Personal Data Policy
Corporate Intelligence & Security Management Pte Ltd (“CISM”) is committed to responsible handling and protection of personal data in accordance with applicable Singapore data-protection requirements.
Purpose
This policy explains how CISM collects, uses, discloses, protects and retains personal data in connection with its business operations, services, employment and recruitment activities.
Collection, Use & Disclosure
CISM collects personal data that is reasonably required for identified business purposes, including operational services, client engagement, employment administration, recruitment, security operations and applicable legal or regulatory requirements.
Personal data may be disclosed only where relevant to the stated purpose, including to authorised CISM personnel, service providers supporting the relevant process, client representatives where legitimately required, and public or regulatory authorities where required or permitted.
Recruitment & Job Applicant Data
CISM collects applicant information for recruitment and employment-related purposes, including assessing suitability for positions, verifying relevant security qualifications and licences, assessing applicable operational, integrity and medical-fitness requirements, communicating with applicants, and administering the recruitment process.
During the initial online application, CISM uses a data-minimised approach. It does not request a full NRIC, FIN or MyKad number. Instead, where required for applicant matching and reference, CISM requests only the last three numerical digits plus checksum letter of an NRIC or FIN, or the last four numerical digits of a Malaysian MyKad. These fragments are not used as authentication credentials or proof of identity.
Full NRIC, FIN, MyKad, passport and work-pass copies are not requested through the initial online application. Identity verification documents may be requested later through a controlled recruitment or onboarding process where necessary.
Medical or physical-condition information, legal and financial suitability declarations and identity-related information are subject to additional access restrictions. A declaration or disclosure is assessed in context against legitimate role and operational requirements and is not treated as an automatic disqualification merely because information has been declared.
Protection of Personal Data
CISM applies administrative, technical and physical safeguards appropriate to the nature of the information and the systems in which it is handled.
Access is limited according to authorised business need. Recruitment users, decision-makers and technical administrators are not automatically entitled to unrestricted access to all applicant information merely because they participate in a recruitment or system-administration process.
Retention of Data
Personal data is retained only for as long as it remains necessary for the purpose for which it was collected or where continued retention is otherwise required or permitted.
For online recruitment applications, information relating to applicants who are not onboarded is retained for a maximum of three months from the application submission date and may be disposed of earlier once it is no longer required. This includes the application record and associated recruitment documents and signed records. A specific record may be retained for longer where CISM is required to do so by law or where an authorised legal hold applies.
Where an applicant is successfully onboarded, information that is necessary for the employment relationship transitions to the applicable employee record and is thereafter managed under the relevant employee-record retention requirements.
Access, Correction & Withdrawal of Consent
Individuals may contact CISM regarding requests for access to or correction of their personal data, or questions concerning how their personal data is handled.
Where processing relies on consent, an individual may contact CISM to withdraw that consent. CISM will explain any consequences that may arise from the withdrawal where relevant to the service, employment or recruitment process concerned.
Data Protection Officer
Corporate Intelligence & Security Management Pte Ltd
21 Bukit Batok Crescent
Wcega Tower, #20-84
Singapore 658065
Email: stewart.yong@cism.sg