1. About this Policy
This Privacy Policy explains how FOOD MACH TECHNOLOGY INTERNATIONAL (FMTI) PTE. LTD. (FMTI, foodmachtech.com, we, us, or our) collects, uses, discloses, stores, transfers, and protects personal data when you visit or use www.foodmachtech.com, its mobile-optimised pages, applications, and related services (collectively, the Services).
Global FoodMachTech is a business-to-business platform connecting suppliers and buyers of food-processing machinery, equipment, spare parts, and related services. Although the Services are intended for businesses, we process personal data about individual representatives, employees, sole proprietors, contractors, and other people who interact with the platform.
For this Policy, personal data means data about an individual who can be identified from that data, or from that data together with other information to which we have or are likely to have access.
2. Scope
This Policy applies when you:
• visit or browse the Services;
• register, sign in, or manage an account;
• create a buyer, seller, or company profile;
• list, inquire about, buy, sell, pay for, ship, or receive products or services;
• use chat, customer service, dispute, return, warranty, logistics, or other platform functions;
• attend an event, complete a survey, or participate in a promotion; or
• otherwise communicate or interact with us.
Independent sellers, buyers, payment providers, carriers, customs agents, social-login providers, and third-party websites may process personal data under their own privacy notices. Review those notices before providing data directly to them.
3. Personal Data We May Collect
The categories collected depend on the Services used.
3.1 Data you provide
We may collect:
• Contact data: name, business email, telephone number, postal address, country/region, job title, department, and employer.
• Account data: username, password or authentication data, account settings, preferred language, and communication preferences.
• Business and verification data: company name, business type, industry, website, registration or licence details, business address, tax information, authorised-representative details, and documents used for supplier onboarding, KYC, fraud prevention, sanctions screening, or other verification.
• Transaction data: inquiries, quotations, order details, invoices, billing and delivery addresses, product configuration, quantities, prices, payment status, shipment records, return/refund requests, warranty records, complaints, and disputes.
• Payment-related data: payment method, masked account or card data, payment tokens, bank/payment-provider references, transaction identifiers, and settlement or refund records. Full payment credentials may be collected directly by a payment provider rather than stored by us.
• User Content: company profiles, product listings, descriptions, images, videos, reviews, ratings, comments, documents, and other material uploaded to the Services.
• Communications: customer-support correspondence, platform messages, chats, call or meeting notes where used and lawfully recorded, survey responses, and evidence supplied for a transaction or dispute.
• Marketing and event data: subscription choices, campaign interactions, event registration, interests, and promotion participation.
3.2 Data collected automatically
We may collect:
• device type, device or advertising identifiers, operating system, browser type, and language;
• IP address, approximate location derived from IP, time zone, and network information;
• page views, searches, clicks, referral pages, access dates, session duration, and feature interactions;
• cookie, local-storage, pixel, SDK, and similar-technology identifiers;
• diagnostic, performance, crash, error, and security logs; and
• account/login events and activity used to prevent abuse or protect the Services.
3.3 Data received from third parties
We may receive personal data from:
• buyers, sellers, employers, colleagues, and authorised representatives;
• social-login or identity providers when you choose that sign-in method;
• payment processors, banks, fraud-prevention, KYC, AML, sanctions-screening, credit-risk, or verification providers;
• logistics providers, warehouses, carriers, customs agents, and insurers;
• affiliates, resellers, service providers, and business partners;
• public registers, sanctions lists, government databases, and lawfully available sources; and
• review, rating, event, or marketing partners where legally permitted.
4. How We Use Personal Data
We may use personal data to:
4.1 Provide and administer the Services
• verify eligibility and create, authenticate, secure, and manage accounts;
• create company, buyer, seller, and product profiles;
• display listings and facilitate inquiries, quotations, communications, and transactions;
• process orders, payments, settlements, withdrawals, refunds, and related records;
• arrange or support shipping, warehousing, customs clearance, delivery, returns, repairs, and warranties;
• provide customer service, technical support, notifications, and transaction updates;
• manage complaints, claims, mediation, evidence, appeals, and disputes; and
• maintain records required to provide the Services.
4.2 Protect Users and the Services
• verify identities and business information;
• prevent, detect, investigate, and respond to fraud, abuse, security incidents, prohibited content, policy breaches, or unlawful activity;
• perform KYC, AML, counter-terrorist-financing, sanctions, export-control, or risk checks where appropriate;
• protect accounts, systems, transactions, users, and rights; and
• enforce the Terms & Conditions and platform policies.
4.3 Improve and operate the business
• operate, maintain, troubleshoot, test, analyse, and improve the Services;
• understand use, performance, demand, and user experience;
• develop new functions, products, and services;
• conduct internal reporting, audit, quality control, and business-continuity activities; and
• create aggregated or de-identified analytics that no longer identify individuals.
4.4 Communicate and market
• respond to inquiries and requests;
• send service, account, policy, security, and transaction communications;
• send marketing communications where consent or another lawful basis applies;
• personalise content or recommendations where legally permitted; and
• measure campaign effectiveness.
You may unsubscribe from marketing email using the link in the message or by contacting us. Service, security, transaction, and legal notices may still be sent where necessary.
4.5 Comply with law and protect rights
• comply with legal, regulatory, tax, accounting, recordkeeping, court, arbitral, and law-enforcement requirements;
• establish, exercise, or defend legal claims;
• respond to lawful requests and protect vital interests, safety, property, or rights; and
• support a corporate transaction such as a merger, reorganisation, financing, acquisition, or sale.
5. Basis for Collection, Use, and Disclosure
We collect, use, and disclose personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and other applicable law. Depending on the circumstances, we may rely on:
• consent that you provide;
• deemed consent under applicable law, including where you voluntarily provide data for an evident purpose or where processing is reasonably necessary to perform a contract or transaction;
• processing necessary to respond to your request, administer a business relationship, or provide the Services;
• legitimate interests or business-improvement exceptions, after any assessment required by law;
• compliance with a legal obligation, investigation, or law-enforcement request;
• protection of an individual's life, health, safety, or vital interests; or
• another exception or basis permitted by applicable law.
Where consent is the basis, you may withdraw it by giving reasonable notice. Withdrawal does not affect processing already lawfully carried out. It may prevent us from continuing a Service that requires the data, and we will explain the likely consequences where appropriate.
6. Cookies and Similar Technologies
Cookies and similar technologies are small files, identifiers, pixels, local-storage objects, or SDK functions used by websites and applications. We may use them to:
• keep you signed in and remember settings;
• provide shopping, inquiry, messaging, and account functions;
• protect accounts, transactions, and the Services;
• understand performance and user interactions;
• diagnose errors and improve the Services; and
• support advertising or measurement where permitted and, where required, consented to.
You can manage cookies through the available consent tool and browser/device settings. Disabling strictly necessary technologies may prevent parts of the Services from working.
7. How We Disclose Personal Data
We may disclose personal data, only as reasonably necessary and lawfully permitted, to:
• Other Users: buyers, sellers, and transaction counterparties to display business profiles, answer inquiries, negotiate, fulfil orders, arrange delivery, or resolve issues.
• Affiliates: group companies that help provide, secure, support, or administer the Services.
• Service providers: hosting, cloud, software, communications, customer-support, analytics, cybersecurity, verification, professional-advisory, document, and other vendors processing data for us.
• Payment and risk providers: banks, acquirers, payment processors, fraud-prevention, KYC, AML, sanctions, credit-risk, and settlement providers.
• Logistics and trade providers: sellers, warehouses, carriers, freight forwarders, customs brokers, insurers, inspectors, repair providers, and destination agents.
• Marketing partners: only where permitted and subject to required consent and controls.
• Professional advisers and dispute bodies: lawyers, accountants, auditors, insurers, experts, mediators, courts, arbitral institutions, and tribunals.
• Authorities: regulators, courts, law-enforcement, tax, customs, sanctions, and other public bodies where disclosure is required or permitted by law.
• Corporate-transaction parties: actual or proposed buyers, sellers, investors, lenders, and advisers in a merger, financing, restructuring, acquisition, insolvency, or sale, subject to appropriate safeguards.
We do not sell personal data for money. If a practice is treated as a “sale” or “sharing” under an applicable regional law, we will provide any notice and choice required by that law.
8. International Transfers
Global FoodMachTech supports cross-border business, so personal data may be accessed, stored, or processed outside Singapore and outside your country of residence. The laws in those places may differ.
For transfers from Singapore, we will take steps required by the PDPA to ensure that the recipient is bound by legally enforceable obligations providing a standard of protection comparable to the PDPA, unless an exception applies. Measures may include contracts, intra-group arrangements, due diligence, security controls, and transfer-risk assessments.
Where another jurisdiction's transfer rules apply, we will use an approved transfer mechanism or exception as required.
9. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. Measures may include access controls, authentication, encryption in transit where appropriate, monitoring, backups, vendor controls, staff procedures, and incident response.
No internet transmission or storage system is completely secure. You are responsible for keeping account credentials confidential, using appropriate devices and networks, and notifying us promptly of suspected unauthorised use.
We assess data incidents and make notifications to the Personal Data Protection Commission (PDPC) and affected individuals where required by the PDPA or other applicable law.
10. Retention
We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Policy and meet legal, accounting, tax, transaction, fraud-prevention, security, dispute, warranty, or evidentiary requirements.
Retention depends on the type of data, relationship, transaction lifecycle, legal limitation periods, unresolved claims, and operational need. When retention is no longer necessary for a legal or business purpose, we will cease retention or remove the means by which the data can be associated with an individual, subject to permitted backup and archival cycles.
11. Your Choices and Rights
Subject to the PDPA and other applicable law, you may:
• ask for access to personal data in our possession or control and information about how it was used or disclosed during the applicable period;
• ask us to correct an error or omission;
• withdraw consent with reasonable notice;
• ask us to stop direct marketing;
• request account closure and deletion or anonymisation where applicable;
• ask questions or make a complaint about our handling of personal data; and
• exercise additional rights provided by the law of your jurisdiction.
Rights are subject to legal exceptions. We may need to verify your identity and authority, clarify the request, charge a fee where permitted, or retain information where required for legal, security, transaction, or dispute purposes.
To exercise a right, contact the DPO/privacy channel in Section 16. We will respond as soon as reasonably practicable and within any period required by applicable law.
12. Children and Minors
The Services are intended for adult representatives of commercial entities. We do not knowingly solicit accounts from individuals under 18. If you believe a minor has provided personal data without appropriate authorisation, contact us so that we can investigate and take action required by law.
13. Third-Party Websites and Services
The Services may link to third-party websites, applications, products, or services. Their privacy practices are governed by their own notices. We are not responsible for third-party content or practices merely because a link or integration appears on the Services.
14. Changes to this Policy
We may update this Policy to reflect changes in law, technology, providers, or business operations. We will post the revised Policy and update the effective date. For material changes, we will provide additional notice or obtain consent where required. Changes will not retroactively reduce rights where prohibited by law.
15. Additional Regional Notices
Individuals in certain jurisdictions may have additional privacy rights or notices. Where local law applies, this Policy will be interpreted together with any applicable regional notice, and mandatory local requirements prevail to the extent of a conflict.
16. Contact Us and Data Protection Officer
Singapore organisations are required to designate at least one Data Protection Officer and make the DPO's business contact information publicly available.
If you are not satisfied with our response, you may have the right to contact the Singapore Personal Data Protection Commission or another competent authority. Information about the Singapore PDPA is available from the Personal Data Protection Commission.
