Privacy policy.

1. Who we are and scope

Bis Asia (S) Pte. Ltd. is a Singapore-based company trading as AsiaBIS. In this policy, “AsiaBIS”, “we”, “us”, and “our” refer to Bis Asia (S) Pte. Ltd. We are responsible for personal data in our possession or under our control, except where another organisation is clearly identified as responsible for its own processing.

This policy applies to asiabis.com, AsiaBIS accounts and platforms, business-information searches, report and investigation orders, client support, recruitment, and related communications. It does not govern an independent third party’s website or service.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• identity and professional details, including name, employer, role, and contact information;
• account and authentication data, including email address, password hashes, verification records, session identifiers, and account preferences;
• order and billing information, including selected companies, requested reports, transaction references, account credits, payment status, and billing contacts;
• case information and materials you provide for due diligence, research, field enquiries, or report delivery;
• website enquiries, selected report elements, illustrative estimates, requested turnaround, support requests, feedback, and records of our correspondence;
• job-application and recruitment information;
• search, usage, device, browser, security, and diagnostic information reasonably needed to operate and protect our services; and
• information from lawful public, official, commercial, and client-authorised sources used in our business-information and due-diligence work.

Please provide only information that is relevant and that you are authorised to share. Do not send passwords, full payment-card details, or unnecessary sensitive personal data through free-text forms or email.

3. How we collect personal data

We collect data directly from you, from an organisation that has authorised you to use our services, through your activity on our website and platform, and from payment, email, hosting, security, and other service providers. For research assignments, we may also obtain information from registries, government sources, courts, regulators, licensed databases, public websites, media, professional sources, and lawful field enquiries.

If you provide personal data about another person, you confirm that you have a lawful basis and any authority or consent required to do so, and that the person has received any notice required by applicable law.

4. How we use personal data

We may collect, use, and disclose personal data to:

• create accounts, authenticate users, manage permissions, and provide support;
• process searches, receive and route website enquiries, scope assignments, fulfil orders, deliver reports, and answer follow-up questions;
• process payments, credits, refunds, invoicing, and transaction reconciliation;
• communicate service updates, verification codes, order progress, and relevant business information;
• conduct lawful company, individual, litigation, sanctions, reputation, and operational research requested by clients;
• maintain source notes, quality controls, audit records, and defensible research standards;
• protect users, confidential information, and our systems; prevent fraud, abuse, and unauthorised access; and investigate incidents;
• improve our services, troubleshoot errors, and understand aggregated usage;
• recruit and manage personnel and service providers; and
• comply with law, enforce agreements, establish or defend legal claims, and respond to lawful requests.

We may use information for another compatible or legally permitted purpose, or for a new purpose that we notify to you where required.

5. Consent and your choices

Where consent is required, we seek it before collecting, using, or disclosing personal data. Consent may also be deemed or an exception may apply under Singapore’s Personal Data Protection Act 2012 (“PDPA”) or other applicable law. You may withdraw consent with reasonable notice by contacting us. We will explain likely consequences; for example, we may be unable to maintain an account or complete an order.

You may update account details, choose whether to proceed with a purchase, and control non-essential browser settings through your device. Service and security communications cannot always be opted out of while you maintain an active account or order.

6. When we share personal data

We may disclose relevant data to:

• our employees, analysts, country specialists, and authorised contractors who need it for their work;
• hosting, database, storage, security, email-delivery, support, and professional service providers;
• payment processors and financial institutions involved in a transaction;
• official registries, information providers, field resources, or counterparties where needed for a lawful assignment;
• auditors, insurers, lawyers, regulators, courts, law-enforcement bodies, or public authorities where permitted or required; and
• a prospective buyer, investor, or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.

We require service providers to process personal data only for authorised purposes and to protect it appropriately. We do not sell personal data as a standalone commercial product.

7. International transfers

AsiaBIS works across multiple Asian markets and uses infrastructure and specialists that may be located outside Singapore. When personal data is transferred overseas, we take steps required by the PDPA to ensure a standard of protection comparable to Singapore law, unless a legal exception applies. Measures may include contractual protections, access controls, due diligence, and limits on purpose and retention.

8. Retention

We retain personal data only for as long as it is reasonably needed for the purpose collected, for client service and quality assurance, or to meet legal, tax, accounting, security, audit, and dispute-related requirements. Retention periods differ by record type and assignment. When data is no longer needed for a business or legal purpose, we take reasonable steps to delete it, anonymise it, or remove the means of associating it with an individual.

Website enquiry records may include the company profile, report elements, estimate, contact details, message, delivery status, and a reference used to prevent duplicate submissions and support follow-up.

9. Security and data quality

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the data. These may include access and role controls, password hashing, secure session handling, encryption in transit, restricted report delivery, provider due diligence, logging, backups, and incident-response procedures. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

We take reasonable steps to keep personal data accurate and complete where it is likely to be used to make a decision affecting a person or disclosed to another organisation. Research reports state relevant sources, dates, limitations, and analyst interpretation where appropriate.

10. Cookies and browser storage

Our services use an essential session cookie to keep signed-in users authenticated. We also use local or session storage for functions such as language preference, cart contents, checkout state, and temporary company selections. Payment providers may set their own cookies when their checkout controls are loaded.

We do not currently use advertising cookies by default. If we introduce non-essential analytics or marketing technologies, we will update this notice and provide controls where applicable. Blocking essential storage may prevent account, cart, or checkout functions from working.

11. Access, correction, and other requests

Subject to the PDPA and applicable exceptions, you may ask for access to personal data we hold about you and information about how it was used or disclosed during the preceding year. You may also ask us to correct an error or omission, withdraw consent, or raise a complaint.

Send requests to support@asiabis.com with the subject “Privacy request”. We may verify your identity and authority, ask for details needed to locate the data, charge a reasonable fee where permitted, or decline a request where an exception applies. We will respond within the period required by applicable law.

12. Children and other websites

AsiaBIS services are intended for business and professional users and are not directed to children under 18. Please do not submit a child’s personal data unless it is necessary for a lawful assignment and you have appropriate authority.

Our website may link to registries, authorities, sources, payment services, and other third parties. Their privacy practices are governed by their own notices, and we are not responsible for independent sites.

13. Changes and contact

We may update this policy as our services or legal obligations change. We will publish the revised version and effective date here and provide additional notice where a material change requires it.