Personal Data Protection Statement

PERSONAL DATA PROTECTION ACT (2012) (“PDPA”)

Thank you for your support of the Hyflux group of entities (being Hyflux Ltd, its subsidiaries and associated companies) (the “Hyflux Group”).

As you may know, the Singapore Government passed a bill introducing the new Personal Data Protection Act 2012 (the “PDPA”) on 15 October 2012. The PDPA entered into force on 2 January 2013, allowing for a transition period of around twelve (12) months for the Do Not Call registry provisions to come into effect on 2 January 2014. All organizations must comply with their obligations under the PDPA when all the provisions of the PDPA come into effect on 2 July 2014.

Further, as mentioned above, the “Do-not-call” registry (“DNC”)[1] takes effect on 2 January 2014. This means that if a customer registers his/her telephone number at the DNC, we may not contact the customer via that telephone number unless he/she has given us the specific consent to be contacted at that number.

To comply with the PDPA, we would like to seek your consent to allow us to contact you using your contact details currently registered in our database (including your email address and contact number, where provided). This will enable us to keep you updated on the latest promotions, events and news-related messages when the PDPA takes effect.