Privacy policy (PDPA)

SSB Hub Pte Ltd (“SSB Hub”, “we”, “us”) is a company incorporated in Singapore. We build and implement software for the bunker and maritime industry.

This policy covers personal data we handle about visitors to this website, people who contact us, and business contacts at prospective customers. It does not cover the data that customers enter into their own SSB Hub workspace (see section 10).

The contact form on this website does not send anything to our servers. It prepares an email in your own email application, and we receive it only when you send it. We do not intentionally collect sensitive personal data, and this website is not directed at children.

We collect, use and disclose personal data only for purposes a reasonable person would consider appropriate:

• to respond to your enquiry and arrange demos, quotations and follow-ups;
• to assess whether and how our products fit your business;
• to enter into and perform a contract with you or your organisation, including onboarding and support;
• to keep this website secure and working, and to prevent misuse;
• to keep business and accounting records and to meet legal and regulatory requirements;
• to send you information about our products, but only where you have agreed to receive it.

We will tell you if we need to use your data for a new purpose and, where required, ask for your consent first.

We collect, use and disclose your personal data with your consent, unless the PDPA allows us to do so without it. Consent may be given expressly, or be deemed where you voluntarily provide your data for an obvious purpose, for example by emailing us to ask for a demo.

Business contact information (such as your work email and phone number) is handled in line with the PDPA’s provisions for business contact information. We may also rely on other exceptions in the PDPA, such as legitimate interests, after assessing that they do not unfairly affect you.

You may withdraw consent at any time by giving us reasonable notice at kiran@ssbhub.biz. We will tell you what the withdrawal means for you, for example that we may no longer be able to respond to an enquiry. Withdrawal does not affect use that already took place. Marketing messages will always include a way to opt out, and we will respect your registrations on Singapore’s Do Not Call Registry.

We do not sell personal data. We disclose it only where needed, to:

• service providers that help us run our business and this website, such as website hosting and delivery, email and messaging, and professional advisers, under obligations to protect it;
• other companies in our group or our authorised implementation partners, where needed to deliver our services to you;
• regulators, law enforcement or other parties where required or permitted by law, or to protect our rights;
• a successor, in connection with a merger, acquisition or sale of business, subject to confidentiality.

Third-party platforms you choose to use to contact us, such as WhatsApp or LinkedIn, handle your data under their own privacy policies.

Our service providers and the systems we use may store or process data outside Singapore. Where we transfer personal data overseas, we do so only in line with the PDPA’s Transfer Limitation Obligation, by taking appropriate steps to make sure the recipient provides a standard of protection comparable to the PDPA, for example through contractual safeguards.

This website does not set advertising, analytics or other non-essential cookies. Our hosting providers may use strictly necessary technical measures to deliver the site and protect it from abuse. If we add optional cookies in future, we will ask for your consent first. See our Cookie Settings page for more detail.

We keep personal data only as long as we need it for the purposes above or for legal or business purposes. Enquiry correspondence is kept while the enquiry is active and for a reasonable period afterwards. If an enquiry leads to a business relationship, we keep the relevant data for the duration of that relationship and for as long as Singapore law requires us to keep records. When we no longer need it, we delete or anonymise it, or arrange for it to be destroyed securely.

Information that customers enter into their SSB Hub workspace, such as their own customers, vessels, orders and users, is processed on the customer’s behalf and under its instructions, as a data intermediary, under the agreement between the customer and SSB Hub. The customer is responsible for having the right to provide that data. If you are an individual whose data is held in a customer’s workspace, please contact that customer first.

We make reasonable security arrangements to protect personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal and loss. These include access controls limited to staff who need the data, encrypted connections to this website, and reliance on established infrastructure providers. See our Security page for how the platform itself is protected.

No method of transmission or storage is completely secure, and email in particular is not encrypted end to end. Please avoid sending sensitive information by email.

If a data breach occurs, we will assess it promptly. If it is likely to cause significant harm to affected individuals, or is of a significant scale, we will notify the Personal Data Protection Commission (PDPC) as soon as practicable and no later than 3 calendar days after we determine that it is notifiable, and we will notify affected individuals where the PDPA requires.

You may ask us to:

• tell you what personal data we hold about you and how it has been used or disclosed in the past year;
• correct an error or omission in your personal data.

Please write to our Data Protection Officer at kiran@ssbhub.biz with enough detail to identify you and what you are asking for. We may need to verify your identity. We will respond as soon as reasonably possible, and normally within 30 days. If we cannot, we will tell you when we expect to. We may charge a reasonable fee for an access request, and will tell you the amount first. In limited cases the PDPA allows or requires us to refuse a request, and we will explain why.

We make reasonable efforts to keep the personal data we use accurate and complete. Please tell us if your details change.

SSB Hub has appointed a Data Protection Officer (DPO) who is responsible for our compliance with the PDPA. Contact details:

• Data Protection Officer, SSB Hub Pte Ltd, Singapore
• Email: kiran@ssbhub.biz
• Phone: +65 9729 9550

If you have a concern, please contact us first so we can try to resolve it. You may also contact the Personal Data Protection Commission at www.pdpc.gov.sg.

We may update this policy from time to time to reflect changes in our practices or the law. The date at the top shows when it was last updated. Where a change is significant, we will make that clear on this page.