Scope and accountability
This policy explains how personal data is managed on BIC Connect in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”). BIC Connect is operated for Business International Chambers Limited and is developed and powered by OLETeam under One Live Enterprise Solutions Pte. Ltd.
Albert Lim is the appointed DPO for bic-connect.com and bichamber.com. The DPO oversees privacy requests, retention reviews and incident escalation.
Personal data we collect
- Public enquiries: name, email, optional phone and organisation, topic and message.
- Account and profile: verified email, name, company, role, phone, country, industries, interests, markets, offers, needs and biography.
- Relationship workspace: contacts, business-card details and images, OCR text, notes, meeting context, follow-up dates, interests, market tags and matching inputs.
- Operational data: account and membership status, consent timestamps, page path, selected language and security records.
The detailed BIC membership application, declarations and official-use fields are collected only on the Chamber membership website and are not BIC Connect registration fields.
Purpose, notification and consent
We use personal data to register and secure accounts, provide OCR capture, relationship memory, matching and trusted-introduction functions, respond to support or business enquiries, maintain service records, prevent misuse, improve reliability, comply with law and protect users.
The enquiry form consent is limited to responding to the enquiry. It is not blanket marketing consent. You may withdraw consent through the DPO, although this may affect functions that require the data.
Accuracy and user responsibility
Keep your profile accurate and review OCR output before saving. Only upload business cards or contact information you are entitled to record and use. Do not add unnecessary sensitive personal data to free-text notes.
Disclosure and overseas transfers
We do not sell personal data. Data may be accessible to authorised service operators and providers supporting hosting, storage, authentication, security and requested services, only where necessary and with appropriate safeguards. Transfers outside Singapore will be managed in accordance with the PDPA’s transfer-limitation requirements.
When a visitor voluntarily opens the language selector, visible page text may be processed by Google Translate. Form-entry fields are marked not to be translated. Machine translation is provided for convenience and should not be used for sensitive user-entered information.
Protection and security configuration
- HTTPS encryption for data in transit.
- Account and workspace routes protected by authenticated identity.
- Server-side ownership checks applied to saved contacts and card images.
- Structured records and uploaded images kept in protected platform storage, not public website assets.
- No public read endpoint for private accounts, contacts or enquiries.
- Prepared statements, validation, request-size limits, same-origin checks and spam controls.
- Administrative enquiry access limited to authorised personnel.
- User-entered form text excluded from machine translation.
We maintain reasonable safeguards against unauthorised access, collection, use, disclosure, copying, modification, disposal and similar risks.
Retention and disposal
Public enquiries have a configured 24-month retention period and are automatically removed after expiry when the register is next processed, unless the matter remains active or legal or business needs require longer retention. Active account and workspace data is retained while the service is used and for a reasonable period needed for closure, dispute handling, security, regulatory or other legitimate legal and business purposes.
When no longer required, data will be deleted, securely disposed of or anonymised. Users may contact the DPO to request account closure and deletion, subject to applicable retention needs.
Access, correction and withdrawal
You may ask the DPO for access to personal data under our control, information about use or disclosure during the preceding year, correction of an error or omission, withdrawal of consent or account closure/deletion where applicable. PDPA exceptions may apply. Include your verified account email and relevant reference.
Marketing and Do Not Call
Support and service consent is not treated as marketing consent. Marketing messages to Singapore telephone numbers will be managed under applicable Do Not Call requirements unless valid clear consent or an exception applies, with a practical opt-out method.
Data-breach management
Suspected incidents are escalated to the DPO for containment, assessment, remediation and documentation. Notifiable breaches will be reported to the Personal Data Protection Commission as soon as practicable within the applicable statutory timeline, and affected individuals will be notified where required.
Ownership, changes and contact
BIC Connect is developed and powered by OLETeam under One Live Enterprise Solutions Pte. Ltd. for the exclusive authorised use of Business International Chambers Limited. This notice concerns personal-data handling and does not alter the ownership terms published on the Legal Notice page.
Questions and requests should be sent to Albert Lim, Data Protection Officer. For regulatory information, visit the Personal Data Protection Commission.