PRIVACY NOTICE

Updated 9 October 2026

Summary of how we use your data

Keppel Data Centres uses your personal data when you interact with our websites, mobile applications, services, business operations or when you visit our premises and facilities.
Data is shared with other Keppel Group entities, service providers, payment processors, and regulatory bodies as necessary for our business operations.
Where we rely on your consent, such as for direct marketing communications, you can withdraw this consent at any time.

What does this notice cover?

This privacy notice sets out how Keppel Data Centres ("Keppel", "we" or "us") uses your personal data when you interact with our websites, mobile applications, services, business operations or when you visit our offices. This privacy notice is provided in a layered format so you can click through to the specific areas set out below.

IMPORTANT INFORMATION AND WHO WE ARE
WHAT PERSONAL DATA WE COLLECT
METHODS OF COLLECTION
HOW WE USE YOUR PERSONAL DATA
WHO WE DISCLOSE YOUR PERSONAL DATA TO
INTERNATIONAL TRANSFERS
RETENTION OF PERSONAL DATA
YOUR LEGAL RIGHTS
CONTACT DETAILS
CHANGES TO THE PRIVACY NOTICE AND YOUR DUTY TO INFORM US OF CHANGES
COOKIES AND OTHER TRACKING TECHNOLOGIES

1. IMPORTANT INFORMATION AND WHO WE ARE

This privacy notice is issued on behalf of Keppel Data Centres, which comprises the following entities:

Keppel Data Centres Holding Pte. Ltd.
Keppel DC Singapore 1 Ltd
Keppel DC Singapore 2 Pte Ltd
Keppel DCS3 Services Pte Ltd
Keppel DC Malaysia 1 Sdn Bhd
Keppel DC Services Sdn Bhd
Keppel DC Services Australia Pty Ltd

When we mention “Keppel”, “we”, “us” or “our” in this privacy notice, we are referring to the relevant entity forming part of Keppel Data Centres responsible for processing your data.

Keppel Data Centres is part of the Keppel Group, which comprises Keppel Ltd. and its subsidiaries and affiliates.

2. WHAT PERSONAL DATA WE COLLECT

Personal data means any information, whether true or not, about an individual who can be identified from such information alone, or from such information and other information which we have or are likely to have.

By agreeing to this privacy notice, you warrant that all personal data provided by you is accurate, complete, and up to date.

Unless permitted under the PDPA or other applicable laws, we collect and process personal data about you only with your consent when you interact with us and our websites, mobile applications, and when you obtain goods and services from us. This includes:

Identity Data includes name, date of birth, gender, national identification number or passport number, photographs, video or voice recordings, biometric data, vehicle registration numbers, employment history, education background, and income levels.
Contact Data includes mailing address, email address and telephone numbers.
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
Usage Data includes information about how you interact with and use our website or apps, products and services, including any communications you have with us via phone, email, face-to-face communications or otherwise.
Marketing Preferences includes your marketing preferences including any consent you have given us.

We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals’ Usage Data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.

Sometimes, we receive information about you from third parties. In particular: vendors, property or recruitment agents, investors, lawyers, accountants, other advisers and consultants, fund administrators, customers, intermediaries, online platforms, brokers and other business partners, identity verification services, and credit reference agencies, sources designed to detect and prevent fraud. We may also collect Personal Data through publicly available sources such as public websites or other publicly accessible directories and sources, including bankruptcy registers, tax authorities, governmental agencies and departments, sanctions screening databases, and regulatory authorities.

3. METHODS OF COLLECTION

Personal data may be collected from you in the following ways:

when you disclose personal data to us or submit forms, including by way of registering for an account, on our website(s), mobile application(s), an online portal, email, physical collection or other methods;
when you (or any person authorised by you) correspond(s) with our employees, suppliers, service providers (including professional advisors), sub-contractors (including any delivery personnel), customer service or marketing representatives via telephone, letter, email, face-to-face meeting etc.;
when you subscribe to our mailing lists or otherwise register your interest for any specific products or services;
when you respond to our promotions;
when you are referred to us from business partners, our corporate customers and other third parties;
when we obtain it from other entities within the Keppel Group;
when we lawfully seek information from third parties about you in connection with the products and services you have applied for;
during recordings of calls when telephone contact is made (for example, via customer service hotlines) which may be recorded for training, quality control, business and/or other lawful purposes;
during CCTV recordings, recordings through body-worn cameras during bag/vehicle checks, and through building access controls when a person visits our offices and facilities;
when you generate data or link data to your account, e.g. account synchronization, sign-up authentication etc.;
when you submit a job application;
automatically, when you visit our websites and other websites which we own or manage, using technologies such as cookies (either by us or a third party), contracts with us or with any third parties via our websites, or downloads and/or uses any of our application programs and/or software; and/or
when you (or any person authorised by you) provide us with personal data for any other reason.

4. HOW WE USE YOUR PERSONAL DATA

The purposes for which we and/or our service providers may collect, use, disclose, process, manage and/or transfer your personal data are as follows:

to provide you with our services (including to fulfil our obligations under our contract with you for such services);
to receive services (for example where a supplier is providing us with facilities management or other outsourced services, we will process personal data about those individuals that are providing services to us);
to facilitate the set-up, operation, maintenance and/or administration of such services or any account you may have with us, and provide related services and support (including for billing purposes or to process orders and applications for such services);
to allow you to participate in interactive features of our products and services;
to maintain, test, keep secure, and/or operate our (or any of our service provider’s) systems required for the provision of any of our services, or in connection with the web site(s) or mobile application(s), including ensuring the effective operation of software and IT services procured by us (including disaster recovery);
to assess, process, respond or otherwise handle your enquiries, requests, feedback, questions, instructions or complaints and for other customer-care related activities;
to measure or understand the effectiveness of our advertising and marketing;
to verify your identity, conduct due diligence checks if you are a prospective user or a user of our data centres and for any reasonable purpose for the servicing of your agreement, occupation or in good management of our data centres by us or any of our authorised service providers and to process orders and applications for services;
to carry out credit checks, for the preparation of credit reports and/or for the evaluation of creditworthiness;
to communicate with you changes and development to our policies, terms and conditions and other administrative information;
where we have obtained your consent, to market, promote (including offer to sell you any other products or services), improve and/or further the provision of services to you by us, or by our affiliates, partners, contractors or third-party service providers;
to share with selected related entities, affiliates and business partners (including entities within the Keppel Group) to enable them to conduct market research, planning, market and/or customer surveys, trend analyses and/or other related forms of data analytics in order to better tailor offers, promotions and/or other direct marketing to you;
to conduct market research, planning, market surveys, trend analyses and/or other related forms of data analytics;
to conduct training and/or improve our service quality and/or marketing and advertising strategies;
to improve your user experience and/or our product and service delivery to you;
to protect the security and safety of our offices and facilities and ensure occupational safety and the safety of other persons present in our offices and facilities and on our premises;
to assure security, including cybersecurity, access controls, network management and accessibility;
to establish, enhance and/or further improve payment and/or technical systems, including the interface or interaction of such payment and/or technical systems with the payment and/or technical systems of other financial institutions, merchants, payment organisations, suppliers and/or sub-contractors;
to seek professional advice, including legal advice, or enforce your obligations or enforce our rights, including, without limitation, collection of amounts owed by you or by any other person, or defending our rights, the rights of any related corporations, partners, contractors and/or third party service providers;
to conduct investigations or take action in relation to bad debts, crime and fraud prevention, detection of prosecution, risk management, violation of our terms and conditions for services, or to prevent any individual from harm, illegal or unlawful activities;
if you submit an application to us as a candidate for employment:
- to process your application including pre-recruitment checks;
- to provide or to obtain references for background screening/vetting;
- to collect information about your suitability for the position applied for; and
- for any other purposes related to the aforesaid;
to comply with regulatory, compliance, or legal obligations and/or requirements;
for anti-money laundering, prevention of terrorist financing, and identity verification purposes;
as permitted or required by applicable law, regulations, industry codes or market rules; and
for any other purposes necessary, ancillary or consequential to the above specified purposes.

5. WHO WE DISCLOSE YOUR PERSONAL DATA TO

We may share your personal data where necessary with the parties set out below for the purposes listed in this notice:

other entities within the Keppel Group;
our joint venture/alliance partners;
external service providers, contractors and third parties, for the purpose of providing our services to you;
other business partners and vendors we work with to deliver products and services, including but not limited to courier services companies and other entities within the delivery chain;
banks, credit card companies, payment vendors and other entities within the payment processing chain for the purposes of processing payment;
debt collection agencies;
credit information companies and credit bureaus;
government bodies, including any ministry, department, agency (including law enforcement agencies), or organ of state, judicial or quasi-judicial body or disciplinary, arbitral or mediatory body, or any other statutory body;
advisors, including auditors, accountants and lawyers who advise us;
for job applications, academic institutions, recruiters, screening check providers, health service providers, professional and trade associations, law enforcement agencies, recruitment analytics and diversity research providers, referees and your current and previous employers;
any other party to whom you authorise us to disclose personal data to;
any data intermediaries; and
the prospective seller or buyer of our business or assets in the event that we sell or buy any business assets.

6. INTERNATIONAL TRANSFERS

In general, your data will be stored in Singapore. We may, in the course of providing services to you, disclose, transfer, store, process and/or deal with your personal data outside Singapore. In doing so, we will comply with all applicable data protection and privacy laws and take steps to ensure that your personal data continues to receive a standard of protection that is at least comparable to that provided under the PDPA.

7. RETENTION OF PERSONAL DATA

We will retain personal data for as long as it is necessary to fulfil the purpose for which it was collected, our legal or business purposes, or as required by relevant laws. We will usually keep your personal data for up to seven (7) years to ensure that any contractual disputes can be addressed. If you opt out or withdraw your consent to marketing, we will remove you from our marketing database.

8. YOUR LEGAL RIGHTS

You may have a number of rights under data protection laws in relation to your personal data. For example, you may have some or all of the following rights to:

Request access to your personal data (commonly known as a “subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data in certain circumstances. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object.
Object any time to the processing of your personal data for direct marketing purposes.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right typically only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in one of the following scenarios:
- If you want us to establish the data’s accuracy;
- Where our use of the data is unlawful but you do not want us to erase it;
- Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
- You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Complain to Keppel (using the contact details set out below).

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep.

To exercise your other rights or if you do not have an account with us, you may contact us via the details set out in paragraph 9 of the notice. We will respond to your requests as soon as reasonably possible, an in any event no later than any time period prescribed by applicable data protection laws.

9. CONTACT DETAILS

If you have any enquiries, comments or suggestions about how we collect, use or disclose your personal data or this policy, would like to exercise your rights, or would like to receive information about your personal data which we retain, please contact our Data Protection Officer by email at dpo@keppel.com. We will respond to your update and/or correct request as soon as reasonably possible, and in any event no later than within ten (10) days of receiving such update and/or correct request. Subject to the Act, we will respond to access requests within a reasonable time (and in any event no later than within thirty (30) days of receiving such access requests.

10. CHANGES TO THE PRIVACY NOTICE AND YOUR DUTY TO INFORM US OF CHANGES

We will amend this notice from time to time, and the updated versions will be posted on our website and/or mobile application and date stamped so that you are aware of when the notice was last updated. Please check back frequently to see any updates or changes to this notice. If we make any material changes to this notice, we will provide notice, for example, by way of a banner on our website. Subject to applicable laws, the English version of this notice will prevail over any version of this notice in another language.

11. COOKIES AND OTHER TRACKING TECHNOLOGIES

Our website(s) and mobile application(s) use cookies to monitor browsing preferences and help analyse data about webpage traffic in order to make website improvements based on your needs and to enhance website efficiency. We generally use such information for statistical analysis but may use it for other reasons in aggregated form or where we are not aware of your identity.

When you visit our website(s) and/or mobile application(s), our servers will automatically record information that is sent whenever you visit a website or mobile application. This data may include: (a) your computer’s IP address; (b) your browser type; (c) the webpage you were visiting before you visited the relevant website; (d) the pages within the website or mobile application which you visit; and/or (e) the time spent on such pages, item and information searched for in the website or mobile application, access time and dates, and other statistics.

12. THIRD PARTY LINKS

Our website(s) and mobile application(s) may contain links to other websites which are owned or operated by third parties, and which are not under our control. We are not responsible for the content on any such website, or the consequences of accessing or using any such website (including the protection and privacy of any information which you provide whilst visiting such sites) and such sites are not governed by this statement. You agree that your access to or use of such websites is entirely at your own risk. When visiting these third-party websites, you should read their privacy policies which will apply to your use of the websites.

Privacy Notice