the duration of the contract and up to 7 years thereafter (to meet ACRA and tax retention requirements)
• Marketing consent records — until consent is withdrawn

When personal data is no longer required, we securely delete or anonymise it.

Our website uses cookies and similar technologies to distinguish you from other users, remember your preferences, and analyse how our website is used. You can configure your browser to refuse cookies, but this may affect your ability to use parts of our website.

We use the following types of cookies:

• Strictly necessary cookies — essential for the website to function
• Analytics cookies — help us understand how visitors interact with our website (e.g. Google Analytics)
• Functionality cookies — remember your preferences

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, use, modification, disclosure or destruction. These include access controls, encryption in transit, and regular security reviews.

In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with the mandatory data breach notification obligations under the PDPA (as amended in 2021).

You have the following rights in respect of your personal data:

• Access — you may request a copy of the personal data we hold about you and information about how we have used it in the past 12 months
• Correction — you may request that we correct any inaccurate or incomplete personal data we hold about you
• Withdrawal of consent — you may withdraw consent to the collection, use or disclosure of your personal data at any time. Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal. Note that withdrawing consent may mean we are unable to continue providing certain services to you
• Data portability — where applicable under the PDPA, you may request that we transmit your personal data to another organisation in a machine-readable format

To exercise any of these rights, please contact our Data Protection Officer at contact@nicktung.com. We will respond within 30 calendar days. We may charge a reasonable fee for access requests as permitted under the PDPA.

If you believe we have not handled your personal data in accordance with the PDPA, please contact us first at contact@nicktung.com so that we can address your concern. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission at www.pdpc.gov.sg.

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to read the privacy policy of every website you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The updated version will be posted on this page with a revised effective date. We encourage you to review this Policy periodically.

For questions, requests or concerns about this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer: