CHENG HONG WELFARE SERVICE SOCIETY Personal Data Protection Policy (Pursuant to Singapore PDPA 2012)
Version Date： 12 June 2026
1. Introduction | 引言
CHWSS is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA).
CHWSS 承诺根据《2012年个人资料保护法令》（PDPA）保护您的个人资料。
2. Collection of Personal Data | 收集的个人资料类别
We collect the following categories of personal data through the registration system：
我们通过报名系统收集以下类别的个人资料：
(a) Name：For name tag production and tax-deductible receipt issuance.
（一）姓名：用于制作名牌及开具税收抵扣发票。
(b) Company Name：For official acknowledgment wall.
（二）公司名称：用于官方感谢墙展示。
(c) Contact Number：For emergency alerts and registration confirmation.
（三）电话号码：用于紧急通知及报名确认。
(d) Email Address：To send confirmation, e-tickets, event updates, and post-event thank you notes.
（四）电子邮箱：用于发送确认函、电子门票、活动更新及活动后感谢信。
(e) Sponsorship & Donation Amount：To process payment and submit records to IRAS for tax relief.
（五）赞助及捐款金额：用于处理支付及向 IRAS 提交税务抵扣记录。
(f) Dietary Restrictions (Vegetarian/Halal)：Sensitive Data. Used solely for catering. Deleted within 7 days after the event.
（六）饮食限制（素食/清真）：敏感数据。仅用于安排餐饮，活动结束后7天内删除。
(g) Remarks：To handle special requests (e.g., seating arrangements).
（七）备注：用于处理特殊请求（如座位安排）。
3. Purposes and Legal Basis | 目的与法律依据
We use your data for：(a) Contract performance：Registration and event management. (b) Legal obligation：Submission of donation records to IRAS under the Income Tax Act. (c) Consent：Collection of dietary restrictions and marketing communications.
我们将您的资料用于：（一）合同履行：报名及活动管理；（二）法律义务：根据《所得税法》向 IRAS 提交捐款记录；（三）同意：收集饮食限制及营销沟通。
4. Disclosure | 披露
We do not sell your data. Disclosure is limited to：(a) Statutory：IRAS (for tax relief). (b) Service Providers：Caterers, IT vendors (bound by data processing agreements). (c) Medical Emergency：On-site medical staff (for allergies/dietary info). (d) Legal Requirement：Court orders or government agencies.
我们不出售您的资料。仅向以下方披露：（一）法定机构：IRAS（税务抵扣）；（二）服务商：宴会承办商、IT供应商（签署数据处理协议）；（三）医疗紧急情况：现场医护人员（过敏/饮食信息）；（四）法律要求：法院命令或政府机构。
5. Data Protection Officer (DPO) and Your Rights | 数据保护官与您的权利
Under PDPA, you have the right to access, correct, or withdraw consent for your data.
根据 PDPA，您有权访问、更正或撤回对您资料的同意。
Contact DPO：Name： [Please fill] Email： [Please fill] We will respond within 10 working days.
联系 DPO：姓名：[请填写] 邮箱：[请填写] 我们将在 10个工作日内 回复。
6. Data Retention | 数据保留
(a) Donation records： 5 years (for IRAS audit). (b) Contact details： 3 years (for future charity invitations), then deleted. (c) Dietary restrictions： 7 days after the event.
（一）捐款记录：5年（满足 IRAS 审计要求）；（二）联系方式：3年（用于未来慈善邀请），此后删除；（三）饮食限制：活动结束后 7天 内删除。
7. Security | 安全措施
We implement SSL encryption, role-based access control, and regular staff PDPA training to protect your data.
我们采用 SSL 加密传输、基于角色的访问控制及员工 PDPA 定期培训，以保护您的数据。
8. Governing Law | 适用法律
This Privacy Policy is governed by the laws of Singapore. In case of inconsistency between English and Chinese versions, the English version shall prevail.
本隐私政策受新加坡法律管辖。中英文版本如有不一致，以英文版本为准。