Legal

PDPA Statement

Last updated · 16 June 2026

This statement sets out how Palazon manages personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). It should be read together with our Privacy Policy.

1. Consent

We collect, use and disclose your personal data only with your consent, or where collection, use or disclosure without consent is permitted or required under the PDPA or other applicable laws. By providing your personal data to us, you consent to its collection, use and disclosure for the purposes set out in this statement and our Privacy Policy.

2. Purpose of collection

We collect personal data to respond to enquiries, provide and support our services, manage our relationship with you, and meet legal and regulatory obligations. We collect only data that is reasonable and relevant for these purposes.

3. Use and disclosure

We use and disclose personal data only for the purposes for which it was collected, or for purposes that a reasonable person would consider appropriate in the circumstances, unless otherwise required or permitted by law.

4. Access and correction

You have the right to request access to the personal data we hold about you and information about how it has been used or disclosed, and to request correction of any inaccurate or incomplete personal data. We will respond to such requests within a reasonable time, in accordance with the PDPA.

5. Protection

We make reasonable security arrangements to protect personal data in our possession or control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.

6. Retention

We retain personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by law, after which it will be deleted or anonymised.

7. Transfer of personal data overseas

If we transfer personal data outside Singapore, we will ensure that the overseas recipient is bound by legally enforceable obligations to provide a standard of protection comparable to the PDPA.

8. Withdrawal of consent

You may withdraw your consent to the collection, use or disclosure of your personal data at any time by contacting our Data Protection Officer. We will inform you of the likely consequences of withdrawal. Please note that withdrawing consent may affect our ability to provide certain services to you.

9. Data Protection Officer

Our Data Protection Officer (DPO) is responsible for ensuring our compliance with the PDPA. You may contact the DPO with any questions, requests or complaints regarding your personal data at hello@palazon.com, or by post at 540 Sims Avenue #03-05, Singapore 387603.

10. Updates to this statement

We may revise this PDPA Statement from time to time. The current version will be published on this page with the "Last updated" date revised accordingly.