Privacy Policy

1. Introduction

SpiritPrimeHub is committed to protecting the privacy and security of your personal data. This Privacy Policy describes how we collect, use, process, and protect your personal data when you use our duty free consultation services.

We adhere to the highest standards of data protection, including compliance with Singapore's Personal Data Protection Act (PDPA) and the European Union's General Data Protection Regulation (GDPR) for all our clients.

2. Data Collection and Processing

We collect personal data in the following circumstances:

  • When you register for our duty free consultation services
  • When you create a user account on our platform
  • When you participate in our information events or sessions
  • When you communicate with our consultation team or customer support

The categories of data we collect include:

  • Identification data (name, surname, company)
  • Contact information (email, phone number, address)
  • Account data (username and securely encrypted password)
  • Data on services and documents processed
  • Payment information (processed through certified payment systems)
  • User preferences and document processing objectives

3. Purposes and Legal Basis for Processing

We process your personal data for the following specific purposes:

  • Providing comprehensive professional duty free consultation services and personalized experiences
  • Managing client accounts and tracking the progress of consultation requests
  • Improving our platform functionality and developing new service offerings
  • Communicating important service updates, news announcements, and relevant resources
  • Processing payments and managing subscription-based services
  • Complying with legal and regulatory requirements

All data processing activities are carried out only to the extent necessary to fulfill these legitimate objectives.

4. Data Protection and Security

SpiritPrimeHub employs comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Our security framework includes industry-standard encryption protocols, multi-factor authentication systems, regular security audits, and strict access controls limited to authorized personnel only.

Personal data is retained only for the duration necessary to achieve the specified objectives or according to applicable legal retention obligations.

5. Data Sharing and Third Parties

We share personal data with third parties only in the following specific circumstances:

  • With trusted technology partners who provide essential platform infrastructure and support services
  • With certified payment processors to facilitate secure transaction processing
  • When legally required by applicable laws, regulations or valid legal procedures
  • With your explicit written consent for specified additional purposes

All third-party service providers are contractually obligated to maintain equivalent data protection standards and may only use your data for the specific purposes we have authorized.

6. Cookies and Digital Technologies

Our duty free consultation platform uses cookies and similar technologies to optimize your experience and ensure essential platform functionality.

Categories of cookies we use:

  • Essential cookies: Necessary for basic platform operations and secure account access
  • Preference cookies: Remember your preferences and customization choices
  • Analytics cookies: Help us analyze platform usage patterns to improve services
  • Performance cookies: Optimize technical operation and platform reliability

You can manage your cookie settings through your browser settings or our dedicated cookie management center, accessible from your account dashboard.

For detailed information about our cookie usage, please consult our Cookie Policy.

7. Individual Rights and Data Control

As a client of our duty free consultation services, you have comprehensive rights regarding your personal data:

  • Right of access: Request a complete copy of all personal data we hold about you
  • Right of rectification: Request correction of any inaccurate or incomplete personal information
  • Right to erasure: Request deletion of your personal data in specific legal circumstances
  • Right to restrict processing: Request limitation of how we process your data
  • Right to data portability: Receive your data in a structured and commonly used format
  • Right to object: Object to specific types of data processing activities

To exercise any of these rights, please contact our data protection team using the contact details provided at the end of this policy.

8. GDPR Compliance Framework

As an international duty free consultation service provider serving European Union clients, SpiritPrimeHub maintains full compliance with the General Data Protection Regulation (GDPR).

Our GDPR compliance includes:

  • Lawful processing basis: All data processing is based on valid legal grounds including consent, contractual necessity or legitimate interests
  • Purpose limitation principle: Personal data is used exclusively for clearly specified purposes and not for incompatible secondary purposes
  • Data minimization practice: We collect only personal data strictly necessary for our duty free consultation services
  • Storage limitation control: Data is retained only for the necessary time and subject to regular retention review procedures
  • Integrity and confidentiality assurance: Comprehensive security measures ensure data protection and confidentiality

In accordance with GDPR provisions, you retain the right to file a formal complaint with your local data protection authority if you believe our processing of your personal data violates applicable regulations.

For GDPR-related questions or to exercise your rights under the regulation, please contact us at privacy@spiritprimehub.com.

9. Policy Updates and Modifications

We periodically review and update this Privacy Policy to reflect changes in our data practices, legal requirements or platform improvements. The most recent version is always available on our website.

For significant changes that substantially affect your privacy rights, we will provide advance notification through appropriate channels, including platform announcements or direct email communication.