Privacy notice

About this notice

Nimbli serves growing businesses mainly in Singapore and across Southeast Asia, with offices in Hong Kong and Jakarta, Indonesia. This notice describes our proposed approach to personal data under Singapore's Personal Data Protection Act (PDPA), where applicable. It covers this website, enquiries and recruitment conversations. The responsible legal entity will be identified in the relevant engagement or collection notice.

Where we process personal data on a client's instructions, the client's notice and our agreed data handling arrangements also apply. We will help direct a request to the organisation responsible for deciding how that information is used.

What we collect and why

Depending on what you choose to share with us, we may collect:

• Your name, work contact details and information about an enquiry, so we can respond and discuss the work.
• Application information, a CV, employment history and relevant correspondence, so we can consider a role or discuss suitable opportunities with you.
• Information provided during a client engagement, limited to the work and purposes agreed with the client.
• Technical information needed to operate and protect the website, such as request and session information. If analytics is enabled later, we will explain the additional collection and purposes before it begins.

Enquiries submitted through the contact form are received through our form provider so we can respond to you.

Please provide information relevant to the conversation. Do not send sensitive records or information about another person unless it is needed and you are authorised to share it. We may ask you to use an agreed channel for supporting documents.

Consent and choices

We explain the purposes for collection and seek consent where required, subject to applicable legal exceptions. A new purpose may require a further explanation or consent. For recruitment, we will discuss relevant sharing with a prospective employer rather than treating a general enquiry as permission for unrestricted distribution of your CV.

You may ask our Data Protection Officer to withdraw consent with reasonable notice. We will explain any effect on the enquiry, application or service and stop the relevant use unless the law permits or requires it to continue.

Access, correction and questions

Contact our Data Protection Officer to request access to personal data we hold about you, information about its use or disclosure, or correction of an error. We may need to verify your identity and clarify the records involved. Applicable exceptions may limit what can be provided; we will explain how they affect the request.

Use the same contact route for a concern about how your information has been handled. Please describe the issue without including more personal data than is needed to identify it.

Retention and protection

We keep personal data while it is needed for the stated purpose or a legal or business requirement, then arrange for deletion or anonymisation when it is no longer needed. Access is limited according to the work people are authorised to perform. Our data handling arrangements should include appropriate security measures and a process for reviewing access.

Sharing and overseas handling

Information may be handled by our teams in Hong Kong and Indonesia, as well as service providers supporting the agreed work. For transfers subject to the Singapore PDPA, we will put appropriate arrangements in place so the transferred information receives protection comparable to that required under the PDPA. These arrangements may include contractual safeguards and checks on how recipients handle the information.

We limit sharing to the relevant purpose, authorised recipients and applicable legal requirements. The location and handling arrangements for a client engagement should be documented in its scope.

Changes to this notice

We will update this notice when the relevant practices change. The date above identifies this version. Material changes may also require a direct notice or a further consent request, depending on the circumstances.

Contact the Data Protection Officer

You can reach our Data Protection Officer via our contact page. Please identify your message as a data protection request.