Privacy Policy

HSTL takes your privacy very seriously. We ask that you read this privacy policy carefully as it contains important information about what to expect when HSTL collects personal information about you and how HSTL will use and/or disclose your personal data. 

This Policy applies to information we collect via our online Platform and as an Application for mobile devices. 

This Privacy Policy is intended to inform you about how we treat Personal Information that we process about you. If you do not agree to any part of this Privacy Policy, then we cannot provide the Platform or Application to you, and you should stop accessing both and deactivate your HSTL account. 

As used in this Privacy Policy, Personal Information means data to any data or information about you from which you can be identified either (a) from that data; or (b) from that data and other information to which we have or are likely to have access. 

Personal Information that we collect from you could include but is not limited to: 

i. Full Name;
ii. NRIC, passport or other identification number;
iii. Contact details (including mailing address, telephone number, email address);
iv. Personal details (Gender, Date of Birth, Nationality);
v. Personal and professional details contained in your curriculum vitae when you apply to us for a job (Employment references, Professional Qualifications, Training History, Educational Qualifications and Certifications, Salary Information and Bank Account Information);
vi. Performance assessments and disciplinary records;
vii. Photographs;
viii. Medical Records;
ix. Other information relating to you which you have provided to us in any forms you may have submitted to us, or in other forms of interaction with you. 

We receive, store and process information that you make available to us when accessing or using our Platform. Examples include when you: 

i. fill in any form on the Platform, such as when you register or update the details of your user account;
ii. access or use the Platform, such as to create data, perform clock in/out, perform restoring, make payment, post comments or reviews, or communicate with other users;
iii. provide us with consumer-generated content, including any content (e.g. images, logos, videos and personal stories) that you create and then share with HSTL;
iv. provide any other information that you choose to send to us;
v. link your account on a third party site (e.g. TikTok) to your HSTL account, in which case we will obtain the Personal Information that you have provided to the third party site, to the extent allowed by your settings with the third party site and authorized by you;
vi. fill in any form on the Third-Parties website, such as when you fill in the job application;
vii. provide us with your details to support your job application for a position at HSTL that you submitted to the Third-Parties;
viii. and communicate with HSTL. 

When you use certain features of the Platform, in particular our mobile applications we may receive, store and process different types of information about your location, including general information (e.g., IP address, zip code) and more specific information (e.g., GPS-based functionality on mobile devices used to access the Platform or specific features of the platform). If you access the Platform through a mobile device and you do not want your device to provide us with location-tracking information, you can disable the GPS or other location-tracking functions on your device, provided your device allows you to do this. See your device manufacturer’s instructions for further details. 

We may also receive, store and process Log Data, which is information that is automatically recorded by our servers whenever you access or use the Platform, regardless of whether you are registered with HSTL or logged in to your HSTL account, such as your IP Address, the date and time you access or use the Platform, the hardware and software you are using, referring and exit pages and URLs, the number of clicks, pages viewed and the order of those pages, and the amount of time spent on particular pages. 

Personal information and data may be collected, used or disclosed to third parties where necessary for the following purposes: 

i. To provide, operate and administer HSTL products/services, or to process subscriptions for HSTL products/services;
ii. To provide support during onboarding process;
iii. To provide ongoing product-related services and support (e.g., Troubleshooting of payment settings);
iv. To deliver customised experiences that meet your needs and preferences;
v. To enforce or defend the rights of HSTL, its employees and directors;
vi. To process job applications, recruitment and selection;
vii. To perform background verification checks and reference checks for verification of your identity for employment purposes;
viii. To process all administrative related matters within our organisation;
ix. To perform obligations under or in connection with your contract of employment with;
x. For managing and terminating our employment relationship with you;
xi. For ensuring business continuity of HSTL in the event that your employment with us is or will be terminated;
xii. To perform obligations under or in connection with the provision of our goods or services to our clients;
xiii. To facilitate any proposed or confirmed merger, acquisition or business asset transaction involving any part of HSTL, or corporate restructuring process;
xiv. To comply with any applicable regulations, code of practice, rules and laws or to assist in law enforcement and investigations conducted by any form of governmental and/or regulatory authority; 

Should there be any need to use your personal information and data for any other purposes, HSTL will notify you and obtain prior permission and consent. 

By providing personal data relating to a third party, the individual shall represent and warrant that prior consent is obtained from such third party for the collection, use or disclosure of personal data. 

We may collect, use and disclose your personal data pursuant to an exception under the Personal Data Protection Act or as required/authorised under any other written law. 

By providing us with your personal information and data or by accessing or viewing the website or any of its products/services, functions or contents, it is deemed that you have agreed to each and all the terms, conditions and notices stated in this policy. 

The consent that you provide for the collection, use and disclosure of your personal information will remain valid until such time it is being withdrawn by unsubscribing to the HSTL products/services on the Platform for HSTL customers, by writing in to our Data Protection Officer (DPO) or by submitting an Access Request Form to the DPO for HSTL employees. Our DPO can be reached at dpo@wearehstl.com. 

Please understand that your withdrawal for all of the purposes necessary to HSTL fulfilling our contractual duties towards you or facilitating your request or providing our services to you may carry consequences. We will review and inform you on the consequences of the withdrawal prior to processing your request. 

Please note that withdrawing consent does not affect our right to continue to collect, use and disclose personal data pursuant to an exception under the PDPA or as required/authorised under any other written law. 

NECESSARY FOR TRANSACTION/SERVICE/APPLICATION 

Please be noted that should you not consent and provide us with the relevant personal data to fulfil the Purposes of collection, use and disclosure of your personal information by HSTL, it may hinder our ability to continue to interact with you. 

For Job Applicants: We may not be able to make a decision on your suitability for recruitment or comply with the law and therefore, we may not be able to make an offer of employment. 

For HSTL Employees: We may not be able to fulfil the Purposes listed in the Personal Data Protection Policy, Section 4.2.1. 

For Visitors to HSTL Office: We may not be able to allow you to enter the office premises. 

For Customers: We may not be able to provide, operate and administer HSTL products/services, onboarding support and ongoing products/services support. 

For Platform Users: We may not be able to fulfil the Purposes listed in Section 8 of this Privacy Policy. 

HSTL uses “cookies” in conjunction with the Platform to obtain information. A cookie is a small data file that is transferred to your device (e.g., your phone or your computer) for record-keeping purposes. For example, a cookie could allow the Platform to recognize your browser, while another could store your preferences and other information. For further information about cookies visit www.aboutcookies.org or www.allaboutcookies.org. 

Your browser may allow you to set how it handles cookies, such as declining all cookies or prompting you to decide whether to accept each cookie. But please note that some parts of the Platform may not work as intended or may not work at all without cookies. 

HSTL cookies and third party cookies 

HSTL may place our cookies on your device via the Platform. Accordingly, our Privacy Policy will apply to our treatment of the information we obtain via our cookies. 

We may also allow our business partners to place cookies on your device. For example, we use Google Analytics for web analytics, and so Google may also set cookies on your device. As further explained below, third parties may also place cookies on your device for advertising purposes. 

There are two types of cookies used on the Platform, namely Persistent cookies and Session cookies. 

Session cookies will normally expire when you close your browser, while Persistent cookies will remain on your device after you close your browser, and can be used again the next time you access the Platform. 

Other technologies 

The Platform may also use other technologies with similar functionality to cookies, such as web beacons and tracking URLs to obtain Log Data about users. We may also use web beacons and tracking URLs in our messages to you to determine whether you have opened a certain message or accessed a certain link. 

Uses for HSTL cookies 

HSTL uses cookies for a number of purposes, such as the following: 

i. to enable, facilitate and streamline the functioning of the Platform across different webpages and browser sessions.
ii. to simplify your access to and use of the Platform and make it more seamless.
iii. to monitor and analyse the performance, operation and effectiveness of the Platform, so that we can improve and optimize it.
iv. to show you content (which may include advertisements) that is more relevant to you. 

When you register your name and emails with us, we may use it for the following: 

i. for the specific purpose for which the information was volunteered;
ii. to respond to your requests and queries;
iii. to enable your use of our services on our Platform;
iv. to verify your authenticity and your financial position;
v. to diagnose problems and administering our Platform;
vi. to enforce contractual and legal rights and obligations regarding the use of our Platform;
vii. for marketing research, user profile and statistical analysis;
viii. to send you information, promotions, updates, and marketing and advertising materials in relation to our products and services as well as those of our affiliates and agents; If you agree to us providing you with these information, you can always opt out at a later date. If you would rather not receive these information, please send a blank email message to dpo@wearehstl.com.
ix. to send you email notifications;
x. to keep our Platform secure and prevent fraud;
xi. to get you more actively engaged with our products and services. This may involve the use or publication of consumer generated content for marketing or sales purposes;
xii. to analyse materials you have uploaded and created for our own purposes and to collect and analyse information on how it may be use on the platform;
xiii. to comply with legal requirements, the requests of law enforcement and regulatory officials, or orders of court; or
xiv. for any other purposes for which we have obtained your consent. 

Subject to the exceptions referred to in section 21(2) of the Personal Data Protection Act 2012 (No. 26 of 2012) of Singapore (“PDPA”), you have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please send an email to dpo@wearehstl.com. We may make a small charge for this service. 

We want to ensure that your personal information is accurate and up to date. If any of the information that you have provided to HSTL changes, for example if you change your email address, name or payment details, or if you wish to cancel your registration, please let us know the correct details by sending an email to dpo@wearehstl.com or by sending a letter to the Data Protection Officer at 269 South Bridge Road, Singapore 058818. You may ask us, or we may ask you, to correct information you or we think is inaccurate, and you may also ask us to remove information which is inaccurate. Where we are satisfied on reasonable grounds that a correction should be made, we will correct the data as soon as possible, or within 30 days from the date we receive your request. 

We do not sell, trade, or otherwise transfer to third parties your personally identifiable information. This does not include trusted third parties who assist us in operating our platform, conducting our business, or servicing you, as long as these parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours and others’ rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses. 

We will retain all information that you give us for as long as it is necessary to fulfil the purpose for which it was collected, or as required by relevant laws. 

We will dispose of or destroy such documents containing your personal data in a proper and secure manner when the retention limit is reached. 

Information that you give us may be stored and processed in and transferred between any of the countries in which we operate in order to enable us to use the information in accordance with this Privacy Policy. 

To safeguard all information that you give us, all electronic storage and transmission of all information collected through our Platform and through our mobile services facility are secured with appropriate security technologies. All electronic transactions entered into via our Platform will be protected by encryption technology. In addition, SSL (Secure Socket Layer) ensures secure transmission of data from the internet to our systems. Our servers are hosted in a secure server environment that uses a firewall and other advanced technology to prevent interference or intrusion of information. However, no data transmission over the Internet can be guaranteed to be completely secure. As a result, while we strive to protect your personal information, we cannot ensure or warrant the security of any information you transmit to us by email or from our Platform, and you do so at your own risk. 

Our platform and application may contains links to other websites. This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies. 

If HSTL’s business is sold or integrated with another business your details may be disclosed to our advisers and any prospective purchasers and their advisers and will be passed on to the new owners of the business. 

We keep our privacy policy under regular review. If we change our privacy policy we will post the changes on this page, and place notices on other pages of the Platform and Application, so that you may be aware of the information we collect and how we use it at all times. This privacy policy was last updated on 1 July 2024. 

We welcome your views about our Site and our privacy policy. If you would like to contact us with any queries or comments please send an email to dpo@wearehstl.com or by sending a letter to the Data Protection Officer at 269 South Bridge Road, Singapore 058818.