Data protection notice for employees

What we do with your personal data as our employee.

This Data Protection Notice ("Notice") sets out the basis on which INWORLDWIDE PTE. LTD. (UEN 202554940E) ("we", "us" or "our") may collect, use, disclose or otherwise process personal data of employees in accordance with the Personal Data Protection Act 2012 ("PDPA"). It applies to personal data in our possession or under our control, including personal data held by organisations we have engaged to collect, use, disclose or process personal data for our purposes. Customers and website visitors: see our privacy notice for customers.

Who this Notice applies to

This Notice applies to everyone engaged in a contract of service with us, whether part-time, temporary or full-time, and to interns and trainees working at or attached to us (together, "employees"). References to "employment" apply equally to internships and traineeships, where relevant.

Personal data

"Personal data" means data, whether true or not, about an employee who can be identified from that data, or from that data and other information to which we have or are likely to have access. Other terms have the meanings given to them in the PDPA.

Personal data we may collect in the context of your employment with us includes, without limitation, your:

Collection, use and disclosure

We generally collect personal data that (a) you knowingly and voluntarily provide in the course of or in connection with your employment or job application with us, or through a third party you have authorised to disclose it to us (your "authorised representative"), after you or your authorised representative have been notified of the purposes for which it is collected and have given written consent to its collection and use for those purposes; or (b) collection and use without consent is permitted or required by the PDPA or other laws. We will seek your consent before collecting any additional personal data, and before using your personal data for a purpose that has not been notified to you, except where permitted or authorised by law.

We collect and use your personal data for the following purposes, and may disclose it to third parties where necessary for these purposes:

The purposes above may continue to apply after your employment with us has ended or changed, for a reasonable period afterwards, including, where applicable, a period that lets us enforce our rights under a contract with you.

Withdrawing your consent

The consent you give for the collection, use and disclosure of your personal data remains valid until you withdraw it in writing. You may withdraw consent, and ask us to stop collecting, using and/or disclosing your personal data, by writing or emailing to our Data Protection Officer at the contact details below. Withdrawing consent does not affect our right to continue to collect, use and disclose personal data where doing so without consent is permitted or required under applicable laws.

When we receive your written request, we may need reasonable time, depending on its complexity and its impact on our relationship with you, to process it and to tell you the consequences of acting on it, including any legal consequences that may affect your rights and liabilities to us. In general, we will process your request within ten (10) business days of receiving it.

Access to and correction of personal data

If you wish to make (a) an access request for a copy of the personal data we hold about you, or for information about the ways we use or disclose it, or (b) a correction request to correct or update any of your personal data we hold, you may submit your request in writing or by email to our Data Protection Officer at the contact details below.

A reasonable fee may be charged for an access request. If so, we will tell you the fee before processing your request.

We will respond to your request as soon as reasonably possible. If we cannot respond within thirty (30) days of receiving it, we will tell you in writing within those thirty (30) days when we will be able to respond. If we are unable to provide any personal data or make a correction you have requested, we will generally tell you why, except where we are not required to under the PDPA.

Depending on the request, we may only need to give you access to the personal data contained in the documents requested, not to the entire documents. Where your personal data forms a negligible part of a document, we may simply confirm the personal data we have on record.

Protection of personal data

To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have introduced appropriate administrative, physical and technical measures such as minimised collection of personal data, authentication and access controls (such as good password practices and need-to-know access to personal data), two-factor authentication to secure access to our systems, encryption of data by our cloud service providers, and regular updates of operating systems and other software.

No method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect your information and keep reviewing and improving our information security measures.

Accuracy of personal data

We generally rely on personal data provided by you or your authorised representative. To keep your personal data current, complete and accurate, please tell our Data Protection Officer in writing or by email at the contact details below if it changes.

Retention of personal data

We may retain your personal data for as long as it is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable laws. We will stop retaining your personal data, or remove the means by which it can be associated with you, as soon as it is reasonable to assume that keeping it no longer serves the purposes for which it was collected and is no longer necessary for legal or business purposes.

Transfers outside Singapore

Some of our service providers (including email, cloud storage and payroll software providers) process or store personal data outside Singapore, including in the United States. Where your personal data is transferred outside Singapore, we will take steps to ensure that it continues to receive a standard of protection at least comparable to that provided under the PDPA, for example by ensuring that the recipient is bound by legally enforceable obligations such as contractual terms.

Data Protection Officer

You may contact our Data Protection Officer with any enquiries or feedback on our personal data protection policies and procedures, or to make any request:

Effect of this Notice and changes to it

This Notice applies together with any other policies, notices, contractual clauses and consent clauses that apply to our collection, use and disclosure of your personal data. We may revise this Notice from time to time without prior notice. You can tell whether it has changed by checking the date it was last updated below. Your continued employment constitutes your acknowledgement and acceptance of such changes.

Effective date: 4 November 2026. Last updated: 4 November 2026.