Privacy Policy

This policy explains how MTC SYSTEM (HOLDING) PTE. LTD (“MTC”, “we”, “us” or “our”) handles personal data through mtcsys.sg, its forms, assessments and related communications.

It is intended to reflect Singapore’s Personal Data Protection Act 2012 (“PDPA”). It does not cover websites or services operated by third parties, even when we link to them.

Depending on how you use the Website, we may collect:

• your name, work email, company and any optional telephone number, city, industry or role information you provide;
• the questions, requirements and business information you submit through an enquiry form;
• correspondence and records of our follow-up with you;
• technical and usage data such as IP address, browser and device information, referring page, pages viewed, timestamps, cookie identifiers and security logs.

The Management & ERP Readiness Assessment runs in your browser and displays its result on the page without asking for contact details. Files on the downloads page can be downloaded without completing a lead form. If you later contact MTC, the information you choose to submit is handled under this policy.

Please do not submit passwords, payment-card details, national identification numbers, medical information or other sensitive information through general enquiry fields. If you provide personal data about another person, you should be authorised to do so and ensure they understand the relevant purpose.

We collect, use and disclose personal data only for purposes that are reasonable in the circumstances, including to:

• respond to enquiries, arrange consultations and provide information you request;
• understand requirements, prepare a proposal and manage a prospective or existing business relationship;
• operate, secure, troubleshoot and improve the Website and our digital services;
• send marketing communications where you have consented, with a way to unsubscribe;
• meet legal, regulatory, audit, fraud-prevention and dispute-resolution requirements.

The form or interaction will state the relevant purpose at or before collection. Where the PDPA requires consent, we will seek it and allow you to withdraw it on reasonable notice. Withdrawal does not affect processing already lawfully carried out and may mean we cannot continue a requested service.

The Website uses essential storage for security, language and consent preferences. Non-essential analytics and session-measurement technologies are activated only after you give consent through the Website controls. Depending on the services enabled for the Website, these may include Google Analytics, Microsoft Clarity and MTC-hosted Umami analytics. You can withdraw consent through the cookie controls or your browser settings; doing so does not affect essential storage needed to operate and protect the Website.

We do not sell personal data. We may disclose only what is reasonably necessary to:

• MTC group teams involved in responding to or delivering your request;
• service providers supporting hosting, security, analytics, customer relationship management, email delivery and business operations;
• professional advisers, auditors, insurers, regulators, courts or public authorities where appropriate or legally required;
• a successor organisation in a merger, reorganisation or business transfer, subject to appropriate safeguards.

Website enquiries and related service data may be processed or stored outside Singapore, including on MTC infrastructure in Hong Kong. Before transferring personal data overseas, we will take steps required by the PDPA to ensure a standard of protection comparable to that under the PDPA, such as contractual, organisational and technical safeguards.

We take reasonable steps to keep personal data accurate and complete where it is likely to be used to make a decision about you or disclosed to another organisation. We stop retaining it, or remove the means by which it can be associated with you, when it is no longer needed for a legal or business purpose.

We use reasonable administrative, physical and technical safeguards appropriate to the nature of the data. No online service can guarantee absolute security. We assess suspected data breaches and notify the Personal Data Protection Commission and affected individuals where the PDPA requires it.

Subject to the PDPA and applicable exceptions, you may:

• ask for access to personal data we hold about you and information about how it was used or disclosed;
• ask us to correct inaccurate or incomplete personal data;
• withdraw consent for future collection, use or disclosure on reasonable notice;
• unsubscribe from marketing communications;
• raise a question or complaint with our Data Protection Officer.

We may need to verify your identity and may charge a reasonable fee for an access request where permitted. We will tell you about any fee before proceeding and respond within the time required by law.

We may update this policy when our services, vendors or legal obligations change. The latest version and update date will be published on this page. Where appropriate, we will give additional notice of material changes.

Contact our Data Protection Officer to make a request, withdraw consent or raise a privacy concern:

You may also use our contact form. If you remain dissatisfied, you may contact Singapore’s Personal Data Protection Commission.

Official references: PDPC data-protection obligations and the Personal Data Protection Act 2012.