PDPA Statement

Spex Asia Personal Data Protection Statement

1. Purpose and Scope

We are committed to protecting the privacy and rights of individuals whose personal data we collect,
regardless of whether they are customers, prospects, partners, or website visitors. This policy outlines
how we gather, use, disclose, retain, and secure personal data in accordance with applicable data
protection laws (e.g. PDPA, GDPR where relevant).

2. What Personal Data We Collect

“Personal data” refers to any information relating to an identified or identifiable person, including but
not limited to name, email address, phone number, job title, company name, and in some cases, unique
identifiers.

3. Collection of Personal Data

We may collect personal data in various ways, including when:

  • You contact us or respond to our marketing campaigns
  • You engage our services
  • You visit our website or fill out forms
  • We receive data from third-party sources (with your consent)

We will only collect data that is necessary for legitimate purposes.

4. Purposes of Processing Use

We use personal data for purposes such as:

  • Sales, marketing, and business development (e.g. outreach, proposals)
  • Service delivery, support, and communications
  • Improving our products, services, and customer experience
  • Legal, compliance, or audit requirements

5. Legal Basis / Consent / Legitimate Interest

Where required by law, we obtain your consent to process your personal data.
In business-to-business (B2B) contexts, we may rely on “legitimate interest” (i.e., contacting you when
relevant) provided it does not override your rights and expectations.
You have the right to object or withdraw consent at any time.

6. Disclosure / Sharing of Data

We may share personal data with:

  • Affiliates, service providers, or partners who help us operate our business
  • Vendors or third parties only to the extent necessary and under confidentiality
  • Authorities or legal entities when required by law

We do not sell your personal data to unrelated third parties.

7. Retention Period

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as
required by law or to protect our legal interests. After that, data will be anonymized, securely destroyed,
or deleted.

8. Security Measures

We adopt reasonable technical and organizational measures to protect your personal data from
unauthorized access, loss, misuse, alteration, or disclosure.

9. Rights of Data Subjects

If you have questions or concerns, reach out to our Data Protection Officer:
📧 Email: dpo@spex-asia.com
You can also contact your local data protection authority if needed.

You have the following rights (as permitted by law):

  • To access your personal data
  • To correct or update inaccurate data
  • To erase or restrict processing where applicable
  • To object to processing or withdraw consent
  • To receive your data in a portable format (if applicable)

To exercise these rights, you may contact us at: [dpo@spex-asia.com / Data Protection Officer]

10. Changes to This Statement

We may update this statement from time to time. Changes will be posted on our website, and we will
notify you when in our reasonable judgment such changes are material.

11. Contact Information

If you have any questions, concerns or requests relating to your personal data or this policy, please
contact: dpo@spex-asia.com