Privacy Policy

PERSONAL DATA PROCESSING NOTICE

This Notice sets out the guidelines UTU Group (defined hereinafter) adheres to when processing personal data of its Users.

UTU Pte Ltd, based in Singapore – 60 PAYA LEBAR ROAD, #05-01, PAYA LEBAR SQUARE, SINGAPORE 40905, e-mail address inquirytaxfree@utu.global, and its subsidiaries (collectively, “UTU Group” or “UTU”). “User” refers to any individual who accesses or uses UTU Group’s services, website, or applications.

UTU hereby informs Users that personal data collected and provided while browsing, consulting, and using the UTU Website and App will be processed in accordance with applicable data protection laws.

UTU Group reserves the right to modify or update, in whole or in part, this Notice at any time at its discretion, including to take into account changes in laws and regulations relating to the protection of personal data, and will notify Users of any such changes.

UTU Group informs Users that the content of this Notice does not apply to websites and apps owned or managed by third parties and declines any liability for any request and/or release of personal data to third-party websites and in relation to the management of authentication credentials provided by third parties.

Any capitalized terms not expressly defined in this Notice shall have the meaning ascribed to them under applicable data protection laws.

A. Data Controllers

Data Controllers are the companies of the UTU Group, including but not limited to UTU Pte Ltd, UTU Technologies Pte Ltd, UTU Points Pte Ltd, UTU Tax Free Pte Ltd, UTU Rewards Pte Ltd, UTU Rewards S.r.l., UTU Rewards France SAS.

B. Data Protection Officer

Mr. Sridhar Vorla, DPO, can be contacted at: dataprivacy@utu.global

C. Information Collection, Use and Disclosure

1. This Notice describes how UTU processes personal data collected, used, disclosed, shared, and stored through its platforms, including the UTU Website (www.utu.global) and the UTU Web Applications.
2. Data will be retained only as long as necessary to fulfill the purposes for which it was collected and for any period required by law. Personal Data shall not be kept after the purpose of its processing has been fulfilled, except if anonymized.

D. Type and Source of Personal Data

1. Data provided by Users: UTU processes personal data provided by Users when requesting information, registering, purchasing services, creating an account, or filling forms. This may include:
   • Identification data: name, date of birth, nationality, residence, contact details, passport details, payment details;
   • Registration and authentication data: account creation and access;
   • Transaction data: dates, amounts, payment instruments, and other relevant information for delivering services and products.
2. Data collected automatically: The UTU Website/App may collect technical data such as IP address, browser type, device information, page visits, and cookie data. These are used in aggregated and anonymized form for statistical and operational purposes.

All payment information and personally identifiable information will not be sold, shared, rented, or leased to any third parties and will be securely processed by authorized payment gateways.

E. Purposes of Data Processing

1. Users’ personal data may be processed to:
   • Deliver services and products, manage accounts, and communicate with Users;
   • Prevent fraud and ensure security;
   • Comply with legal obligations and manage accounting, tax, and refund processes;
   • Investigate and protect against illicit use or violations.

Provision of data is necessary for the fulfillment of contractual obligations and applicable legal requirements.

2. With prior consent, UTU may also process data for:
   • Marketing Communications
     We may use your contact details (such as email address) to send you promotional information, offers, surveys, and market research communications relating to UTU services and partners
   • Personalization and Profiling
     With your consent, we may analyze your interactions with our services (such as transaction history, service usage patterns, and preferences) to:
     • improve service performance,
     • tailor content, offers, and communications to your interests,
     • enhance user experience.

Consent may be withdrawn at any time by contacting inquirytaxfree@utu.global, without affecting services or contractual obligations.

F. Special Categories of Personal Data – Minors

1. UTU may require explicit consent to process sensitive data such as gender, racial or ethnic origin, beliefs, political opinions, health, or biometric data.
2. Lack of consent may prevent certain services. Sensitive data will only be processed with consent and for the necessary duration.
3. UTU does not process personal data of individuals under 18 years of age.

G. Methods of Data Processing

Data may be processed using paper, digital, and IT tools, ensuring confidentiality, integrity, and security. Access is limited to staff or authorized service providers requiring the data for legitimate purposes.

H. Security Measures

UTU implements technical and operational measures to ensure appropriate data security, including encryption, tokenization of payment information, and adherence to principles of data protection by design and by default.

I. International Transfer of Personal Data

UTU may process, transfer, and store Users’ data across its global subsidiaries or service providers. Adequate safeguards will be implemented to protect data in jurisdictions with varying data protection standards, including standard contractual clauses or explicit consent.

J. Information Sharing

Personal data may be shared with:

• Other UTU Group companies and service providers;
• Service providers for payment, accounting, and administrative purposes;
• Authorities and regulatory bodies as required by law;
• Lawful recipients in cases of mergers, acquisitions, or business transfers.

K. Users’ Rights

Users have the right to:

• Access, rectify, or erase personal data;
• Withdraw consent at any time;
• Restrict processing or request data portability;
• Object to processing based on legitimate interests or for marketing purposes;
• Lodge complaints with competent regulatory authorities.

These rights can be exercised by contacting inquirytaxfree@utu.global.