Terms & Conditions

We are committed to providing exceptional Data Protection Officer (DPO)-as-a-Service to our clients in Singapore. To demonstrate our dedication to delivering high-quality services and ensuring compliance with data protection regulations, we offer a money back guarantee under the following terms and conditions:

• Refund Scope: The Money-Back Guarantee applies strictly to the service fee associated with the current year’s engagement, regardless of the length of the client’s engagement with us.
• Minimum Engagement Period: In order to be eligible for a refund, the client must have progressed in the engagement for at least six months, which may include the previous year’s engagement.
• Reportable Data Breach: The client must experience a data breach that meets the criteria of a notifiable data breach as defined by the Personal Data Protection Act (PDPA) Singapore. The breach must be promptly reported to the Personal Data Protection Commission (PDPC) and affected individuals within 72 hours, and where applicable, relevant authorities such as the Singapore Police Force (SPF), Cyber Security Agency (CSA), and relevant regulatory bodies.
• Missed Process or Insufficient Advisory: The data breach must be directly attributable to our failure to fulfill a specific process or advisory obligation, resulting in the breach. This includes situations where our advice or recommendations were implemented yet were insufficient, leading to the breach.
• Rejection of Recommendations: In instances where the client’s management rejects the best practices, process modifications, or security technology adoption suggestions put forth by us, leading to inadequate technical, administrative or physical measures that resulted in the data breach, the client will not be eligible for the money back guarantee.
• Written Notice: The client must inform us in writing, within 24 hours of the occurrence of the breach, of their intention to enact the money back guarantee clause.
• Continuity of Services: Should a client opt to invoke the Money-Back Guarantee, we will continue to serve and assist them until the end of our engagement, or upon acknowledgement of receipt of the refunded DPOAAS service fee, whichever is earlier. This continuation of service before termination, is inclusive of support for breach reporting and participating in remediation activities.
• Non-Invocation of Money Back Guarantee: If the client chooses not to invoke the money back guarantee clause, we will continue to fulfill our obligations as the outsourced DPO and provide full support in reporting the breach to the authorities and assisting with remediation efforts.
• Refund Processing Timeline: Upon receipt of a written request for a refund and subject to the validation of the eligibility for the Money-Back Guarantee as outlined in our terms and conditions, we shall process the corresponding refund to the client within a period of 90 days from the receipt of the request, but no earlier than 60 days from the same date. This timeline is necessary to allow our internal team adequate time to conduct a thorough and comprehensive investigation into the client’s claims, assess the extent of our liability, and determine the validity of the Money-Back Guarantee invocation. It is our commitment to ensure a transparent, fair, and methodical evaluation process to safeguard the interests of all parties involved.

The money back guarantee is subject to a thorough investigation and assessment by our internal team. We reserve the right to validate the client’s claims and determine the legitimacy and extent of our liability in accordance with the outlined terms and conditions.