The UPPFIRTS platform uppfirst.com is owned and operated by Uppfirst SG PTE LTD, 6001 Beach Road #22-01Golden Mile Tower Singapore (199589), registration number: 202224695N (we or us).
1.1 We are committed to protecting and respecting your privacy. This privacy notice sets out the basis on which any personal data we collect about you, including through our website https://uppfirst.com (our site), will be processed by us.
1.2 We are a controller. This means that we are responsible for deciding how and why we hold and use personal data about you, and for explaining this clearly to you.
1.3 Please read this privacy notice carefully to understand what we do with your personal data and what rights you have in relation to our activities.
1.4 This privacy notice applies to anyone we interact with, including sellers and buyers of products and UPPNFTs and to visitors of our site.
2.1 Personal data means any information relating to an individual from which that person can be identified (directly or indirectly). It does not include data where the identity has been removed (anonymised).
2.2 We will only use your personal data when the law allows us to. Our lawful bases for processing is set out in the table below. However, some of our grounds for processing will overlap and there may be several grounds which justify our use of your personal data.
2.3 If we rely on consent as a legal basis for processing your personal data then you have the right to withdraw any consent you give. You can do this at any time by contacting us.
2.4 Please note that we may process your personal data without your knowledge or consent where this is required or permitted by law.
3.1 We have set out below the main ways we plan to use your personal data, and which of the lawful bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
| Personal data about sellers | ||
|---|---|---|
| Type of personal data and source | How we use your personal data | Our lawful bases for using your personal data |
| We collect your business name, representative’s full name, website, business email address, business phone number and business address. | To enable you to use our platform and create your profile | Necessary for the performance of the contract we have with you. Necessary for our legitimate interest in providing a platform that allows sellers to create content for the sale of the rights to products and services and to enable the sellers to engage with buyers and potential buyers. |
| We also collect your social media handle from Instagram, Tik Tok, Twitter and Snapchat if you choose to share those. This information is visible to other users as part of your profile on our platform. | To complete a profile on our platform and to share your profiles with, and interact with, other users. | Optional for the performance of the contract we have with you. Optional for our legitimate interest in providing a platform that allows sellers to create content for the sale of the rights to products and services and to engage with buyers and potential buyers. |
| Personal data about buyers | ||
|---|---|---|
| We collect your email address when you contact us by filling in a form or register for an account. | To enable you to use our platform or to respond to your query. | Necessary for the performance of the contract we have with you. |
| We collect your billing and shipping address. | To enable you to purchase and request delivery from sellers on the UPPFIRST platform. | Necessary for the performance of the contract we have with you. |
We will sometimes use and share your personal data in other ways. Here are some examples:
4.1 We may share your information with third parties as follows:
4.1.1 if we sell any business or assets, in which case we may disclose your personal data to the prospective buyer (and their advisors) of such business or assets;
4.1.2 with our insurers or professional advisors;
4.1.3 if we have a legal obligation to do so; or
4.1.4 in exceptional circumstances, we may need to share personal data with law enforcement, for example, where we consider that doing so is necessary for our legitimate interests in ensuring that our platform is used appropriately.
4.2 We share your personal data with third-party service providers, such as our platform provider, our site host, IT support and maintenance service, cloud storage providers and email exchange servers.
5.1 You are required to provide the personal data set out in the table. If you fail to provide certain information when requested, we will not be able to provide our services to you.
6.1 We will only keep your personal data for as long as necessary to fulfil the purposes we use it for, including for the purposes of satisfying any legal, accounting or reporting requirements. Usually, when a seller or a buyer deletes their account then their personal data held in relation to that account will be deleted at the time or shortly after. However, we may retain your personal data for a longer period in the event of a complaint or concern or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
6.2 We may keep personal data for up to 12 months longer than any stated retention period to allow time for us to anonymise or delete information in accordance with our internal data management processes.
6.3 Emails are kept for up to 2 years on our back-up email exchange server.
7.1 You have the following rights:
7.1.1 to correct or update the personal data we hold about you. As a buyer or seller, you can do this through your account settings or by emailing us at support@uppfirst.com;
7.1.2 to object to the processing of your personal data where we are processing your data for direct marketing purposes or where we are relying on legitimate interests as our lawful basis;
7.1.3 to request a copy of the personal data we hold about you;
7.1.4 to ask us to delete the personal data that we hold about you;
7.1.5 to ask us to restrict how we use your personal data;
7.1.6 to ask us to send your personal data to another organisation in a computer-readable format;
7.1.7 to complain to the UK data protection regulator, the Information Commissioner's Office (ICO). If you do have any concerns about how we have handled your personal data we would kindly ask that you contact us in the first instance before you speak to the ICO so that we have an opportunity to put things right.
7.2 If you want to exercise any of your rights, please contact support@uppfirst.com. Please note that some of these rights are subject to a number of exceptions and exemptions, which means that we will not always have to comply with your request.
8.1 If you have any questions about this notice, please contact us at support@uppfirst.com.
Addendum: Additional Information for users in Singapore
To the extent that Singapore Data Protection Laws (as defined below) apply to the processing of your personal data, this Addendum (“Additional Information for users in Singapore”) shall apply.
Singapore Data Protection Laws shall mean any applicable data protection and privacy laws relating to the processing of personal data and privacy including the Personal Data Protection Act 2012 (“PDPA”) and the Personal Data Protection Regulations 2021. Further, “personal data” shall have the meaning ascribed to it in the PDPA.
In the event of any conflict or inconsistency with the main body of this Privacy Notice and this Addendum, this Addendum shall prevail to the extent that the Singapore Protection Laws apply to our use of your personal data.
Legal Basis for Processing your Personal Data
We foresee collecting and using your personal data in the ways set out in Section 3.1 above and disclosing your personal data in the ways set out in Section 4.1 above. We will collect, use and disclose your personal data in accordance with the Singapore Data Protection Laws. In general, before we collect any personal data from you, we will notify you of the purposes for which your personal data may be collected, used or disclosed, and we will obtain your express or deemed consent for the collection, use or disclosure of your personal data for such purposes, unless we are able to rely on any exceptions to consent under the PDPA.
How Do I Access My Personal Data?
You may contact us if you wish to find out about the personal data we hold about you or how we used or disclosed that personal data in the past 12 months prior to your request. We may need to verify your identity before giving you access and, depending on the complexity of your request, we may charge a reasonable fee for processing the request. If we are unable to respond to your requests within thirty (30) days after receipt of your request, we will inform you within that time in writing the time by which we will be able to respond to the request.
How Do I Correct my personal data?
In order to ensure that the personal data that we maintain is accurate, you may, at any time, send our Data Protection Officer requests to update your information or requests for correction of errors or omissions in personal data which we hold about you. If we are unable to respond to your requests within thirty (30) days after receipt of your request, we will inform you within that time in writing the time by which we will be able to respond to the request.
How Do I Withdraw my Consent?
You may withdraw consent and request us to stop using and/or disclosing your personal data for any or all of the purposes listed herein by submitting your request via email to our Data Protection Officer. We will inform you of the likely consequences of withdrawing consent and will endeavour to process your request within ten (10) business days from the day of receipt of your request.
Security
We will use technical and organisational measures to safeguard your personal data. For example: (a) all personal data you provide to us is stored on our secure servers; (b) we restrict access to personal data to our employees, service providers and contractors on a strictly need-to-know basis and ensure that those persons are subject to contractual confidentiality obligations; and (c) we review our personal data collection, storage and processing practices from time to time to guard against unauthorised access, processing or use.
Retention of personal data
We will only retain and use your personal data for as long as the purpose for which that personal data was collected for is being served by retention of the personal data, or the retention is necessary for legal or business purposes, including complying with our legal obligations, resolving disputes and enforcing our agreements.
International transfers
We will only transfer personal data to a country or territory outside Singapore if we ensure that the overseas receiving party is bound by legally enforceable obligations to afford the transferred data a standard of protection that is comparable to that under Singapore law. We will also ensure that any overseas recipient is able to provide appropriate technical and organisational measures to protect your personal data and its confidentiality.
Data Protection Officer
Our Data Protection Officer can be contacted using the business contact information provided at Section 8.1 of the main body of this Privacy Notice.
11.1 Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
11.2 Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
11.3 Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
11.4 Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests.
11.5 You can find more information about the individual cookies we use and the purposes for which we use them in the table below:
| Cookie Name | Purpose |
|---|---|
| uppfirst_auth | This cookie is essential for our site to enables us to: a) Recognise you when you return to our site. b) Store information about your preferences. c) Speed up your searches. d) Allow you to use our site in a way that makes your browsing experience more convenient, for example, by allowing you to store items in an electronic shopping basket between visits. If you register with us or complete our online forms, we will use cookies to remember your details during your current visit, and any future visits provided the cookie was not deleted in the interim. |
12.1 Third parties may include purchasing providers, data analytics providers or vendors, companies providing communication or identity verification to us which you choose to use, third-party providers which you choose to use or other vendors which provide us with information necessary to run the platform.
12.1.1 Google Analytics, needed to collect analytics regarding website audience.
12.1.2 Stripe, needed for fraud prevention.
12.2 Third parties may also include agents and or affiliates, subsidiaries, or joint ventures under our control in which they are required to honour this Privacy notice.