Privacy Policy

1. Introduction

Terra Advisory Services Pte. Ltd. (UEN: 201207025E) ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services or visit our website.

We comply with the Personal Data Protection Act 2012 (PDPA) of Singapore. By providing your personal data to us, you acknowledge and agree that you have read and understood this policy, and consent to the collection, use, processing, and disclosure of your personal data as described below.

Business Contact Information Exemption: The data protection provisions in the PDPA (parts III to VI) do not apply to business contact information. This refers to your name, position title, business telephone number, business address, business email address, and other similar information not provided solely for personal purposes.

2. Collection of Information

We collect personal data that you voluntarily provide to us when you:

• Engage our services (company incorporation, corporate secretarial, accounting, tax filing, immigration services)
• Contact us via email, WhatsApp, or our website
• Submit KYC documents for compliance purposes
• Subscribe to our communications

Types of personal data we may collect:

• Identity data: name, passport number, nationality, date of birth
• Contact data: address, email, phone number, WhatsApp number
• KYC data: source of funds, proof of address, beneficial ownership information
• Technical data: IP address, browser type, device information

3. Disclosure of Personal Data

We may share your personal data with:

• Government agencies (ACRA, IRAS, MOM, CPF Board) where required by law
• Banks and financial institutions (with your consent)
• Professional advisers (lawyers, auditors, insurers)
• Service providers who assist with IT, cloud storage, and data processing
• Our Malaysia affiliate, JT & CY Advisory (MIA Registered Firm)

We do not sell your personal data to third parties.

4. Retention Limitation

Section 25 of the PDPA requires us to retain your documents containing personal data as long as we have specific business requirements for the services we provide to you, or a legal obligation to save the data even after our business relationship ends.

Typical retention periods:

• Client engagement records: 5 years (as required by ACRA and IRAS regulations)
• KYC documents: 5 years (as required by AML/CFT regulations)
• Website visitor data: 12 months (for analytics purposes)

5. Protection of Personal Data

We implement reasonable security arrangements to protect your personal data from unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks. Our security measures include encryption of data in transit, access controls, two-factor authentication for sensitive systems, and regular security audits.

6. Openness

You may request access to or correction of your personal data held by us by contacting us at admin@terraadvisoryservices.com. We will respond to your request within a reasonable time as required by the PDPA.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act 2012 of Singapore, you have the right to:

• Request access to your personal data held by us
• Request correction of inaccurate or incomplete personal data
• Withdraw your consent to the collection, use, or disclosure of your personal data
• Lodge a complaint with the Personal Data Protection Commission (PDPC)

To exercise these rights, please contact us at admin@terraadvisoryservices.com.

8. Data Breach Notification

In the event of a data breach that is likely to result in significant harm to you, we will notify you and the Personal Data Protection Commission (PDPC) as soon as practicable, and within 3 days of determining that the breach is notifiable, as required under the PDPA (Sections 26A-26E).

9. International Transfers

We may transfer your personal data to recipients located outside Singapore. When we do so, we ensure that the transfer complies with the PDPA and that the receiving jurisdiction provides a comparable level of protection, or that appropriate safeguards are in place.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date. We encourage you to review this policy periodically.