KMM Investment Holdings Pte Ltd

Data Protection Policy

Introduction

We are committed to protecting personal data and respecting the privacy rights of individuals. This Data Protection Policy explains how we collect, use, store and protect personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act.

Personal Data We Collect

Personal data refers to any information that can identify an individual directly or indirectly. We may collect and process the following types of personal data:

  • Name and contact details

  • Information provided through enquiries or correspondence

  • Business-related information

  • Technical data such as device, browser and usage information

We only collect personal data that is relevant, adequate and necessary for legitimate business purposes.

How We Use Personal Data

We process personal data lawfully, fairly and transparently. Personal data may be used for the following purposes:

  • Responding to enquiries or requests

  • Providing information about our services

  • Managing professional relationships

  • Improving website functionality and user experience

  • Complying with legal or regulatory obligations

We do not use personal data for automated decision-making or profiling.

Lawful Basis for Processing

We process personal data on one or more of the following lawful bases:

  • Consent, where provided

  • Performance of a contract or pre-contractual steps

  • Compliance with legal obligations

  • Legitimate business interests, provided these do not override individual rights

Data Sharing

We do not sell or trade personal data. Personal data may be shared only where necessary and appropriate, such as:

  • With trusted service providers acting on our instructions

  • Where required by law or regulatory authorities

All third parties are required to respect the confidentiality and security of personal data.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. Access to personal data is restricted to authorised personnel only.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, regulatory or contractual requirements. Once no longer required, data is securely deleted or anonymised.

Your Rights

Individuals have the following rights in relation to their personal data:

  • The right to access personal data we hold

  • The right to request correction of inaccurate or incomplete data

  • The right to request erasure of personal data

  • The right to restrict or object to processing

  • The right to data portability, where applicable

  • The right to withdraw consent at any time

Requests to exercise these rights should be made by contacting us.

Complaints

If you believe that your personal data has been processed unlawfully or unfairly, you have the right to raise a concern. We encourage you to contact us in the first instance so we can address any issues promptly.

Changes to This Policy

We may update this Data Protection Policy from time to time to reflect changes in legal requirements or our data handling practices. Any changes will be effective once published on the website.

Contact

If you have any questions about this Data Protection Policy or how we handle personal data, please contact us.