Asia privacy rights

This page applies to residents of India, Singapore and Japan. The mechanics of exercising these rights are the same throughout; the names, deadlines and supervisory authorities differ.

The service is not actively offered in China or South Korea, so the PIPL and PIPA are not covered here. Should that change, this page will be extended before any offering begins.

As a Data Principal you hold the following rights:

• Access to a summary of the data processed and of those it has been shared with (section 11).
• Correction, completion and updating of your data (section 12).
• Erasure of data no longer needed (section 12).
• Nomination of another individual to exercise these rights on death or incapacity (section 14).
• Consideration of a complaint by the Grievance Officer (section 13).

Section 6(4) of the DPDP requires that withdrawing consent be as easy as giving it. Consent is given by a checkbox at registration and withdrawn by a single request from the “Privacy and data” screen, with no explanation required and no delay.

Section 13 of the DPDP requires a published channel for complaints. We use the same channel for the data protection officer function under Singapore's PDPA.

If our response does not satisfy you, you may refer the matter to the Data Protection Board of India.

Section 11 of the PDPA requires us to designate a data protection officer and make their contact details public — see section 4 above.

You have the right to access your personal data and information on how it has been used in the past year (section 21), and to request correction (section 22). We respond within 30 days; where that is not possible we will tell you the realistic timeframe.

Complaints may be made to the Personal Data Protection Commission (PDPC).

The purpose of use is set out in the Privacy Policy and publicly announced in accordance with Article 21 of the APPI.

You have the right to request disclosure, correction, addition, deletion and suspension of use of your data (Articles 33–35). We handle such requests through the same process as all others.

The business operator details — name, address and representatives — are published on the Legal notice page in accordance with Article 32(1).

Complaints may be made to the Personal Information Protection Commission (PPC).

Legal notice

Data is stored in the European Union (Ireland). Japan and the EU mutually recognise each other’s levels of data protection, so a transfer to the EU requires no additional consent under Article 28 of the APPI. For data subjects in India and Singapore the transfer rests on contractual safeguards.

• India — Data Protection Board of India
• Singapore — Personal Data Protection Commission (pdpc.gov.sg)
• Japan — Personal Information Protection Commission (ppc.go.jp)

Submit a request from the Privacy and data screen in your account, or write to privacy@buildinghost.eu. We may need to verify your identity before acting on a request.