Maid Without Borders

Privacy Policy & Data Protection

Maid Without Borders Pte. Ltd. · Governed by the Singapore Personal Data Protection Act (PDPA)
This Privacy Policy forms part of the Maid Without Borders Terms & Conditions (Section 21). For data access, correction, or deletion requests, contact our Data Protection Officer at dpo@maidwithoutborders.com.

21.1 Privacy Policy

21.1.1 Comprehensive and Complete Privacy Policy Reference

a) Privacy Policy governs all data handling practices in detail for the entire MWB Platform.

b) Where to Find Privacy Policy: Full Privacy Policy available on MWB's website

c) User Acceptance

21.1.2 Data Protection Framework

Legal Compliance: MWB complies with Singapore Personal Data Protection Act (PDPA).

21.2 Data Collection & Processing

21.2.1 What Data is Collected

MWB may collect, use, process, store, disclose, and transfer personal data and other information provided by Users or generated through use of the platform for the purposes of operating, maintaining, improving, securing, and providing the Services, complying with legal obligations, verifying User identity, providing keyword search and filters for matching, processing payments, preventing fraud, producing research, and other purposes needed to run the Platform functionalities. By using the Services, Users acknowledge and agree to such collection and processing in accordance with the Privacy Policy and applicable laws.

21.2.2 Processing Activities

a) Lawful Basis for Processing

b) Processing Purposes, including but not limited to:

c) Data Processing Location

21.3 Data Sharing

21.3.1 Third-Party Sharing

a) Who the Data is Shared With

b) PII Data Shared with Matched Parties. When Employer and Maid match, information reasonably necessary for the employment relationship, including profile details, contact information, communications, interviews, contracts, and employment terms is shared after receiving permission to release PII from each Party

c) PII Data Shared with Affiliates. When a Referrer whose Referral Code has been successfully used by a Referred User, information reasonably necessary for the Referral Fee processing, including but not limited to: Referred User username, Registration date by Referred User, Contracted Date by Referred User, Affiliate Fee earned, Current Listing Status, and Reason for Void.

d) Sharing Restrictions

21.3.2 Data Sharing Consent

a) Implicit Consent

b) Government & Regulatory Sharing

c) Optional Sharing

21.4 Right to Record & Analyze

21.4.1 Recording of Communications

a) Chat Recording & Storage

b) Video Interview Recording

c) Other Communications

21.4.2 Analysis & Use of Recorded Data

a) Quality Assurance

b) User Awareness

c) Automated Analysis

21.4.3 Limitations on Analysis

a) Purpose Limitation. Analysis limited to disclosed purposes (fraud, safety, quality assurance)

b) Sensitivity Restrictions

21.5 Mailing List & Marketing Communications

21.5.1 Automatic Enrollment in Mailing List

a) Default Enrollment

b) Email Content

21.5.2 Marketing Consent

Consent Basis

21.6 Opt-Out of Mailing List (Email Only)

21.6.1 Unsubscribe Method

21.6.2 Consequences of Opting Out

a) What Stops

b) Transactional Emails Continue: Essential transactional emails still sent:

c) Service Unaffected

21.6.3 Resubscription Process

a) Can Resubscribe: Users can resubscribe to mailing list anytime

b) Email Request: Can email support@maidwithoutborders.com with subject lines “Request Resubscription to Mailing List”

c) Resubscription may take 30 working days to be effective

21.7 Data Retention Periods

21.7.1. Account Data

21.8 Data Subject Access Rights (PDPA Compliance)

21.8.1 Right of Access

Accessing Personal Data

21.8.2 Right to Correction

Correcting Inaccurate Data

21.8.3 Right to Erasure (Right to be Forgotten)

a) Deletion Rights: Users have limited right to request data deletion. PDPA Exceptions: Deletion not available if:

b) Deletion Request Process

c) Account Closure & Deletion

21.8.4 Right to Data Portability

a) Receiving Data in Portable Format

b) Data Portability Scope

c) Portability Timeline

21.9 Data Portability on Company Sale or Relocation

Merger, Acquisition, Sale or Relocation Scenario:

a) Data Transfer in Business Asset Transaction/Transfer: In the event of a merger, acquisition, or sale, MWB shall notify Users at least 30 days in advance, specifying the identity of the acquiring entity and its privacy practices. Users shall have the right to withdraw consent and request deletion of their personal data before the transfer, subject to any overriding legal retention obligations. Transfer shall comply with the PDPA. Acquiring company assumes data processing obligations

b) User Notification

c) User Rights in Transfer: Users may have right to opt-out of data transfer:

d) Privacy Policy Changes

21.10 Anonymised Research Data Sales

a) Anonymised Research Data Definition

b) Permitted Uses. Sale to Third Parties: MWB may sell anonymized research data to:

c) Anonymization Process

d) User Consent

21.11 AI & Machine Learning (“AI/ML”) Usage

The core business of MWB is CareTech, and MWB seeks to be the largest global caregiving database that is capable of identifying caregiving gaps in the industry to help further support caregivers. It is fundamental that AI/ML is used to support that function and that it is not possible technologically at this point to individually remove consent to AI/ML processing for each individual User. Hence, any User who does not consent to AI/ML processing must remove themselves from using the Platform entirely.

21.11.1 AI Applications

a) AI Systems in Use, including but is not limited to:

b) Training Data

21.11.2 User Rights Regarding AI

a) Right to Know AI Involvement

b) Limitations

21.12 Data Breach Notification

21.12.1 Breach Definition & Response

a) What Constitutes Breach: Unauthorised access, disclosure, alteration, loss, or destruction of personal data, whether accidental or unlawful

b) Upon becoming aware of a Data Breach, MWB will take reasonable steps to:

21.12.2 Breach Notification to Users

a) Notification Timeline: MWB will notify the Personal Data Protection Commission (PDPC) of a notifiable data breach within 3 calendar days after assessing that significant breach meets the significant harm/scale criteria under PDPA regulation. Affected Users will be informed “as soon as practicable” unless exceptions apply.

b) Notification Method: MWB will notify affected Users through registered email and/or In-App alert.

c) Notification Exceptions

21.12.3 User Remediation

a) Steps Users Should Take

b) MWB Support

21.13 Data Protection Officer

21.13.1 DPO Appointment & Role

a) MWB appoints a Data Protection Officer (“DPO”) responsible for overseeing compliance with applicable data protection laws and MWB’s privacy practices. DPO operates independently; not subordinate to business pressures

b) DPO Responsibilities include:

21.13.2 Contacting the DPO

Contact Information: Users may contact DPO through email: dpo@maidwithoutborders.com with the applicable subject lines and DPO will respond within 14 working days.

21.14 International Data Transfers

21.14.1 Cross-Border Data Flows

a) Where Data is Stored: User personal data may be transferred to, stored, and processed in countries outside the User’s country of residence, including Singapore and other jurisdictions where MWB or its service providers operate.

b) International Transfers: Where such international transfers occur, MWB will take reasonable steps to ensure that the data is protected in accordance with applicable data protection laws, including the PDPA. c) Transfer Mechanisms: By using MWB Platform, Users acknowledge and consent to such cross-border transfers of their personal data.

21.14.2 International Data Protection

User Rights Across Borders: Users retain their rights in relation to their personal data (including access, correction, and deletion rights) regardless of where the data is processed, subject to applicable legal and operational requirements.

21.15 Cookies & Tracking Technologies

21.15.1 Cookies Used

a) Types of Cookies

b) Cookie Purposes

21.15.2 Tracking Technologies

a) Tracking Data, includes but is not limited to:

b) Analytics Services

21.15.3 User Control Over Cookies

a) Cookie Consent

b) Cookie Management

c) Cookie Persistence