User guide

Product Guide FAQ Pricing for business

Use Cases

Tech startups Digital SMEs The International

Careers

Arival Bank Privacy Policy for Singapore

Effective Date: 10/06/2021

Last Updated on: 09/16/2022

This addendum supplements, details or modifies the Arival Global Privacy Policy in accordance with the applicable local data privacy law, its implementing rules and regulations and related issuances of the local data privacy regulator (collectively referred to herein as “Law”).

This addendum applies to the processing of personal data by Arival Pte Ltd. and it’s affiliate companies (collectively, “Arival” or “we” hereinafter). For this purpose, the term “processing” shall include, but not limited to, the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure or destruction of personal data.

Personal data

Singapore law defines personal data as data, whether true or not, about an individual who can be identified from that data; or from that data and other information to which the organization has or is likely to have access.

The personal data collected by Arival may include, but not limited to, the following:

name, title, address;

personal identification and/or passport number;

telephone number;

email address and online passwords;

records of communications with Arival;

responses to market surveys and contests conducted by Arival or on its behalf;

credit card or debit card information;

Bank Accounts and other financial information

username, password and other identifiers when you register at Arival’s website;

In processing personal data, we will take into account the nature of its sensitivity and will only process sensitive data upon the express consent of the data subject and only for purposes it was provided, or in accordance with law.

In processing sensitive data, Arival will inform data subjects of the sensitive data that is necessary to fulfill the core functionality of the product or service, and the consequences of refusal to the processing, for the purpose of allowing the data subjects to decide whether or not to give consent.

Collection, Purpose of Collection and Processing of Personal Data

Personal data will, generally, only be collected and used for the primary purposes of:

to ensure that content from our site is presented in the most effective manner for you;

to notify you about changes to our services;

to manage your customer account;

to offer you products and services;

to inform you about our policies and terms;

to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies;

to provide, improve, and develop our products, services, and advertising;

to use personal information for purposes such as data analysis, research, and audits;

to ensure business continuity.

Disclosure

Arival discloses personal data:

for the primary purpose for which it was collected; or

for purposes that a reasonable person will consider appropriate in the circumstances; or

where the individual has consented; or

for direct marketing by Arival where consent has been given, but individuals will be given the opportunity to opt out of such direct marketing. Arival includes its contact details in any direct marketing; or

where permitted by law;

to Arival’s parent, related, affiliate and/or associate company;

in any court of law or any relevant party in connection with any claim or legal proceedings, legal firms and/or advisors, debt collection agencies, credit reporting agencies and/or credit providers;

to any payment and banking entities including, but not limited to, financial institutions for purposes of maintaining financial records, assessing or verifying credit, and facilitating payment;

regulatory authorities and enforcement agencies;

third party service providers, consultants, insurers, underwriters, auditors and advisors as well as their respective agents and/or contractors on a need to know basis; and

any actual or potential assignee, transferee or acquirer of any of Arival’s business in connection with any corporate exercise.

Arival does not disclose your personal data for any secondary purposes unless your consent has been previously obtained in accordance with law.

Arival will not sell or license any personal data that it collects from an individual.

In situations where Arival processes personal data outside reasonable expectations, Arival will require your consent prior to processing.

Cross-border disclosure

Any personal data provided to Arival may be transferred to, stored by or disclosed to an overseas recipient. For example, Arival may use a server hosted overseas to store data, which may include your personal data.

Your personal data may also be processed by employees or by other third parties operating outside of Singapore in countries like the United States of America or in the European Union, who work for Arival, or by the representatives and employees of Arival’s parent company and affiliates.

Arival will take reasonable steps, in the circumstances, before your personal data is disclosed to an overseas recipient, to ensure that the overseas recipient does not breach privacy laws in relation to your personal data. In this regard, Arival has a Transborder Data Flow Agreement in place that requires foreign recipients of your personal data to provide a standard of protection comparable to the protection under the Personal Data Protection Act of 2012 (PDPA).

Data breach

Where a suspected data breach has occurred, Arival will act in accordance with its data breach response plan. In the event that Arival has determined that a data breach has occurred, we will notify the local data privacy regulator and affected data subject (s) in accordance with law.

Anonymity

Arival gives individuals the option not to identify themselves when dealing with it, where practicable. However, if you do not provide us with the personal data that we request, our ability to handle your inquiry, request, complaint or application may be diminished.

Consent and limitation in the processing of personal data

You may choose whether or not to provide your personal data, and, if already provided, you may choose to exercise your right to object, block, or remove such personal data as provided by law. If you would like to exercise your right to object, block, or remove your consent, please contact Arival using the contact details below.

In this case, however, we may not be able to adequately provide you the assistance or services you requested.

When you object, block or remove your consent, Arival shall no longer process your personal data, except in cases allowed or required by law.

If you would like to update, correct or access your personal data, please contact us using the contact details below.

Inquiries and Complaints

If you have any queries or concerns about Arival’s privacy policy, this addendum or about our use of your personal data, you may write to us to privacy@arival.com or contact us by filling out this form.