Privacy and Data Protection Policy
Effective date: 1 July 2026 | Last updated: 30 June 2026
1. Introduction
HUBB IT PTE LTD (“Hubb IT”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal data entrusted to us. This Privacy and Data Protection Policy explain how we collect, use, disclose, protect and retain personal data in accordance with the Singapore Personal Data Protection Act 2012 (“PDPA”).
This Policy applies to personal data collected through our website, online forms, email communications, business interactions, service engagements, recruitment activities and other channels through which you may provide personal data to us.
“Personal data” refers to data, whether true or not, about an individual who can be identified from that data or from that data together with other information to which we have or are likely to have access.
2. Personal Data We May Collect
Depending on your relationship and interaction with us, we may collect the following types of personal data where relevant:
• your name, job title, company name and business contact details.
• email address, telephone number, mailing address and other contact information.
• information submitted through our website forms, enquiries, requests for quotations, service requests or feedback channels.
• account, service, transaction, billing and payment-related information where applicable.
• curriculum vitae, employment history, qualifications and other recruitment-related information if you apply for a role with us.
• technical information collected when you use our website, such as IP address, browser type, device information, operating system, referring pages, date/time stamps and website usage information.
• any other information that you voluntarily provide to us or that is necessary for us to provide our services or comply with applicable laws.
We will only collect personal data that is relevant and reasonably necessary for the purposes for which it is collected.
3. How We Collect Personal Data
We may collect personal data directly from you when you:
• visit or use our website.
• submit an enquiry, contact form, support request or service request.
• communicate with us by email, telephone, messaging platform or other channels.
• engage us for services or request information about our products and services.
• enter into a business relationship with us as a client, vendor, partner or representative of an organisation.
• apply for employment or provide recruitment-related information.
We may also receive personal data from authorised representatives, business partners, service providers, public sources or other third parties where permitted by law.
4. Purposes for Collection, Use and Disclosure
We may collect, use, disclose and/or process your personal data for one or more of the following purposes:
• responding to your enquiries, feedback, complaints or requests.
• providing, managing, supporting and improving our IT, cybersecurity, managed services, consultancy or other business services.
• preparing quotations, proposals, contracts, invoices, payment processing and account administration.
• verifying your identity or authority to act on behalf of an organisation.
• managing client, vendor, partner and business relationships.
• performing service delivery, technical support, troubleshooting, maintenance, security monitoring and related operational activities.
• processing job applications, assessing suitability for employment and conducting recruitment-related administration.
• sending service-related communications, notices, administrative updates and information relevant to your engagement with us.
• sending marketing or promotional communications where you have consented or where permitted by applicable law, and subject to your right to unsubscribe.
• conducting internal business analysis, audit, risk management, security, compliance and quality assurance activities.
• protecting the rights, property, safety and security of Hubb IT, our clients, users and other parties.
• complying with applicable laws, regulations, court orders, regulatory requests, contractual obligations and internal policies.
• any other purpose that is reasonably related to the above or that we notify you of at the time of collection.
5. Disclosure of Personal Data
We may disclose personal data where necessary for the purposes described in this Policy, including to:
• our employees, officers and authorised personnel on a need-to-know basis.
• affiliates, related companies, business partners, clients or vendors where relevant to our service delivery or business relationship.
• third-party service providers, contractors, professional advisers, insurers, auditors, IT hosting providers, cloud service providers, payment processors and other vendors who support our business operations.
• government agencies, regulators, law enforcement bodies, courts or other authorities where required or permitted by law.
• any other party to whom you have authorised us to disclose your personal data.
Where we engage third parties to process personal data on our behalf, we will take reasonable steps to ensure that such parties protect the personal data and use it only for authorised purposes.
6. Cookies and Website Technologies
Our website may use cookies and similar technologies to enable website functionality, improve user experience, analyse website traffic and support security. Cookies are small files placed on your device when you visit a website.
Examples of cookies or similar technologies we may use include:
• necessary cookies that support website operation and security.
• preference cookies that remember user settings.
• analytics cookies that help us understand website usage and improve our website.
• third-party cookies where our website contains embedded content, links or tools provided by third parties.
You may disable or manage cookies through your browser settings. However, some website features may not function properly if cookies are disabled. We do not control cookies used by third-party websites or platforms.
7. Protection of Personal Data
We will take reasonable administrative, physical and technical measures to protect personal data in our possession or under our control from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.
These measures may include access controls, password protection, encryption where appropriate, secure storage, staff awareness, vendor management and secure disposal practices. While we take reasonable precautions, no method of electronic transmission or storage is completely secure.
8. Accuracy of Personal Data
We rely on personal data provided by you or your authorised representative. You should ensure that the personal data you provide to us is accurate, complete and up to date. Please contact our Data Protection Officer if there are changes to your personal data.
9. Retention of Personal Data
We will retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable laws, contractual obligations, accounting requirements, audit requirements or business purposes.
When personal data is no longer required, we will take reasonable steps to destroy, delete or anonymise it in accordance with our retention procedures and applicable legal requirements.
10. Transfer of Personal Data Outside Singapore
Where personal data is transferred outside Singapore, including for hosting, storage, back-up, support or service delivery purposes, we will take reasonable steps to ensure that the personal data receives a standard of protection that is comparable to the protection under the PDPA, unless an exception applies under the law.
11. Withdrawal of Consent and Marketing Preferences
You may withdraw your consent for our collection, use or disclosure of your personal data by contacting our Data Protection Officer. Please note that withdrawing consent may affect our ability to provide certain services, respond to requests or fulfil contractual or legal obligations.
If you no longer wish to receive marketing communications from us, you may use the unsubscribe instructions in our communication or contact our Data Protection Officer. We may still send you non-marketing communications relating to services, transactions, administration, security or legal matters.
12. Access and Correction Requests
Subject to the PDPA, you may request access to personal data that we hold about you or request correction of personal data that is inaccurate or incomplete.
To process your request, we may require sufficient information to verify your identity and understand the nature of your request. We may charge a reasonable fee for processing an access request where permitted by law.
We will aim to respond to access or correction requests within 30 days after receiving sufficient information from you. If we are unable to respond within 30 days, we will inform you of the time by which we are able to respond.
13. Third-Party Websites
Our website may contain links to third-party websites, platforms or services. We are not responsible for the privacy practices, content or security of these third-party websites. You should review their privacy policies before providing personal data to them.
14. Complaints and Enquiries
If you have any questions, requests, complaints or feedback regarding this Policy or the way we handle personal data, please contact:
Data Protection Officer
HUBB IT PTE LTD
36 Newton Road, #03-06
Singapore 307964
Email: security@hubb-it.sg
To help us respond promptly, please include “PDPA Enquiry” or “PDPA Complaint” in the subject line of your email where applicable.
15. Updates to this Policy
We may update this Policy from time to time to reflect changes in our practices, legal requirements or website operations. The latest version will be posted on our website. You are encouraged to review this Policy periodically.