Bailey & Patch

Introduction / 简介

Bailey & Patch and its technology partner Multiverse Tech (“we”, “our”, or “us”) are committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore. This policy explains how we collect, use, disclose, and safeguard your personal data through our digital platforms, including SSO login, training and job matching systems.

Bailey & Patch 与技术合作方 Multiverse Tech（下称“我们”）依据新加坡《个人资料保护法》（PDPA）致力于保护您的个人资料。通过使用我们的平台（如一站式登录系统、培训项目与就业匹配系统），即表示您同意本隐私政策的条款。

1. Types of Personal Data We Collect / 我们收集的个人资料类型

Depending on your interaction with our services, we may collect the following types of personal data:

Full name / 姓名
Contact number / 联系电话
Email address / 电子邮件地址
Date of birth / 出生日期
Residential address / 居住地址
National ID (e.g., NRIC, FIN) / 国家身份证号码（如 NRIC、FIN）
Disability-related documents or medical certificates / 残障相关文件或医疗证明
Resume or employment history / 简历或工作经历
Training attendance and certification / 培训出席记录与认证进度
Login activity, IP address, device/browser information / 登录活动、IP地址、设备与浏览器信息
Photographs (e.g., for ID verification or training participation) / 照片（如用于身份验证或培训记录）

We collect only what is necessary to provide our services and meet regulatory requirements.
我们仅收集为提供服务及符合法规所必要的资料。

2. Purpose of Data Collection / 收集资料的目的

We may use your personal data for the following purposes:

Secure login via Single Sign-On (SSO) / 提供一站式安全登录（SSO）
Account registration and identity verification / 注册账户与身份验证
Eligibility verification for disability support programmes / 验证残障支持项目资格
Access to online and offline training / 提供线上与线下培训服务
Job matching and employment support / 提供就业推荐与支持
Communication, notifications, and service updates / 通知、通讯与服务更新
Internal analytics and user experience improvement / 内部数据分析与用户体验优化
Marketing purposes (only with your explicit consent) / 市场推广（仅在您明确同意时）

3. How We Collect Data / 数据收集方式

User-submitted registration forms / 用户提交的注册表单
File uploads (e.g., NRIC, medical documents, photographs) / 用户上传的文件（如身份证、医疗文件、照片）
Automated tracking tools (cookies, IP address, device ID, etc.) / 自动追踪工具（Cookies、IP地址、设备信息等）
Third-party authentication systems (e.g., Keycloak) / 第三方身份验证系统（如 Keycloak）

4. Disclosure of Data / 数据披露

We may share your data under strict confidentiality and only when necessary:

With training or job placement partners (with your consent) / 与培训或就业合作伙伴（在您同意下）
With cloud infrastructure providers (e.g., Microsoft Azure) / 与云端基础设施供应商（如 Microsoft Azure）
With government agencies or regulatory authorities if required by law / 根据法律要求与政府或监管机构共享
With internal staff or contractors under confidentiality agreements / 在保密协议下与内部工作人员或服务供应商共享

We do not sell your personal data.
我们绝不会出售您的个人资料。

5. Data Retention Policy / 数据保留政策

Your data is stored securely on Microsoft Azure servers. / 您的数据会安全地储存在 Microsoft Azure 服务器上。
We retain data as long as it is necessary for business or legal reasons. / 我们会根据业务或法律需要保留您的资料。
Upon account termination, your data will be deleted within 7 calendar days. / 如果您注销账户，所有数据将在 7 天内删除。
We regularly review the necessity of retention and delete when appropriate. / 我们会定期审查资料的保留必要性，并在无须保留时安全删除。

6. Your Rights Under PDPA / 您在 PDPA 下的权利

You may exercise the following rights at any time:

Access your personal data / 查阅您的资料
Correct any inaccurate data / 更正不准确的数据
Withdraw your consent / 撤回您对数据使用的同意
Request account and data deletion / 请求删除您的账户与资料

Please contact us at:
[email protected] | [email protected]
*We may require identity verification before processing your request.*
*我们可能会在处理您的请求前要求身份验证。*

7. Data Protection & Security / 数据保护与安全措施

SSL encryption for all data transmission / 所有传输数据均通过 SSL 加密
Passwords are securely hashed / 账户密码进行安全加密存储
Backend systems have restricted access controls / 后台系统实施权限控制
Real-time security monitoring and logging / 实时安全监控与日志记录

8. Data Protection Officer (DPO) / 数据保护负责人

While we have not formally designated a DPO, our internal Data Privacy Team is responsible for ensuring PDPA compliance.
虽然我们尚未正式指定个人资料保护负责人，但由我们的内部隐私团队负责 PDPA 合规工作。

Contact: [email protected] | [email protected]

9. Policy Updates / 政策更新

We may update this policy at any time. Changes will be posted here with an updated effective date.
我们可能随时更新本政策。任何更改将公布在本页面并更新“生效日期”。

Your continued use of our services indicates acceptance of the latest version.
您继续使用我们的服务即表示您接受最新政策内容。