Effective Date: 1 January 2026

1. Introduction

Cyclect Holdings Pte Ltd (“Cyclect”, “we”, “us” or “our”) respects the privacy of individuals and is committed to handling Personal Data responsibly and in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”).

This Privacy Statement explains how we may collect, use, disclose, protect and retain Personal Data when you visit our website, contact us, submit information to us, apply for a role, subscribe to updates, attend our events or otherwise interact with Cyclect.

Where required by law, we will seek your consent or rely on another basis permitted under applicable law.

2. Personal Data We May Collect

Depending on your interaction with us, we may collect Personal Data such as:

• name, company name, job title and business contact details;

• email address, telephone number and country or location;

• enquiry details, feedback, requests or other information you submit to us;

• newsletter, event, campaign or marketing preferences;

• recruitment information, including CVs, resumes, qualifications, employment history, references and other information submitted for job applications;

• website and technical information, such as IP address, browser type, device information, pages viewed, referral source and online identifiers;

• information collected through cookies, analytics tools, forms, security tools and similar technologies;

• any other Personal Data that you voluntarily provide to us.

We do not normally seek sensitive Personal Data through our website. You should avoid submitting sensitive or unnecessary Personal Data unless it is relevant to your interaction with us.

Where you provide Personal Data relating to another individual, you confirm that you have obtained the necessary consent or are otherwise authorised to provide such information to us.

3. How We Collect Personal Data

We may collect Personal Data when:

• you submit a form or enquiry through our website;

• you contact us by email, telephone, messaging platform or other communication channel;

• you subscribe to newsletters, updates, campaigns or events;

• you submit a job application or recruitment-related information;

• you interact with our employees, representatives, agents or service providers;

• you attend Cyclect meetings, events, briefings or business activities;

• you browse or use our website;

• cookies, analytics tools or security tools collect technical or usage information;

• we receive information from business partners, recruitment agencies, referees, service providers or public sources.

4. How We Use Personal Data

Cyclect may collect, use and disclose Personal Data for purposes including:

• responding to enquiries, requests, feedback and communications;

• managing business relationships with customers, suppliers, contractors, partners and other contacts;

• providing information about Cyclect’s services, solutions, events, updates and activities;

• sending marketing, business updates or event communications where permitted by law;

• processing job applications and managing recruitment-related activities;

• administering website forms, landing pages, campaigns and digital communications;

• analysing website usage, campaign performance and user engagement;

• improving our website, services, communications and business processes;

• operating, maintaining and securing our website, IT systems and digital platforms;

• detecting, preventing and investigating fraud, cybersecurity incidents, misuse or unlawful activity;

• complying with legal, regulatory, audit, tax, accounting, insurance and reporting obligations;

• protecting and enforcing Cyclect’s rights, property, safety, contractual interests and business interests;

• managing internal administration, governance, compliance, risk management and record-keeping;

• supporting corporate transactions, restructuring, mergers, acquisitions, financing or business transfers;

• any other purpose reasonably related to the above or notified to you where required.

We will not knowingly collect, use or disclose Personal Data for purposes that a reasonable person would consider inappropriate in the circumstances.

5. Marketing Communications

Cyclect may send marketing, promotional, event or business update communications where permitted under the PDPA and applicable Do Not Call requirements.

Where required, we will obtain consent before sending marketing messages to your Singapore telephone number.

You may withdraw consent or unsubscribe from marketing communications using the unsubscribe instructions provided in the relevant communication or by contacting us.

If you withdraw consent, we may still contact you for non-marketing purposes, including administrative, contractual, operational, safety, compliance, legal or service-related communications.

6. Disclosure of Personal Data

Cyclect may disclose Personal Data where reasonably necessary for the purposes stated in this Privacy Statement, including to:

• Cyclect’s related entities and business units;

• authorised employees, officers, directors and representatives;

• IT, hosting, cloud, cybersecurity, website, analytics, marketing, CRM and data storage service providers;

• recruitment agencies, referees, screening providers and HR service providers;

• contractors, vendors, subcontractors, consultants, agents, partners and other service providers;

• professional advisers, including lawyers, auditors, insurers, tax advisers and consultants;

• public agencies, regulators, courts, law enforcement authorities or other authorities where required or permitted by law;

• parties involved in corporate transactions, restructuring, financing, merger, acquisition, transfer or disposal of business or assets;

• any other party authorised by you or permitted by law.

We will take reasonable steps to require third parties processing Personal Data on our behalf to protect such Personal Data and use it only for authorised purposes.

7. Transfer of Personal Data Outside Singapore

Cyclect may transfer Personal Data outside Singapore where necessary for business, operational, technical, recruitment, IT, storage, analytics, support, compliance or administrative purposes.

Where Personal Data is transferred outside Singapore, Cyclect will take appropriate steps as required under the PDPA to ensure that the transferred Personal Data receives a standard of protection comparable to the protection under the PDPA.

8. Protection and Security

Cyclect will make reasonable security arrangements to protect Personal Data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.

However, no method of transmission over the internet or electronic storage is completely secure. Cyclect does not guarantee that Personal Data transmitted through our website or stored electronically will be completely secure.

You are responsible for ensuring that any Personal Data you provide to us is accurate, complete and not misleading.

9. Retention of Personal Data

Cyclect will retain Personal Data for as long as necessary for the purposes for which it was collected, used or disclosed, or as required or permitted by law.

When Personal Data is no longer required for legal or business purposes, we will take reasonable steps to cease retention of such Personal Data, or anonymise it, in accordance with the PDPA.

10. Accuracy, Access, Correction and Withdrawal

You should ensure that all Personal Data submitted to Cyclect is accurate, complete and up to date. You should inform us promptly if there are changes to your Personal Data.

Subject to the PDPA, you may request to:

• access Personal Data about you that is in our possession or under our control;

• obtain information about how your Personal Data has been used or disclosed within the past year, where required under the PDPA;

• correct an error or omission in your Personal Data;

• withdraw consent to our collection, use or disclosure of your Personal Data.

Cyclect may require information from you to verify your identity and process your request.

Where permitted under the PDPA, we may charge a reasonable fee for processing an access request. If a fee applies, we will inform you of the estimated fee before processing the request.

If you withdraw consent, Cyclect may not be able to continue providing certain information, services, responses, updates or opportunities to you. Withdrawal of consent does not affect Cyclect’s right to continue collecting, using or disclosing Personal Data where such collection, use or disclosure without consent is required or permitted by law.

11. Cookies and Analytics

Our website may use cookies, pixels, tags, analytics tools, security tools and similar technologies.

These technologies may be used to:

• operate and secure the website;

• remember user preferences;

• analyse website traffic and usage;

• measure campaign performance;

• improve website content, layout and functionality;

• support marketing attribution and business development activities;

• prevent spam, fraud, abuse and unauthorised activity.

You may adjust your browser settings to block or disable cookies. However, some parts of the website may not function properly if cookies are disabled.

12. Third-Party Websites and Platforms

Our website may contain links, embeds or integrations with third-party websites, platforms, maps, videos, certification bodies, partners, suppliers or other external sites.

Cyclect is not responsible for the privacy practices, content, security, policies or operations of third-party websites or platforms.

You should review the privacy statements and terms of those third parties before providing Personal Data to them or using their services.

13. Job Applications

Where you submit a job application, CV, resume or recruitment-related information to Cyclect, we may collect, use, disclose and retain your Personal Data for recruitment, assessment, interviews, verification, reference checks, background screening where appropriate, employment-related administration, compliance with legal or regulatory requirements, and consideration for current or future roles.

Cyclect may retain unsuccessful candidate information for a reasonable period for future recruitment consideration, unless you request otherwise and we are not legally or operationally required to retain it.

14. Business Contact Information

Where you interact with Cyclect in a business capacity, we may collect, use and disclose your business contact information for business communications, relationship management, service discussions, procurement, vendor management, partnership discussions, event invitations, marketing updates and related business purposes.

15. Changes to This Privacy Statement

Cyclect may update this Privacy Statement from time to time.

The updated version will be posted on our website and will take effect from the date stated in the updated Privacy Statement, unless otherwise specified.

You should review this Privacy Statement periodically to understand how Cyclect handles Personal Data.

16. Contact Us

If you have any questions about this Privacy Statement, or if you wish to make an access, correction or withdrawal request, please contact:

Data Protection Officer / Compliance
Cyclect Holdings Pte Ltd
Email: compliance@cyclect.com