SafeEntry Privacy Statement

This SafeEntry Privacy Statement (the "Privacy Statement") must be read in conjunction with the SafeEntry Terms of Use (the "Terms"). The purpose of this Privacy Statement is to inform you of how we collect, use and disclose data relating to you, or that may relate to a third party individual and is provided by you (collectively, "Data").

The Types of Data that we collect

1. We may collect Data in connection with your use of SafeEntry, including but not limited to -
   1. your name;
   2. your national registration identity card number, or your foreign identity number, or your nationality and passport number;
   3. your mobile phone number;
   4. the address of the subject premises which you are entering or exiting;
   5. your time of entry into the subject premises;
   6. your time of exit from the subject premises; and
   7. such other information as may be provided by, or collected from you in connection with your use of SafeEntry.
2. We may collect the Data and other types of information relating to your activities in respect of SafeEntry, including but not limited to —
   1. Analytics Tags: Analytics Tags are used by us to analyse the effectiveness of the functionalities and features of SafeEntry in order to improve general user experience.
   2. Cookies: Cookies are small data files which are sent to your device to store and track information about you when you use SafeEntry. Cookies are also used to improve and maintain the functionality of SafeEntry, and to track information such as the number of users of SafeEntry, their frequency of use, the profile of the users and other similar information relating to the use of SafeEntry.
   3. Server Logs: Server logs are files and records of activity created by the device that you use SafeEntry from. We collect and retain such server logs for administrative, security and troubleshooting purposes.
   4. Device information: Information relating to your device such as its model, type, operating system and other technical attributes.

   In order for you to use SafeEntry to scan barcodes and QR codes (e.g. NRIC card barcode or TraceTogether Token QR code), SafeEntry will access your device’s camera for you to do so. Camera usage on SafeEntry will only be for this purpose. For the avoidance of doubt, SafeEntry does not access audio clips, pictures or videos stored on your device. Should other changes to in-app settings be required to enable or enhance the functionality of SafeEntry (e.g. access to your device’s location), we will draw your attention to these and your permission will be sought. In addition to the foregoing and where applicable, SafeEntry will toggle your device’s WiFi and Bluetooth to periodically clear cache and data in order for you to use the SafeEntry (Business) App for prolonged scanning for TraceTogether Bluetooth User IDs (e.g. TraceTogether App or Token Bluetooth User ID).

Why we collect Data

1. Data collected from you may be used and disclosed by us for any, some or all of the following purposes —
   1. to assist, process and facilitate your use of SafeEntry;
   2. to prevent or control the incidence or transmission of COVID-19 through contact tracing; and
   3. for any other purpose permissible under the COVID-19 (Temporary Measures) Act.

   (collectively, “Purposes”)

1. If you provide us with the Data described in paragraph 1 above —
   1. we may share, transfer and disclose such Data to the relevant public sector agencies (e.g. Ministry of Health) for the purpose of preventing or controlling the incidence or transmission of COVID-19 through contact tracing;
   2. we may share, transfer and disclose such Data to owners of the relevant premises maintaining records of entry into and exit from their premises for the purpose of preventing or controlling the incidence or transmission of COVID-19 through contact tracing;
   3. for your convenience, we may also display to you Data you had previously supplied us.

Data of third party individuals

1. In the course of your use of SafeEntry, we may collect Data relating to other individuals from you.
   1. You shall, prior to disclosing to us such Data relating to other individuals —
      1. notify these individuals (i) that you will be providing their Data to us; and (ii) of the Purposes for which we will be collecting, using and disclosing their Data, as set out in this Privacy Statement and as notified by us to you from time to time; and
      2. obtain the consent from the individuals whose Data are being disclosed, permitting (i) you to disclose the Data to us; and (ii) us to collect, use and disclose these individuals' Data, for the Purposes.
   2. You represent and warrant that -
      1. the Data that you will be providing us or have provided us is, complete, accurate, true and correct; and
      2. you have the valid authority and consent from these individuals to act on their behalf and provide their Data to us to collect, use and disclose for the Purposes.

How we handle and manage your Data

1. Your Data may be stored in servers, systems or devices owned, operated or managed by us, or any third party service provider engaged by us, or on your device, and may be used by us (or our third party service providers) to facilitate your use of SafeEntry.
2. In order to safeguard the security of your Data, the electronic storage and transmission of Data is secured with appropriate security technologies.
3. Unless you are tested positive for COVID-19 or are closely associated with a person who tested positive for COVID-19, your Data will be deleted from SafeEntry after 25 days.
4. We will decommission SafeEntry upon the Government’s determination that it is no longer required to prevent or control the incidence or transmission of COVID-19. Any personally identifiable Data will also be deleted from SafeEntry at the time of its decommission.

Changes to Privacy Statement

1. We reserve the right to change, modify or supplement this Privacy Statement at our discretion and at any time, by posting the changed, modified or supplemented Privacy Statement on or through SafeEntry, or through such other means as we may deem appropriate. Your continued use of SafeEntry following the posting of any change, modification or supplement will constitute your acceptance of such change, modification or supplement. If you do not agree to any change, modification or supplement to this Privacy Statement, please do not use SafeEntry.
2. Please contact 1800 211 0777 or qsm@tech.gov.sg if you have any enquiries or feedback on our data privacy policies and procedures.

Changelog

• Clarified the types of Data collected.
• Clarified how Data collected will be used.

• Clarified the types of permission required.

• Updated how Data collected will be used to reflect the introduction of the COVID-19 (Temporary Measures) Act.
• Clarified the duration personal identifiable Data will be stored.

• Updated the types of permission required to include Bluetooth.

• Updated the types of permission required to include WiFi.