Personal Data Protection (PDPA)

Overview

The Personal Data Protection Act (PDPA) is Singapore’s data protection law that sets out how organisations must collect, use, disclose, and care for personal data. It promotes accountability and transparency so that individuals understand what data is being collected and why, and it requires organisations to protect that data with reasonable security measures.

At Jerry’s AI, we apply PDPA principles across our website and services by limiting data collection to what is necessary, using data only for clear and legitimate purposes, and giving individuals practical ways to access, correct, withdraw consent, or request deletion of their personal data, where applicable.

1. Understanding Personal Data

Personal data refers to information that can identify an individual, whether on its own or when combined with other accessible data. At Jerry’s AI, we recognize the importance of protecting such data, especially when collected through our website, applications, or services.

2. About the PDPA

The PDPA establishes a standard framework for managing personal data in Singapore. It ensures responsible handling of personal data and includes measures like the Do Not Call (DNC) Registry, which allows individuals to opt out of receiving unsolicited marketing messages.

This Act works alongside other regulations and applies to Singapore-based businesses and service providers.

3. Our Commitment

• Collecting only necessary data for legitimate business purposes
• Using data in a lawful and transparent manner
• Safeguarding your information against unauthorized access or misuse
• Allowing users to opt-out, update, or request deletion of their personal data (where applicable)
• Respecting preferences registered on the DNC Registry

4. Scope of PDPA at Jerry’s AI

This policy applies to all personal data in our possession—whether digital or physical. The PDPA does not apply to:

• Personal data collected by individuals for domestic purposes
• Employee data used internally within our organization
• Government agencies handling public sector data
• Publicly available business contact information (e.g., name, business email)

5. Data Protection Obligations

Jerry’s AI adheres to the following PDPA data protection obligations:

• Consent: We obtain consent before collecting or using personal data (where required).
• Purpose Limitation: We use data only for clearly defined purposes.
• Notification: You will be informed of the reasons your data is being collected.
• Access & Correction: You may request access or updates to your personal data.
• Accuracy: We take reasonable steps to keep data accurate and up-to-date.
• Protection: We implement reasonable security measures to safeguard personal data.
• Retention Limitation: We retain data only as long as necessary for business/legal reasons.
• Transfer Limitation: We transfer data overseas only with appropriate protection.
• Openness: Our data policies are clear and accessible.
• Accountability: A Data Protection Officer (DPO) oversees our compliance.

6. Contacting Our DPO