HeveaConnect Pte. Ltd. is committed to keeping all your personal information secure.  We take the protection of your privacy and the confidentiality of your personal information very seriously, and we process personal information in compliance with all applicable data protection laws and regulations.

This Privacy Policy explains how we collect, use and look after your personal information.



The Personal Data collected by this website and your interaction with us is collected by HeveaConnect who acts as the Data Controller.  This means that HeveaConnect is responsible for deciding how we hold and use your Personal Data.



We use the following definitions in this Privacy Policy:

“HeveaConnect”, “we”, “us” or “our” means HeveaConnect Pte. Ltd.

“Personal Data” means any data relating to an individual who can be identified from that data, or from that data and other information which we have or are likely to have access to (and includes information which our representatives or service providers have). In addition to factual information, it also includes any expression of opinion about an individual, and any indication of our intentions (or the intentions of any other person) in relation to such an individual.




These are some of the ways in which we collect Personal Data:


information we receive when you contact us through our website by filling in and submitting the Enquiry Form;


information we receive when you subscribe to our mailing list;


if you are a customer or potential customer, information obtained by us through our business dealings; and




These are the types of Personal Data that we collect:


Information that you provide to us.  The nature of your relationship with us, and the kind of communication that you request from us, will determine the type of Personal Data we may ask for.  For example, if you contact us through our website by submitting the Enquiry Form, or if you subscribe to our mailing list, we will ask you to provide your email address, first and last names, job title, name of the company you work for, and the country where you are based.  If you are interested in joining our team, we may ask for your education and employment history.


Information that is passively or automatically collected through the use of cookies when you visit our website.  Such information includes:


web analytics collected by Google Analytics, such as how you arrive at our website, the type of browser, operating system and device you are using, your IP address, and your clickstream and timestamp information (e.g. the pages you have viewed, the time at which such pages were accessed, and the amount of time spent per page) (for more information about Google Analytics, please visit;


social media sharing information collected by AddThis, such as whether you have shared any of our content on any social media (and if so, which platform(s)) by clicking on any of the share buttons placed on our website, and the geolocation of users with whom such content is shared (for more information about AddThis, please visit; and


information collected by Mailchimp when you sign up to join our mailing list (we use Mailchimp to manage our mailing list subscriptions, and to create and send emails to subscribers); this may include information about the device and applications you are using (e.g. your IP address, browser ID and operating system), your usage data when you interact with Mailchimp’s services (e.g. your browsing activities and which of Mailchimp’s services you are using), and metrics relating to the deliverability of emails and other communications with you (for more information about Mailchimp, please visit  

Information that is collected through the use of cookies will not, however, contain your name, address, telephone number or email address.  You can enable or disable cookies at any time by changing the settings in your web browser.  Please note that cookies that are placed by third-party service providers (such as the ones mentioned above that are placed by Google Analytics, AddThis and Mailchimp, and also those placed when you access any video embedded in our webpage that is hosted on a third-party video sharing website) are subject to their own policies regarding how they collect, use and store information; these practices are not covered by this Privacy Policy and we do not have any control over them.




Personal Data may be stored and used by us for the following purposes:


where we have obtained your specific consent;


if you have subscribed to our mailing list, to send you marketing communications (e.g. press releases, sustainability reports and other publications which we think may be of interest to you);


if you are a customer or potential customer, to administer and manage our business relationship (including performance of any legal agreement between us);


if you are a job applicant, to assess your suitability for a career opportunity in which you have expressed interest; and


to comply with applicable laws and regulations.


However we use Personal Data, we make sure that such use is lawful.  The law allows or requires us to use Personal Data for various reasons.  These include:


where we need to perform our contractual obligations;


where we have legal or regulatory obligations to discharge;


where we are required to do so under legal proceedings; and


where the use of Personal Data is necessary to pursue our legitimate interests, such as (by way of a non-exhaustive list):


to detect and prevent fraud and other potentially illegal activities;


to protect our network and information security (e.g. prevention of personal data breaches and cyber-attacks);


to establish, exercise or defend our legal rights; and


to conduct analytics on our website traffic, e.g. pages and links clicked, patterns of navigation, time spent at a page, devices used, location of users, etc.


Some of these grounds for using Personal Data may overlap and there could be several grounds which justify our use of Personal Data.


We will take steps to ensure that Personal Data is accessed only by employees who have a need to do so for the purposes as described in this Privacy Policy.  They are subject to a duty of confidentiality and will only use Personal Data in accordance with our instructions.




We may share Personal Data for the following purposes:


with third parties whom we have engaged to provide services to us (e.g. administrative, audit, logistics, information technology and research services).  These third parties will be bound by appropriate data protection obligations and they will only use and process Personal Data on our behalf in accordance with our instructions and for the purposes as described in this Privacy Policy (and not for their own purposes);


where we are required under law or regulation to disclose Personal Data; this may include (by way of a non-exhaustive list) disclosure in response to a court order, or release of information to a government authority, regulator or law enforcement agency;


to the extent mandated by law for the protection of our legitimate interests; and


in the event that our business is sold or integrated with another business, Personal Data may be disclosed to the prospective buyer and its advisors (who will be bound by appropriate data protection obligations), and will be passed to the new owner when it acquires the business.


Please be assured that we will not sell, rent or give away your Personal Data to third parties for commercial purposes without your consent.




We will always ensure that any international transfer of Personal Data is consistent with legal and regulatory requirements, e.g. (by way of a non-exhaustive list):


where Personal Data is transferred to a country outside of the European Economic Area (“EEA”), such country is recognised by the European Commission as providing an adequate level of protection for Personal Data; and


where Personal Data needs to be transferred to a recipient based in a country outside of the EEA which is not recognised by the European Commission as providing an adequate level of protection for Personal Data, we will require such recipient to be bound by standard contractual clauses which are approved by the European Commission for the protection of Personal Data.




We will retain Personal Data for only as long as is reasonably necessary for the purposes as described in this Privacy Policy.


In some circumstances, however, legal or regulatory requirements may obligate us to retain Personal Data for a longer period of time.




You have the following rights in relation to your Personal Data:


require us to provide information regarding your Personal Data, e.g. give you a copy of the Personal Data about you that we hold, let you know where we got your Personal Data, how we use your Personal Data, what we use it for, who we disclose it to, whether we transfer it to another country (and where), how we protect it and how long we keep it for (if such information is not already provided in this Privacy Policy);


require us to rectify your Personal Data if it is inaccurate or incomplete; we may seek to verify any new information provided by you before we rectify our existing records;


where the use of your Personal Data is based on your consent (see section 5.1(a)), you can withdraw your consent at any time; however, please note that we may still be entitled to use your Personal Data if we have another legitimate reason to do so, e.g. for a purpose as described in section 5.2;


where the use of your Personal Data is based on our legitimate interests (see section 5.2(d)), you can object to such use if you believe your fundamental rights and freedoms outweigh our legitimate interests; however, there may be circumstances where we have a legal basis to deny your request;


require us to delete your Personal Data, but only where:


you have withdrawn your consent for us to use your Personal Data (where the use of your Personal Data is based on your consent) (see section 5.1(a));


it is no longer needed for the purpose for which it was collected;


you have successfully objected to the use of your Personal Data (see section 9.1(d)); or


we are required by law or regulation to do so.


require us to retain but not use your Personal Data; note, however, that this right is only available to you where:


you dispute its accuracy, and we are verifying it (see section 9.1(b));


its use is unlawful, but you do not want us to delete it;


it is no longer needed for the purpose for which it was collected, but we still need it to establish, exercise or defend our legal rights; or


you have raised your objection to the use of your Personal Data, and we are verifying whether we have a legal basis to deny your request (see section 9.1(d)).

Nonetheless, we are legally entitled to continue to use your Personal Data following a request by you not to use it, where:


we obtain your consent to do so;


we need to do so in order to establish, exercise or defend our legal rights; or


we need to do so in order to protect the rights of another natural or legal person;


where you have given us your Personal Data, require us to provide such data to you in a structured, commonly used and machine-readable format, or transmit such data to a third party where this is technically feasible; note, however, that this right is only available to you where:


the legal basis for processing your Personal Data is either your consent or the performance of a contract with you; and


such processing is carried out by us using automated means (i.e. excluding paper files); and


to lodge a complaint with your national data protection supervisory authority about how we use your Personal Data; we ask that you please speak with us first to resolve any issues, but you have the right to contact your national supervisory authority at any time if you wish to do so.


To exercise your rights, you may contact us at any time using the contact details provided in section 10.  We may need to ask you for proof of identity when you contact us, so that we can be sure that your Personal Data is not disclosed to any person who has no right to receive it.




If you have any questions regarding this Privacy Policy, or if you wish to unsubscribe from our mailing list at any time, please contact us at:

180 Clemenceau Avenue
#05-02 Haw Par Centre
Singapore 239922


The person above is also our Data Protection Officer for the purposes of the Singapore Personal Data Protection Act 2012,


If you have any concerns about how we use your Personal Data, please contact us in the first instance and we will do our best to address your concerns as quickly as possible.  You may also lodge a complaint with your national data protection supervisory authority at any time if you wish to do so (see section 9.1(h)).




From time to time, we may update this Privacy Policy to take into account new legal requirements, advancements in information technology, or changes in the way we operate our business.  We invite you to review our Privacy Policy from time to time so that you will always know what personal information we collect, how we collect it, how we use it and who we share it with.


This Privacy Policy was last updated on 14 December 2018.