Privacy & personal data protection

Scope and responsible organisation

This statement applies to the website operated by Conatus Mobility Pte. Ltd. (“Conatus Mobility”, “we” or “us”), enquiries initiated through it and the associated handling of personal data. We have appointed a Data Protection Officer (DPO) to oversee personal data protection matters.

It describes our general approach. The data, recipients, purposes and service arrangements for a particular application should also be read with the case-specific notices, authorisations and written agreements. Cooperating licensed agents, professional advisers and competent authorities may process data independently under their own legal obligations and privacy notices.

Personal data that may be involved

• Enquiry information: your name, contact details, country or region, residence objectives and relevant family needs that you choose to provide.
• Case information: where necessary for the service and after the applicable notice, consent or other lawful arrangements, this may include identity documents, nationality and residence history, family relationships, occupation, assets and source-of-funds evidence.
• Assessment information: criminal-record, health, insurance or other due-diligence documents, only where relevant programme or legal requirements apply.
• Service records: communications, authorisations, agreements, invoices, payments and application-progress records relevant to the service.
• Technical information: hosting and infrastructure providers may process operational information such as IP addresses, device or browser details, access times and request or error logs.

The current website does not provide application-document uploads or personal-data submission forms. Please keep initial enquiries general. Identity, financial or health documents should be supplied after the need for them and an appropriate transmission method have been confirmed.

Purposes and consent

Data may be used to respond to enquiries, assess initial eligibility and needs, prepare and coordinate services, communicate with authorised cooperating parties, meet applicable due-diligence and legal requirements, and handle billing, complaints, disputes and reasonable business records. Necessary technical information may support website operation, troubleshooting and security.

We collect, use and disclose personal data with your consent or where permitted or required by applicable law, explaining the relevant purposes where required. Merely visiting this website does not constitute consent to use application documents for marketing or disclosures unrelated to the notified purposes. Before introducing a new purpose, we will complete the applicable notice and consent steps or establish another basis permitted by applicable law.

The website currently has no marketing-subscription function. Any subsequent promotional contact must comply with applicable consent, opt-out and Singapore Do Not Call (DNC) requirements.

Recipients and international transfers

Where relevant to the service, appropriately notified and supported by a lawful basis, data may be shared with the international partners, licensed agents in Malta or another destination, competent authorities and necessary legal, tax, translation, notarial, insurance or other professionals actually involved in the case. Hosting, communications and technical providers may also process necessary data within their service scope. Data may be provided to authorised bodies where legally required.

We will confirm the necessary recipients, purposes and countries or regions before a case-specific transfer. Transfers outside Singapore must meet applicable transfer requirements, using appropriate legal arrangements or other lawful mechanisms to ensure a standard of protection comparable to that required by Singapore's PDPA.

This statement is not blanket authorisation for all future recipients or purposes. Independent processing by agents and authorities is governed by their notices to you and applicable law.

Singapore PDPA: protection, retention and accountability

We handle personal data in accordance with the applicable requirements of Singapore's Personal Data Protection Act 2012 (PDPA). Appointing a DPO is one part of accountability, alongside implementing data-handling policies and procedures in practice.

Accuracy and protection

We will take reasonable steps to ensure that data used to make decisions affecting individuals, or disclosed to other organisations, is accurate and complete. We will apply reasonable access controls, confidentiality and transmission safeguards, and other organisational and technical measures appropriate to the data and processing risks, to protect against unauthorised access, collection, use, disclosure and similar risks. Please notify us promptly of material changes relevant to your case.

Retention

Retention depends on service purposes, legal or regulatory requirements, dispute handling and reasonable business needs. We will cease retention, or appropriately remove the association with individuals, when the purpose no longer requires it and there is no remaining legal or business need. Statutory retention and legal holds may affect deletion timing.

Data incidents

We will assess suspected personal-data breaches, contain the risks and take appropriate remedial action. Where applicable notification thresholds are met, we will notify the Personal Data Protection Commission (PDPC) and affected individuals as required by law. This statement does not represent government certification or replace continuing legal compliance.

Access, correction and withdrawal of consent

You may contact the DPO to request access to or correction of personal data in our possession or control, withdraw consent, or raise questions or complaints about its handling. You may also request deletion; this will be assessed against applicable law, ongoing services and retention obligations, rather than treated as an unrestricted right to automatic deletion.

Reasonable verification of identity and the scope of a request may be needed. Access, correction or disclosure may be subject to statutory exceptions and the rights of others. Where a reasonable fee is legally permitted, we will explain it in advance. We will respond in accordance with applicable requirements and, where necessary, explain the expected timing.

Withdrawing consent may affect our ability to continue the relevant service or coordinate an application. We will explain the potential consequences and handle the request as required. Processing that remains permitted or required by law does not automatically cease on withdrawal.

Website technology, cookies and external links

We have not added advertising pixels, third-party visitor analytics or marketing-tracking cookies to the current website. Language, property-route and FAQ selections may appear in page links.

First-visit notice and preferences

On a first visit, the website displays a privacy notice and cookie choices. You may accept or reject optional cookies, or open preference settings. No visitor analytics or advertising-tracking tools are currently connected, and those categories are shown as inactive. Accepting does not start such tools or authorise future purposes. Rejecting does not affect browsing. Before adding optional tools or purposes, we will update the information and choice version and obtain any renewed consent required.

Saving and changing your choice

When you save a choice, we record the decision, version, save time and expiry time in this browser’s local storage solely to remember your preferences. It contains no name or contact details and is not sent by this page to our enquiry systems. A choice is valid for 180 days; on a visit after expiry, the old record is cleared and you are asked again. Clearing browser data, using another browser or private-browsing mode may also cause the notice to reappear. If the browser blocks storage, the choice applies only to the current page.

You can reopen “Privacy & cookie settings” in the footer at any time to change or withdraw optional-cookie choices, or clear the local record through your browser. These choices are not blanket authorisation for advisory services, marketing contact or other personal-data processing. Contact the DPO about enquiry-data requests.

Necessary technical processing and external services

Hosting and infrastructure providers may process necessary technical information for operation, security, abuse prevention or access functions, subject also to their applicable policies. These settings manage optional tools configured for this website and do not disable essential hosting operations or security.

Email, telephone and WhatsApp links open the relevant application or external website, whose provider applies its own privacy rules. The WhatsApp / WeChat / Phone contact section provides the public number shared by all three channels for you to call or add us. The copy button only writes that number to your clipboard; it sends no message automatically. Enquiry information you actively send is handled by the recipient under the applicable rules. External legal, regulatory and other websites have their own privacy notices. Before adding forms, analytics or advertising technology, we will update the relevant notices and obtain any consent required.

Family members and minors

If you provide personal data on behalf of a family member, please ensure that you have the necessary authority and explain the purposes and relevant privacy information to them. A parent or guardian with appropriate legal authority should be involved where a minor's data is concerned. We will request only information necessary for the relevant enquiry or application; a family relationship is not unlimited authority for every form of processing.

Contact the Data Protection Officer

The company has appointed a DPO. Personal-data requests, enquiries and complaints may be sent through the company contact below, with “DPO / Personal Data Protection” in the subject line, for handling by the appointed DPO.

[email protected]
63 Chulia Street, #15-01,
OCBC Centre East, Singapore 049513

Please initially provide a reply address, the type of request and the necessary context, without attaching complete identity or financial documents. For enquiries to Singapore's data-protection regulator, refer to the official PDPC website.

Updates and legal references

This statement takes effect on 11 September 2026. It may be updated, with the date shown, as website functions, processing purposes or legal requirements change. We will complete the applicable process for changes requiring additional notice or consent. This statement does not exclude other data-protection laws that may apply.

Legal and regulatory references: Singapore Personal Data Protection Act 2012; PDPC data-protection obligations guidance.