We ask for information only where it is needed to trade with you safely and lawfully. We keep it confidential, and we do not sell it.

Legasea Fuels (UEN 202534846Z) is committed to protecting the personal data of our clients and their representatives in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This policy explains what we collect, why we collect it, and how we handle it.

By submitting information to us, whether through our website, our client onboarding form, or in the course of business, you consent to the practices described below.

What we collect

Company information: legal and trading name, registration/UEN number, country of incorporation, addresses, nature of business, and tax identification number.

Contact information: names, designations, telephone numbers and email addresses of your main, finance and operations contacts.

Ownership information: names, nationalities, positions and residential addresses of directors and ultimate beneficial owners.

Banking information: bank name, account details, SWIFT/BIC and currency.

Compliance information: regulatory status, politically exposed person declarations, sanctions declarations and source of funds.

Supporting documents: certificate of incorporation, ACRA/registry extracts, bank confirmation letters, regulatory licences and company stamp.

Why we collect it

We collect this information solely to:

— Carry out client due diligence (KYC) and verify who we are trading with

— Meet our legal, regulatory and anti-money-laundering obligations

— Establish and administer our trading relationship with you

— Process orders, deliveries, invoicing and payment

— Communicate with you about your enquiries and transactions

How it is stored

Information submitted through our client onboarding form is collected via Cognito Forms, a secure third-party form provider, and transferred to Legasea Fuels' own Microsoft OneDrive storage. Each client's submission is filed in its own folder, accessible only to authorised Legasea Fuels personnel.

Our website does not store your submitted information. We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or loss.

Who we share it with

We do not sell your personal data, and we do not share it for marketing purposes.

We may disclose information only where necessary: to our service providers who help us operate (such as our form and storage providers), to banks and counterparties where required to complete a transaction, to professional advisers, or where required by law, regulation, or a competent authority.

Your rights

Under the PDPA, you may:

— Request access to the personal data we hold about you

— Request correction of any inaccurate or incomplete data

— Withdraw consent to our use of your data, subject to legal and contractual restrictions

— Ask how your personal data has been used or disclosed in the past year

Please note that withdrawing consent may mean we can no longer trade with you, as we cannot meet our due diligence obligations without this information.