DATA PROTECTION POLICY

1.  General

At Calsius, we take protecting your Personal Data seriously. It is important that you know how we manage your Personal Data, including how we collect, use, and disclose it.

Please take a moment to read this Data Protection Policy.

2.  Compliance

By interacting with us, submitting information to us, allowing us to provide our services, or using any products offered by us (“Products and Services”), you agree and consent to Calsius Group (Calsius Solutions Pte Ltd, Calsius Risk Consultancy Pte Ltd), (collectively, “Calsius”), as well as its representatives (collectively referred to herein as “Calsius Group”, “us”, “we” or “our”) collecting, using, and disclosing amongst themselves your Personal Data, and disclosing such Personal Data to Calsius’ authorised service providers and relevant third parties in the manner set forth in this Data Protection Policy.

3.  Contact Us

This Policy applies to all personal data you provide to us, or that we may collect about you. Do not provide any personal data to us if you do not accept this Policy.

If you have any feedback or issues pertaining to your Personal Data, our Data Protection Policies, withdrawal of your consent, or obtaining access and making corrections to your Personal Data, please contact our Data Protection Officer at:
Data Protection Officer
Email: dpo@calsius.sg

4.  Amendment of Policy

From time to time, this Policy may be amended to comply with applicable laws or to reflect updates to our data usage and handling processes. This Policy shall supersede earlier versions. Where material changes are made, we will take reasonable steps to notify affected individuals through appropriate channels. The amended Policy will take effect as stated in the updated version.

5.  Collection of Personal Data

The personal data we collect may vary depending on your relationship with us. We may collect personal data directly or indirectly through various channels, including but not limited to:

• Phone calls, video calls, letters, face-to-face meetings, and emails;
• Use of our services or conduct of business with us (or expression of interest in doing so);
• Visits to our website;
• Transactions, contact, or requests made through communication platforms including messenger applications, telephone calls, emails, fax, and letters;
• Images captured via photographs or videos taken by us or our representatives when you are within our premises, attend events organised by us, or visit our spaces during conventions, exhibitions, or similar activities;
• Information sought in connection with your relationship with us, for example, if you are a customer, investor, or shareholder; or
• Submissions of personal data to us for any other reason.

6.  Purpose of Collection, Use and Disclosure

Calsius collects and uses personal data for purposes reasonably required for our operations. These purposes may include:

• Responding to enquiries and requests;
• Providing our services and solutions;
• Managing business relationships with clients and partners;
• Processing employment or recruitment applications;
• Event registration and participation;
• Security and safety monitoring within our premises;
• Visitor and access control management;
• Compliance with legal and regulatory requirements; and
• Internal administrative and operational purposes.

Where required, Calsius will obtain consent before collecting or using personal data.

7.  Disclosure of Personal Data

Calsius may disclose personal data where necessary for legitimate business purposes. This may include disclosure to:

• Service providers supporting our operations;
• Professional advisers such as auditors or legal consultants;
• Regulatory or government authorities where required by law; and
• Technology vendors supporting our systems.

Where personal data is shared with third parties, we take reasonable steps to ensure that the receiving parties protect the data appropriately and use it only for authorised purposes.

8.  Accuracy of Personal Data

Calsius strives to ensure that personal data collected is accurate and complete, particularly where it may be used to make decisions affecting individuals.

Individuals are encouraged to inform us if there are updates or corrections to their personal data.

9.  Retention of Personal Data

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulatory obligations.

When personal data is no longer required, it will be securely deleted.

10.  Protection of Personal Data

Calsius takes reasonable and appropriate steps to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks.

These safeguards are reviewed and updated as necessary to maintain appropriate levels of protection. Our staff and representatives are made aware of their responsibilities in handling personal data in accordance with this Policy.

11.  Data Breach Notification

In the event of a data breach that is likely to result in significant harm to affected individuals, or that meets the notification threshold under the Personal Data Protection Act, Calsius will take prompt action to assess and contain the breach. Where required, we will notify the Personal Data Protection Commission and affected individuals within the timeframes prescribed by applicable law.

Individuals who believe their personal data held by Calsius may have been compromised are encouraged to contact our Data Protection Officer at dpo@calsius.sg.

12.  Access and Correction Requests

Individuals may request access to, or correction of, their personal data held by Calsius.

Requests should be submitted in writing to our Data Protection Officer. We will respond to requests within 30 calendar days of receipt. An administrative fee may be charged for access requests where permitted under applicable laws.

13.  Withdrawal of Consent

You may withdraw your consent to the collection, use, or disclosure of your personal data by providing reasonable written notice to our Data Protection Officer at dpo@calsius.sg.

Please note that withdrawing consent may affect our ability to continue providing our products and services to you. We will inform you of the likely consequences before processing your withdrawal request. Withdrawal of consent does not affect the lawfulness of any collection, use, or disclosure of personal data that occurred prior to the withdrawal.

Withdrawal requests will be processed within 30 calendar days of receipt.

This Policy is issued by Calsius Group and is effective as of Jun 2026. It supersedes all previous versions of the Calsius Data Protection Policy.