Last Updated: January 2025

INTRODUCTION

Success IT Consultancy & Services (“SICS”, “we”, or “us”) is committed to protecting and respecting your privacy. This comprehensive policy outlines how we handle personal data across our website and software services in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA) and its subsequent amendments.

DEFINITIONS AND SCOPE

2.1 Key Terms

• Website: Success IT website (successit.com.sg) and any sub-domains thereof
• Software: Any SICS digital solutions, including but not limited to:
  * General Insurance systems
  * Quotation Systems
  * Auto Suite
  * ERP Wholesale
  * ERP Payroll software
  * All associated components and materials

2.2 User Categories

• Website Visitor: Person accessing the SICS website
• Customer: Person or organization using SICS software/services
• End User: Individual using Customer’s implementation
• Administrator: Customer’s system administrator

2.3 Data Categories

• Personal Data: Any information related to an identified/identifiable person
• Client Data: Data uploaded/stored in Software by Customer
• System Data: Technical and usage information
• Analytics Data: Performance and behavior metrics

PART A: WEBSITE PRIVACY PROVISIONS

A1. Website Data Collection

1.1 Technical Information

• IP addresses and device identifiers
• Browser type and version
• Operating system details
• Screen resolution and settings
• Language preferences
• Time zone settings

1.2 Visit Information

• Pages accessed and time spent
• Navigation patterns
• Click streams and interactions
• Download history
• Form submissions
• Search queries

1.3 User Preferences

• Language selections
• Display preferences
• Communication choices
• Marketing preferences
• Newsletter subscriptions

A2. Website Cookies

2.1 Essential Cookies

• Session management
• Security verification
• Basic functionality
• User preferences
• Load balancing

2.2 Analytics Cookies

• Usage patterns
• Performance metrics
• Error tracking
• User behavior analysis
• Site optimization data

2.3 Marketing Cookies

• Campaign effectiveness
• Advertisement tracking
• Conversion monitoring
• Retargeting data
• Marketing preferences

2.4 Cookie Management

• Browser settings control
• Opt-out mechanisms
• Preference center
• Cookie lifecycle
• Third-party cookies

A3. Website Marketing

3.1 Marketing Communications

• Product updates
• Industry news
• Event invitations
• Educational content
• Promotional offers

3.2 Marketing Preferences

• Subscription management
• Communication frequency
• Content preferences
• Channel selection
• Opt-out options

PART B: SOFTWARE & SERVICES PRIVACY PROVISIONS

B1. Software Data Collection

1.1 Account Information

• User credentials
• Contact details
• Role assignments
• Access permissions
• Authentication history

1.2 Usage Data

• Feature utilization
• Transaction patterns
• System interactions
• Performance metrics
• Error logs

1.3 Configuration Data

• System settings
• User preferences
• Custom configurations
• Integration settings
• Security parameters

B2. Cloud Infrastructure

2.1 Cloud Infrastructure

• Enterprise-grade cloud services
• Certified data centers
• Industry-standard architecture
• Enterprise security protocols
• International compliance standards

2.2 Data Management

• Storage allocation
• Backup procedures
• Archive policies
• Recovery protocols
• Data isolation

2.3 Security Measures

• Access controls
• Encryption standards
• Network security
• Monitoring systems
• Incident response

B3. Remote Access Services

3.1 Session Management

• Authentication protocols
• Session tracking
• Activity logging
• Time limitations
• Access controls

3.2 Security Controls

• Multi-factor authentication
• IP restrictions
• Device verification
• Audit logging
• Security monitoring

PART C: COMMON PROVISIONS

C1. Data Protection Measures

1.1 Technical Security

• End-to-end encryption
• Firewall protection
• Intrusion detection
• Vulnerability scanning
• Security patching

1.2 Organizational Security

• Access control policies
• Employee training
• Security audits
• Incident response
• Change management

1.3 Physical Security

• Data center security
• Access restrictions
• Environmental controls
• Surveillance systems
• Disaster recovery

C2. Disclosure of Personal Data

We may disclose Personal Data under specific circumstances to the following parties:

2.1 Legal and Regulatory Authorities

• Law enforcement agencies
• Courts and enforcement officers
• Tax authorities
• Regulatory and supervisory authorities
• Government bodies as required by law
• Data protection authorities

2.2 Business Partners and Service Providers

– Insurance companies and brokers

• Credit institutions and intermediaries
• Cloud infrastructure providers
• Payment processing services
• Technical service providers
• Professional service providers

2.3 Professional Advisors and Others

• Legal and financial advisors
• Auditors and accountants
• Debt recovery agencies
• IT security consultants
• Other authorized processors

C3. Data Storage and Processing Locations

3.1 Primary Processing Locations We primarily process and store Personal Data within Southeast Asia (SEA), specifically:

• Primary data centers in Singapore
• Backup facilities in Southeast Asia
• Archive storage within the region

3.2 Cross-Border Data Transfers In certain cases, Personal Data may be transferred and processed outside SEA under these conditions:

• Performance of legal duties
• Fulfillment of License obligations
• Customer consent with appropriate safeguards

3.3 Transfer Safeguards Cross-border transfers are protected by:

• Valid contracts with standard protection terms
• Approved codes of conduct
• Certified security measures
• PDPA compliance verification
• Privacy Shield certification (for US transfers)
• Regular security audits

3.4 Transfer Information Customers can request detailed information about:

• Specific transfer locations
• Security measures in place
• Compliance certifications
• Data protection standards
• Transfer mechanisms used

C4. Data Retention and Processing Period

4.1 General Retention Principle We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, specifically:

• Active service period
• License duration
• Applicable termination period
• Legal requirement period

4.2 Extended Retention We may retain data longer based on:

• Legitimate business interests
• Statutory requirements
• Accounting obligations
• Legal proceedings
• Regulatory compliance

4.3 Specific Retention Periods

• Active user data: Duration of service
• Backup data: 30 days rolling
• Financial records: 7 years
• Audit logs: 7 years
• Support records: 3 years
• Marketing data: Until opt-out

4.4 Data Destruction After retention periods expire, we securely:

• Delete electronic records
• Destroy physical documents
• Remove backup copies
• Clear archive storage

C5. Your Rights

You can request to:

• Access your data
• Correct inaccuracies
• Export your data
• Opt out of marketing
• Delete certain data

C5. Automatic Acceptance

This policy applies automatically upon:

• Website visitation
• Software usage
• Service subscription
• Quote acceptance
• Invoice payment

C6. User Rights and Controls

6.1 Access Rights

• Data access requests
• Information correction
• Processing information
• Data portability
• Processing restrictions

6.2 Control Rights

• Consent management
• Marketing preferences
• Processing objections
• Automated decisions
• Data deletion

6.3 Exercise of Rights

• Request procedures
• Response timelines
• Verification process
• Appeal mechanisms
• Documentation requirements

C7. Automatic Policy Acceptance

7.1 Acceptance Triggers

• Website visitation
• Software usage
• Service subscription
• Quote acceptance
• Invoice payment

7.2 Custom Agreements

• Special arrangements
• Custom terms
• Specific provisions
• Override conditions
• Documentation requirements

Contact Information

Data Protection Officer
Success IT Consultancy & Services Pte Ltd
39A Jalan Pemimpin, #06-01A
Halcyon Building
Singapore 577183
Email: [email protected]
Tel: +65 6842 1954

Version Control

• Version: 2025.1
• Effective: January 1, 2025
• Last Updated: January 14, 2025
• Next Review: January 2026

This comprehensive privacy policy may be updated periodically. Users will be notified of significant changes via email and through our website.