Privacy & personal data

Scope and responsible organisation

This statement applies to the main website and programme websites displaying this statement and operated by Conatus Mobility Pte. Ltd. (“Conatus Mobility”, “we” or “us”), enquiries initiated through them and the associated handling of personal data. We have appointed a Data Protection Officer (DPO) to oversee personal data protection matters.

It describes our general approach. The data, recipients, purposes and service arrangements for a particular application should also be read with the case-specific notices, authorisations and written agreements. Cooperating professional service providers and competent authorities may process data independently under their own legal obligations and privacy notices.

Personal data that may be involved

• Enquiry information: your name, contact details, country or region, citizenship, investment residence or business mobility objectives and relevant family or business needs that you choose to provide.
• Case information: where necessary for the service and after the applicable notice, consent or other lawful arrangements, this may include identity documents, nationality and residence history, family relationships, occupation, assets and source-of-funds evidence.
• Assessment information: criminal-record, health, insurance or other due-diligence documents, only where relevant programme or legal requirements apply.
• Service records: communications, authorisations, agreements, invoices, payments and application-progress records relevant to the service.
• Technical information: hosting and infrastructure providers may process operational information such as IP addresses, device or browser details, access times and request or error logs.

The current website does not provide application-document uploads or personal-data submission forms. Please keep initial enquiries general. Identity, financial or health documents should be supplied after the need for them and an appropriate transmission method have been confirmed.

Purposes and consent

Data may be used to respond to enquiries, assess initial eligibility and needs, prepare and coordinate services, communicate with authorised cooperating parties, meet applicable due-diligence and legal requirements, and handle billing, complaints, disputes and reasonable business records. Necessary technical information may support website operation, troubleshooting and security.

We collect, use and disclose personal data with your consent or where permitted or required by applicable law, explaining the relevant purposes where required. Merely visiting this website does not constitute consent to use application documents for marketing or disclosures unrelated to the notified purposes. Before introducing a new purpose, we will complete the applicable notice and consent steps or establish another basis permitted by applicable law.

The website currently has no marketing-subscription function. Any subsequent promotional contact must comply with applicable consent, opt-out and Singapore Do Not Call (DNC) requirements.

Recipients and international transfers

Where relevant to the service, appropriately notified and supported by a lawful basis, data may be shared with the cooperating organisations and legal or professional service providers in the relevant destinations, competent authorities and necessary legal, tax, translation, notarial, insurance or other professionals actually involved in the case. Hosting, communications and technical providers may also process necessary data within their service scope. Data may be provided to authorised bodies where legally required.

We will confirm the necessary recipients, purposes and countries or regions before a case-specific transfer. Transfers outside Singapore must meet applicable transfer requirements, using appropriate legal arrangements or other lawful mechanisms to ensure a standard of protection comparable to that required by Singapore's PDPA.

This statement is not blanket authorisation for all future recipients or purposes. Independent processing by service providers and authorities is governed by their notices to you and applicable law.

Singapore PDPA: protection, retention and accountability

We handle personal data in accordance with the applicable requirements of Singapore's Personal Data Protection Act 2012 (PDPA). Appointing a DPO is one part of accountability, alongside implementing data-handling policies and procedures in practice.

Accuracy and protection

We will take reasonable steps to ensure that data used to make decisions affecting individuals, or disclosed to other organisations, is accurate and complete. We will apply reasonable access controls, confidentiality and transmission safeguards, and other organisational and technical measures appropriate to the data and processing risks, to protect against unauthorised access, collection, use, disclosure and similar risks. Please notify us promptly of material changes relevant to your case.

Retention

Retention depends on service purposes, legal or regulatory requirements, dispute handling and reasonable business needs. We will cease retention, or appropriately remove the association with individuals, when the purpose no longer requires it and there is no remaining legal or business need. Statutory retention and legal holds may affect deletion timing.

Data incidents

We will assess suspected personal-data breaches, contain the risks and take appropriate remedial action. Where applicable notification thresholds are met, we will notify the Personal Data Protection Commission (PDPC) and affected individuals as required by law. This statement does not represent government certification or replace continuing legal compliance.

Access, correction and withdrawal of consent

You may contact the DPO to request access to or correction of personal data in our possession or control, withdraw consent, or raise questions or complaints about its handling. You may also request deletion; this will be assessed against applicable law, ongoing services and retention obligations, rather than treated as an unrestricted right to automatic deletion.

Reasonable verification of identity and the scope of a request may be needed. Access, correction or disclosure may be subject to statutory exceptions and the rights of others. Where a reasonable fee is legally permitted, we will explain it in advance. We will respond in accordance with applicable requirements and, where necessary, explain the expected timing.

Withdrawing consent may affect our ability to continue the relevant service or coordinate an application. We will explain the potential consequences and handle the request as required. Processing that remains permitted or required by law does not automatically cease on withdrawal.

Website technology, cookies and external links

Cookie choices are divided into essential functions, analytics and advertising tracking. Essential functions support operation, security and remembering your choices. Analytics helps us understand page use and improve the experience. Advertising tracking can measure advertising performance and support applicable personalised advertising and remarketing. You choose each optional category separately.

Your first visit and choices

The first-visit notice contains only a short explanation, equally accessible “Accept all” and “Reject all” buttons, and a “Privacy & settings” link. Making a choice immediately closes it without a confirmation pop-up, settings dialogue or replacement floating button. You can also select analytics and advertising tracking separately on this page. Continuing to browse, scrolling or making no choice does not constitute consent.

Essential functions do not depend on optional consent, and refusal does not prevent normal browsing. Cookie choices relate only to the website technologies described. They do not authorise advisory services, marketing contact or other personal-data processing.

Current tools and conditions for activation

No analytics or advertising-tracking services are currently connected, and no associated analytics scripts, advertising pixels or marketing-tracking cookies are installed. This page provides the choice interface. Saving “Accept all” does not start unconnected tools or authorise unknown future providers or purposes.

Before connecting specific tools, we will identify their providers, data collected, purposes, cookie or identifier retention periods, relevant international processing and provider-policy links, and update the choice version. Optional tools requiring consent will load or send data only after valid consent for the relevant category. New providers or material purpose changes require the necessary renewed consent; choices made for a different configuration will not be carried over.

Retention and device scope

Choices are kept in local storage in this browser for the main domain, shared by both languages and programme directories. The record includes selected categories, version, decision time and expiry time, with no name, contact details or browsing history. The current interface does not send it to enquiry systems or external tracking services. Both acceptance and refusal are remembered for 180 days without repeated requests during that period. Expiry, clearing site data, switching browsers or private browsing may require a new choice.

If local storage is blocked, we try session storage. If neither is available, the choice applies only to the current page. Records from the earlier panel are not converted into permission for future analytics or advertising tools.

Changing or withdrawing a choice

Use “Cookie settings” in the footer at any time to return here, switch off a category and save, or select “Reject all”. Withdrawal will stop subsequent tracking based on that consent. When specific tools are connected, we will implement and describe the corresponding measures to stop processing and clear identifiers. Withdrawal does not affect earlier processing based on valid consent or automatically delete records lawfully obtained by a provider; contact the DPO for personal-data requests. You can also clear cookies and local records through browser settings.

Essential technology and external links

Hosting and infrastructure providers may process necessary technical information, including IP addresses, device information and request logs, for operation, security, abuse prevention or access functions, subject to their applicable policies. Refusing optional cookies does not disable these essential functions.

Email, telephone and WhatsApp links open the relevant application or external website, whose provider applies its own privacy rules. The WhatsApp / WeChat / Phone section provides the shared public number for you to call or add us. Copy buttons only place the selected number or email address on your clipboard; they do not send a message. Information you actively send is handled by the recipient under the applicable rules. External government, legal and other websites apply their own privacy notices.

Family members and minors

If you provide personal data on behalf of a family member, please ensure that you have the necessary authority and explain the purposes and relevant privacy information to them. A parent or guardian with appropriate legal authority should be involved where a minor's data is concerned. We will request only information necessary for the relevant enquiry or application; a family relationship is not unlimited authority for every form of processing.

Contact the Data Protection Officer

The company has appointed a DPO. Personal-data requests, enquiries and complaints may be sent through the company contact below, with “DPO / Personal Data Protection” in the subject line, for handling by the appointed DPO.

sc@conatusmobility.com
63 Chulia Street, #15-01,
OCBC Centre East, Singapore 049514

Please initially provide a reply address, the type of request and the necessary context, without attaching complete identity or financial documents. For enquiries to Singapore's data-protection regulator, refer to the official PDPC website.

Updates and legal references

This statement was updated on 27 September 2026. We will update it when relevant data-handling practices change and provide further notice or obtain the necessary consent where applicable.

For the legal framework and regulatory guidance on personal data in Singapore, see the Personal Data Protection Act 2012 and the Personal Data Protection Commission (PDPC). Programme-specific sources and review dates appear on the relevant programme pages.