Thank you for visiting the Enmasse website. Enmasse respects your privacy. Whether you deal with us as an investor, entrepreneur or member of the general public (referred to in this policy as “you” or “your”), you are entitled to the protection of your personal data.
The aim of this Privacy Policy (“policy”) is to describe how and why we collect your personal data. We will also inform you of what we do with this personal data, with whom we share it, how we protect it, how we process it and your rights in respect thereof.
This policy applies to the processing of your personal data in the framework of various services, tools applications, websites and marketing actions which are provided or operated by us or on our behalf (collectively, the “Enmasse Platform”). This policy does not apply to the privacy practices of companies / organizations we do not control, nor to any information obtained or collected in connection with a separate business relationship with Enmasse or its affiliates, including as a client, or as a service provider.
This policy applies to all your personal data collected, used and/or disclosed by (or on behalf of) Enmasse through the Enmasse Platform, referred to in this policy as “Enmasse”,“we”, “us” and “our”.
By visiting the Enmasse Platform, and / or by registering with us, you signify you have carefully read, understood, and agree to be bound by this policy. If you disagree with any of the terms of or any part of this policy, you must refrain from using the Enmasse Platform or our services.
If you have provided your personal data for the EPIC World Survey of Entrepreneurial Households, please scroll below to learn more about the purposes for which we will collect your personal data, your rights regarding such data and the security practices and procedures we follow in this regard.
We value the personal data entrusted to us and are committed to processing your personal data in accordance with the applicable data protection laws and regulations to which Enmasse is subject, including the EU General Data Protection Regulation 2016 / 679, the California Consumer Privacy Act, 2018, Singapore Personal Data Protection Act 2012 and (Indian) Digital Personal Data Protection Act, 2023 (“Data Protection Laws”). The terms “personal data” and “personal information,” as used herein, refers specifically to information that identifies a visitor to the Enmasse Platform (which may include contact information and also any information referred to as “Personal Information” or “Personal Data” under the applicable Data Protection Laws).
We will try our best to adhere to the following key data protection principles:
Lawfulness: We will collect your personal data in a fair, lawful and transparent manner.
Data minimization: We will limit the collection of your personal data to what is adequate, relevant, and necessary for the purposes for which they have been collected.
Purpose limitation: We will collect your personal data for specific, explicit and legitimate purposes and we will not process your personal data further in a way incompatible with those purposes.
Accuracy: We will try to keep your personal data accurate and up to date, where it is necessary.
Data security and protection: We will implement technical and organizational measures to ensure an appropriate and reasonable level of data security and protection considering, amongst other things, the nature of your personal data. Such measures are aimed to prevent any unauthorized disclosure, collection, use, copying, modification, disposal or access or similar risks, accidental or unlawful destruction or accidental loss, or alteration, the loss of any storage medium or device on which personal data is stored or any other unlawful form of processing.
Processing of personal data: We will process your personal data in a lawful manner.
Retention limitation: We will retain your personal data in a manner consistent with the applicable Data Protection Laws, and no longer than may be required for the purposes for which they have been collected or for any business or legal purpose.
Protection for international transfers: We will ensure that any of your personal data transferred outside of your jurisdiction is adequately protected as per applicable Data Protection Laws.
Safeguards towards third parties: We will ensure that personal data access by, and transfers to, third parties are carried out in accordance with applicable laws and with suitable contractual safeguards.
The personal data collected by Enmasse may inter alia include the following:
Personal Data: For you to use certain features of the Enmasse Platform, such as creating an account on the Enmasse Platform, you would be required to register with us, which requires you to provide certain personal data such as your email address, phone number, name, date of birth etc., and certain sensitive personal data or information such as passwords, financial information etc.
Automatically Collected Information: Enmasse may collect information during your visit to the Enmasse Platform through automatic data collection tools, which may include cookies (see below for more information on cookies) and other commonly used information-gathering tools. These tools collect certain information that your browser sends to our website such as your browser type and language, access times, and the address of the website from which you arrived at the Enmasse Platform. They may also collect information about your Internet Protocol (IP) address and clickstream behavior (i.e., the pages you view, the links you click, and other actions you take in connection with the Enmasse Platform), geolocation data, and information about your device. Enmasse may also share this information in aggregate form (i.e., that cannot reasonably identify a particular individual) with third parties for business purposes, such as service providers and consultants to Enmasse.
Photography: For special events, Enmasse may take photos and video recordings of you. We will try our best to inform you if this is happening.
You have an option not to provide the aforesaid personal data if you wish not to avail the specific service on the Enmasse Platform, for which the personal data is required in order for us to reasonably provide you with such specific service.
Your Name and Contact Details: We collect, use and/or disclose your name and contact details, such as email, postal address and contact number to continue communications with you. We may also collect, use and/or disclose your contact information to invite you to events we are hosting or to keep you updated about our services, milestones, achievements, etc.
Legal Basis for Processing: We will process your personal data lawfully and will explain the specific legal basis for which we process your data within this privacy policy. We will not process your personal data further in a way that is incompatible with those purposes.
Please note that in accordance with applicable Data Protection Laws, your personal data can be processed if:
For the avoidance of doubt, you will always have the right to withdraw your consent at any time.
We will retain your personal data for as long as necessary for the purposes for which we collect or process your personal data, for any legal or business purpose or to comply with the applicable law. For information on how long certain personal data is likely to be kept before being removed from our systems and databases, please contact us at compliance@enmasse.world.
We implement certain reasonable technical and organizational security measures to protect your personal data against unlawful or unauthorized access, collection, disclosure, copying, modification, disposal or use or similar risks, as well as against accidental loss or damage to its integrity and the loss of any storage medium or device on which personal data is stored. The security measures have been designed by taking into account our IT infrastructure, the potential impact on your privacy, the costs involved, the Data Protection Laws and the current industry standards and practice.
Our data security procedures include: access security, backup systems, monitoring, review and maintenance, management of security incidents and continuity. Your personal data will only be processed by a third party data processor if they agree to comply with those technical and organizational data security measures.
This policy and the security controls and practices implemented by Enmasse to protect your personal data shall be the reasonable security practices and procedures under the applicable provisions of the applicable laws.
We use cookies on our website. This helps us to understand and save your preferences for future visits and to compile statistical data about our website traffic and interactions. This also allows us to provide you with a better experience when you browse our website and allows us to make improvements to our site. You may be able to change the preferences on your browser or device to prevent or limit your device’s acceptance of cookies, but this may prevent you from taking advantage of some of our features. If you click on a link to a third party website or service, a third party may also transmit cookies to you. This policy does not cover the use of cookies by any third parties, and we are not responsible for their privacy policies and practices.
Where you allow the use of cookies, you consent to the collection, use and/or disclosure of your personal data using cookies for the above purposes.a
Depending on the purposes for which we collect your personal data, we may disclose it to the following categories of recipients, who will then process your personal data only within the framework of these purposes:
We do not sell or rent your personal information for valuable consideration.
Enmasse and its affiliates have offices in Singapore and India and operations in Singapore, India, UK and USA. Data is routinely shared between these locations. If you are a citizen of the European Union and when there is any transfer of your personal data to countries outside the EEA that do not generally offer the same level of data protection as that within the EEA, Enmasse implements appropriate measures to ensure an adequate level of protection of that personal data, in accordance with applicable Data Protection Laws.
We want to be as transparent as possible with you, so that you can make meaningful choices.
Depending on your place of residence, individuals whose personal data is processed by Enmasse may be entitled to the following rights:
Our officers will handle any questions or requests relating to this policy, any specific privacy notice or your personal data and its collection, use, disclosure and/or processing.
For any questions, requests, complaints concerning the application of this policy, or to exercise your rights, as described in this policy, you may contact our Data Protection Team by emailing us at compliance@enmasse.world.
If you are not happy with the way we manage your data, disagree with a decision we have made in respect to your individual rights, or you have any other type of concern, you may submit a complaint by contacting us.
We may occasionally make changes to this policy which will reflect how we collect, use, disclose and/or process your personal data. This is to ensure we honor our commitment to you to protect your personal information and uphold your rights. Please check this page regularly to ensure you are familiar with the latest version of the policy. If important changes are made to this policy, we will draw your attention to them by making this clear on our website, through our services or by another means of communication, such as email. This will allow you to assess the changes in light of the data that we might be holding. If you continue to use the Enmasse Platform or our services after being made aware of the changes to this policy, you will be deemed to have accepted the changes to this policy. However, if you disagree with any of the changes to this policy, you must refrain from using the Enmasse Platform or our services.
THE PRIVACY POLICY BEING AN ELECTRONIC RECORD IS GENERATED BY A COMPUTER SYSTEM AND DOES NOT REQUIRE ANY PHYSICAL OR DIGITAL SIGNATURES.
PRIVACY NOTICE FOR THE EPIC WORLD SURVEY OF ENTREPRENEURIAL HOUSEHOLDS
Effective Date: December 6, 2024
1. When does this privacy notice apply?
This privacy notice (Privacy Notice) explains how Enmasse.World Private Limited (us, we, our, EPIC) located at 143 Cecil Street #03-01 GB Building Singapore 069542, may collect, use, store, disclose, transfer, or otherwise process personal data when you respond, access, or upload data to the IVRS platform operated by OnionDev Technologies Private Limited (GramVaani) and the written survey platform operated by SurveyMonkey Europe UC, and your rights in relation to your personal data. Your personal data is stored by (i) EPIC at the address set out above, and disclosed to, stored and processed by (ii) the data intermediaries engaged by us, namely OnionDev Technologies Private Limited (GramVaani) located at Plot No.2, First Floor, 100 Feet Road, Ghitorni, MG Road, New Delhi 110030 and SurveyMonkey Europe UC located at Ella House, Suite 40.4, 40 Merrion Square East, Dublin 2, D02 NP96, Ireland. By providing your personal data to us in the manner described above, you are hereby consenting to the collection, use, storage, disclosure, transfer, or otherwise processing of your personal data as described in this Privacy Notice.
Please note that this Privacy Notice has been prepared in the English language. In case of any discrepancies between translated versions of the Privacy Notice and its English version, the English version of the Privacy Notice will prevail.
This Privacy Notice describes:
● the personal data we may collect from you;
● the purpose for which we may collect, use, disclose and process such personal data; and
● how you can exercise your rights with respect to your personal data.
2. Personal data that we may collect and the purpose of collecting, using and disclosing the personal data
Set out below are the various kinds of personal data that we may collect from you and the purposes for which such personal data may be collected, used and/or disclosed:
Personal data/Category of personal data: Phone number
Purpose of collecting, using and/or disclosing:
● To ensure integrity of the survey results
● To comply with applicable laws and data that may be required in any civil, regulatory, or criminal proceedings involving EPIC.
Non-personal data on the company you are associated with, your district of residence, age group, gender, and your responses to the survey questions are collected, used and/or disclosed to analyse response patterns and generate insights, which insights are used to prepare a report on the EPIC World Survey of Entrepreneurial Households, and to improve our services for Entrepreneurial Households and the companies creating goods and services for them.
How and why we may share your personal information
We may disclose, share or transfer your personal data (a) with third parties who perform services on our behalf (such as IT providers, CRM providers, marketing support providers, customer service providers, business development providers, and legal service providers) and their directors, officers, employees, representatives, agents or delegates, to inter alia prepare a report on the EPIC World Survey of Entrepreneurial Households; (b) with our affiliates or any other contributors or partners for the EPIC World Survey of Entrepreneurial Households inter alia to ensure quality control and integrity of the survey; and (c) as required under applicable laws, or in relation to any judicial or governmental proceedings and in each case, whether such parties are located in Singapore or elsewhere.
We do not sell your personal information to any third party. We will not send you promotional and marketing messages via phone calls or text messages, unless your consent has been obtained.
Transfer of personal data outside Singapore
We may need to transfer your personal data outside of Singapore, whether to third-party service providers or data storage facilities and before we do so, we will ensure that appropriate levels of protection necessary to maintain the security and integrity of your personal data are in place. We will ensure that we provide a standard of protection to personal data so transferred that is comparable to the protection under the Personal Data Protection Act 2012 of Singapore.
How long do we keep your personal data?
We will only retain your personal data: (a) for as long as we reasonably need it for the specific purposes listed above and until it is no longer necessary for legal or business purposes; or (b) until you withdraw your consent for the collection, use and/or disclosure of such data in accordance with this Privacy Notice. We do not retain any personal data for longer than is required for the purpose for which such information may lawfully be used or is otherwise required under any applicable law for the time being in force.
3. Your rights
If you have any grievance pertaining to our collection, use or disclosure of your personal data, or the exercise of any of your rights as provided under the Privacy Notice below, you have the right to contact the Data Protection Officer to redress your grievances in the manner described under Section 7 below, or in any other manner specified by applicable law.
You have the right to request for access to, correction, completion, update, and erasure of your personal data as collected in accordance with this Privacy Notice. Please note that a reasonable fee may be charged for an access request. If so, we will inform you of the fee before processing your request.
You may withdraw your consent to the collection, use or disclosure of personal data by us with reasonable notice.
4. Accuracy of personal data
You shall ensure at all times that the personal data provided by you is complete, accurate and up to date. In the event of any changes or updates, you shall inform us as soon as practicable.
5. Reasonable security practices and procedures
We seek to ensure the security, integrity and privacy of the personal data you provide us and have implemented reasonable security practices and procedures as necessary under our documented information security programs and policies, to protect your personal data from unauthorized access, collection, use, disclosure, copying, disposal, intrusion, alteration, or other forms of modification or destruction. We require our service providers, or other third parties we engage with and to whom we disclose your personal data to implement similar confidentiality, data privacy and security standards and measures when they handle, access or process your personal data.
You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.
6. Amendments to this Privacy Notice
You hereby agree and acknowledge that EPIC may need to update, amend or modify the Privacy Notice from time to time, including depending on any changes to how EPIC collects, uses and/or discloses your personal data. The Privacy Notice, as updated or amended or modified, shall apply to you. If we revise this Privacy Notice to amend the terms on which your consent was taken (such as the personal data categories that we may collect, the purposes
for collecting, use and/or disclosure of personal data, and the entities we will transfer or share personal data with), we will inform you and obtain your consent.
7. Data Protection Officer
If you have any questions in relation to the personal data collected, used and disclosed by us, including in relation to this Privacy Notice, please contact our Data Protection Officer at compliance@enmasse.world
Please ensure not to register a false or frivolous grievance or complaint pursuant to the Privacy Notice.