Terrascope Privacy Statement

 

What does this Privacy Statement cover?

Personal Data Terrascope Collects

Cookies and Similar Technologies

How Terrascope Uses Your Personal Data

When We Share Your Personal Data

Cross-Border Transfer

Your Choices and Rights

Retention of Your Personal Data

Children

Links to Other Websites

Requests & Clarifications

Updates and Changes to this Privacy Statement

Other Jurisdictions

Additional Information for California Residents

 

What does this Privacy Statement cover?

This Privacy Statement describes how Terrascope and our affiliates worldwide (collectively, “Terrascope”, “we,” “us,” “our”) will make use of your personal data: (i) when you use our products and services; (ii) when you interact with us by means other than a Terrascope website or app, for example, in person, by telephone, or at a trade show or training; and (iii) received from third parties in particular our customers, distributors, suppliers, vendors, and other business partners (collectively “Business Partners”). 

However, different Terrascope websites, apps, products, and services have different purposes and features. If additional or different disclosures are required for a specific Terrascope website, app, product, or service, then we provide those disclosures (“Specific Privacy Statements”) separately on, or with, the relevant website, app, product, or service. Each such specific privacy disclosure, policy, or statement supplements and amends this Privacy Statement.

This Privacy Statement also describes your data protection rights, including the right to object to some of the processing which we carry out, as available under applicable laws. More information about your rights, and how to exercise them, is set out in the “Your Choices and Rights” section.

Your personal data is controlled by Terrascope Pte. Ltd. The list of the relevant data controllers and their contact details can be found in the table below:

Data Controller 

Contact Details

If you:

  1. apply to, 
  2. provide your services to, or purchase products and services from, or
  3. visit the web site of the following companies, that company will be the data controller of your personal data.

Terrascope Pte. Ltd.

Registered Office:

7 Straits View, Marina One East Tower #20-01, Singapore 018936

Personal Data Terrascope Collects

Terrascope collects and processes the following types of personal data about you:

Information you provide when you interact with us and our websites or purchase goods and services from us:

  • contact information, such as your name, company name, job title, address, email address, and phone number;
  • additional information about you to help us get to know you better, such as your gender, age, date of birth, nationality, information about how you use our products;
  • financial information needed to process sales and purchases, such as bank account numbers or credit card details, or company information such as tax identification numbers;
  • log-in information, including, if applicable, social media account information for login purposes; and
  • comments, questions, opinions, requests you may make

Information received from Business Partners and other third parties:

  • Terrascope collects your personal data through our Business Partners. This information may include contact information, such as name, company name, job title, address, email address, phone number, education, purchase and sale information.
  • Terrascope may also obtain your personal data from other third-party sources, including publicly and commercially available sources. 

Information automatically gathered from your device when you interact with us and our websites:

  • Terrascope collects technical information about your device, such as device and advertising identifiers, browser type, pages you view and the general manner while navigating the site, location data, Internet Protocol address, operating system, date and time of your visit and certain server logs for system administration purposes. Terrascope collects this information automatically from your device and web browser through cookies and similar technologies. 

 

Cookies and Similar Technologies

A "cookie" is a file of information placed on your device when you visit a website. Cookies and similar technologies can enhance your user experience by saving your preferences and personalising your online experience.

Certain jurisdictions require that your consent is provided before the use of certain cookies when you visit Terrascope websites. If you access a Terrascope website from one of these jurisdictions, you will be presented with information regarding your options via a cookie consent banner, including the option to accept or reject such cookies. You will be able to change such settings on the cookie consent banner.

There are certain cookies which are strictly necessary for the function and performance of our website which cannot be rejected.

Please refer to our Cookie Policy for more information here.

How Terrascope Uses Your Personal Data

If you are based in the EU or the UK, we are required to disclose the legal basis for processing your personal data as set out in the table below. In this regard, we have carried out balancing tests for all the data processing we carry out on the basis of our legitimate interests, which we have described below. You can obtain information on any of our balancing tests by contacting us using the details set out later in this Privacy Statement.

If you are based in Singapore you consent to each of the purposes for processing your personal data as set out below.

We will use your personal data in the following ways:

Purpose

Legal Basis

Develop and manage our relationships with you and our Business Partners. This includes: (i) delivering our contracted services to you, or carrying out transactions that you have requested; (ii) providing information about Terrascope  products, services, transactions, and advertisements, that may be of interest to you; (iii) providing you with a more consistent experience in interacting with Terrascope, including by learning more about you and how you use and interact with Terrascope  websites, apps, products, and services; and (iv) planning, managing, and performing under our contractual relationships with you;

We have a legitimate interest in managing our business and providing services to our clients. When a contractual relationship exists, in order to fulfil our contractual obligations to you.



Provide Traceability in the Supply Chain. Terrascope is committed to empowering our customers and producers by providing traceability in the supply chain. Traceability allows for socially and environmentally responsible sourcing in the supply chain of our products.

We have a legitimate interest in providing traceability in the supply chain.




Communicate with you. This includes: (i) informing you of Terrascope  products, services, events and promotional activities that you requested or may be of interest to you; (ii) providing information about relevant Terrascope  products, services, and transactions, including, for example, pricing information, technical data, invoice, shipping, or production information, warranty or recall information, or information about product or service improvements; (iii) responding to questions or inquiries that you make, including customer service requests; and (iv) inviting you to participate in, or informing you of the results of, customer satisfaction or market research surveys.

We have a legitimate interest in managing our business and promoting our services to our clients. Where relevant we may also rely on your consent.




Provide and improve our websites, apps, products, and services. This includes: (i) customising them to your preferences or interests, making them more compatible with your technology, or otherwise making them easier to use; (ii) maintaining the security of and otherwise protecting them; (iii) and developing new websites, apps, products and services; (iv) anonymising your data for creating works and materials that are derived from, or based on, your data in an anonymised form; (v) utilising your data in an anonymised and aggregated form to analyse the Content and/or its use.

We have a legitimate interest in operating our websites, apps, providing our products and services and improving their operation. 



Manage office visitors. If you visit a Terrascope office, we may collect personal data about you, including, but not limited to, your title, name, address, phone number, email address, business or company affiliation, government identification (driver’s licence, passport), and other details you provide. We process this personal data for a variety of purposes, including to generally manage your visit, to verify your identity, to provide access to our facilities and systems, for security and other safety purposes, to communicate with you regarding your visit, to provide information we believe may be of interest to you, including regarding our services, for purposes disclosed at the time a visitor provides Personal data or otherwise with consent.

We have a legitimate interest in verifying your identity and ensuring the security of our office.




Address legal issues. This includes: (i) complying with our obligations to retain certain business records for defined retention periods; (ii) establishing, exercising, or defending legal claims; (iii) complying with laws, regulations, court orders, or other legal process; (iv) detecting, preventing, and responding to fraud, intellectual property infringement, violation of our contracts or agreements, violations of law, or other misuse of Terrascope  websites, apps, products or services; and (v) protecting Terrascope’s rights or property, or yours or others’ health, safety, welfare, rights, or property.

We have a legal obligation to address legal issues. 

Careers. You may submit your resume and other information to apply for a job with us either through our sites or via email to an official Terrascope email address. We use the information you submit to receive, review and reply to your application, to check your references, to assess your suitability for the opportunity you applied for, to facilitate the interview/recruiting process, to prepare an offer letter if your application is successful and to suggest other suitable opportunities. 

We need to collect your personal data to move forward with your application.




AI training. This includes anonymising your personal data to improve our products and services, including but not limited to improving our machine learning and AI models.

We have a legitimate interest in improving our services and the underlying technology.

 

We will indicate to you at the point of collection whether the provision of personal data is mandatory – in this case,  if the relevant personal data is not provided, then we will not be able to provide our website or services to you. All other provision of your personal data is optional – in this case, there will be no impact on the provision of our website or services if you do not provide us with the requested personal data. 

When We Share Your Personal Data

We may disclose your personal data to the following categories of recipients (in all cases, only when necessary to fulfil their functions): 

Category of Recipient

Why?

With other Terrascope entities

We share your personal data with other Terrascope entities, including those in different countries. When we do so, these other Terrascope entities will use your personal data in a manner consistent with this Privacy Statement, any applicable Specific Privacy Statements, and all applicable privacy and data protection laws.

Third Party Service Providers

We also share your personal data with third parties we hire to perform support services for us. These third parties are required to use the personal data we share with them only to perform services on our behalf and to treat your personal data in compliance with all applicable privacy and data protection laws.

Business Partners

We will share your personal data with third parties who partner with us to provide products and services to our customers, such as distributors or resellers in our commercial operations or even with non-governmental organisations who share in our commitment to traceability and sustainability. If we do so, we require these third parties to use your personal data in a manner consistent with this Privacy Statement, any applicable Specific Privacy Statements, and all applicable privacy and data protection laws.

Law enforcement, fraud prevention agencies

We will also share your personal data with third parties when we have a good faith belief that disclosure is necessary: (i) to comply with a law, regulation, court order, or other legal process; (ii) to detect, prevent, and respond to fraud, intellectual property infringement, violation of our contracts or agreements, violation of law, or other misuse of Terrascope websites, apps, products or services; (iii) to protect Terrascope’s rights or property or yours or others’ health, safety, welfare, rights, or property; or (iv) under similar circumstances. If such an event occurs, we will take appropriate steps to protect your personal data.

Prospective Buyer/Seller

In the event that our business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective partner or purchaser’s adviser and will be passed to the new partners or owners of the business.

 

Cross-Border Transfer

Your personal data may be stored and processed in any country where Terrascope has offices or Data Centres, hosted services or in which we engage external service providers. Your personal data may be transferred to countries outside your country of residence which may have different data protection and data processing laws and obligations than those in your country in which your personal data was collected. Any such transfer by Terrascope shall take place only in accordance with all applicable data protection legislation, but please be aware that the laws and practices relating to the protection of personal data are likely to be different, and in some cases may be weaker than those within your home jurisdiction. Where these locations do not provide an adequate level of data protection, we ensure appropriate safeguards are in place to protect the transfer of your personal data to these countries. 

If you are based in the EU or in the UK, where we transfer your personal data outside the EEA to a country which is not subject to an adequacy decision by the EU Commission or an adequacy regulation by the UK Information Commissioner’s Office, this is done on the basis that it is necessary for the performance of our contract with you, or that the transfer is subject to model contracts for the transfer of personal data to third countries (i.e. the standard contractual clauses) approved by the EU Commission or the UK Information Commissioner’s Office, as appropriate. A copy of the relevant mechanism can be provided for your review on request by contacting us at using the details set out below. 

Your Choices and Rights

To the extent available under applicable laws, you have the following rights:

Right

Summary

The right of access

Enables you to receive a copy of your personal data

The right to rectification 

Enables you to correct any inaccurate or incomplete personal data we hold about you

The right to erasure 

Enables you to ask us to delete your personal data in certain circumstances

The right to restrict processing

Enables you to ask us to halt the processing of your personal data in certain circumstances

The right to object 

Enables you to object to us processing your personal data on the basis of our legitimate interests (or those of a third party), including processing for direct marketing purposes or profiling for purposes of direct marketing, or where we are performing a task in the public interest - your objection will be upheld, and we will cease processing your personal data, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defence of legal claims that may be brought by or against us.

The right to data portability 

Enables you to request us to transmit personal data that you have provided to us, to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party, where technically feasible

<FRANCE ONLY>

The right to instruct us regarding the use of your personal data after your death

<FRANCE ONLY>

Enables you to instruct us on the processing (retention, deletion, and disclosure) of your personal data after your death. You can change or revoke such instructions at any time.




These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete personal data which we are required by law or have compelling legitimate interests to keep. 

If you wish to exercise any of these rights, please contact us at the contact details set out below. 

Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We may however have other legal grounds for processing your data for other purposes, such as those set out above. 

In some cases, and to the extent permitted by applicable laws, we may be able to send you direct marketing without your consent, where we rely on our legitimate interests.  You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, or by contacting us using the details set out below.

If you have unresolved concerns, you have the right to complain to a data protection authority in the country that you reside in or, the country of your place of work or the country where the alleged infringement took place.

Retention of Your Personal Data

Where we process registration data, we do this for as long as you are an active user of our products and services and for 7 years after this.

Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period of 30 days after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future.

Where we process personal data for site security purposes, we retain it for 13 months. 

Where we process personal data in connection with performing a contract, we keep the data for 7 years from your last interaction with us.   

Children

We do not collect and process the personal data of children under the relevant minimum age under applicable local legal requirements except for specific services and upon the consent of the holder of parental responsibility.

Links to Other Websites

We have links to other apps, plugins, or websites that are not owned or controlled by Terrascope. We are not responsible for the security or privacy of any information collected by such apps or websites. You should exercise caution and review the privacy statements applicable to the third-party websites and services you use. The use of online tracking mechanisms by those third-party websites and services is subject to those third parties' own privacy policies, and not this Privacy Statement.

Requests & Clarifications

If you need any clarifications or have any requests with regards to personal data we hold about you, please direct your queries to our Data Privacy team at dpo@terrascope.com.

Our representative for the purposes of the EU GDPR is Lemmy J. Lim, Senior Counsel.

Our representative for the purposes of the UK GDPR is Bird & Bird GDPR Representative Services UK, registered at:

12 New Fetter Lane, London
EC4A 1JP,
United Kingdom.

Our representative in the United Kingdom can be contacted for data and privacy matters at UKrepresentative.Terrascope@twobirds.com.

Updates and Changes to this Privacy Statement

We will amend this Privacy Statement from time to time and the updated versions will be posted on our web sites and date stamped so you are aware of when the Privacy Statement was last updated. Please check frequently to see any updates or changes to this Privacy Statement. Where required by applicable laws, or if we make any material changes to this Privacy Statement, we will provide notice including via e-mail notification. 

Other Jurisdictions

You may also have certain rights regarding the information we hold about you under other data protection and privacy laws. Please contact us at dpo@terrascope.com for more information.

 

Additional Information for California Residents

Your Rights

California residents may have, pursuant to the CCPA, the following rights with respect to their personal data with Terrascope, which apply differently in different circumstances: right to access your information, right to portability of data, and the right to deletion. Terrascope does not and will not sell personal data (but if we did so, you may have the right to opt-out of such sales of your personal data). Most of these rights are not absolute. We will not discriminate against you or deny products or services from you for exercising any or all of these rights. For more information or to exercise any of these rights, you may contact us at dpo@terrascope.com.

Or you may write to us at:

Terrascope Pte. Ltd.
7 Straits View, Marina One East Tower #20-01,
Singapore 018936
 

Our Data Collection Activities in California

The below table indicates examples of some of the categories of personal data we may be collecting from California residents.

Section

Category of personal information

We have collected such personal information to use for the following business or commercial purposes:

We have collected such personal information from the following categories of sources:

We have shared such personal information with the following categories of third parties:

1

Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

Clients/job applicants/other third parties

To manage our business operations and administer our client relationships.

To provide relevant marketing to you (e.g., information about events or services that may be of interest). 

To address compliance and legal obligations (e.g., checking identity of new clients, prevention of fraud/money laundering).

To consider individuals for employment and contractor opportunities and manage on-boarding procedures.

 

Employees
Administering and providing compensation, benefits, and other work-related allowances.

Administering the workforce (e.g. managing work activities, performance evaluations and promotions, preparing corporate organisation charts, managing entity and intra-entity staffing and team management, managing and monitoring business travel, carrying out workforce analysis, talent management and career development, managing employee leave, succession planning, providing employment references, administering ethics and compliance training, facilitating and providing services for the re-location and movement of employees and their families locally and internationally).

Complying with employment law obligations.

Communicating with employees and their designated contacts in the event of an emergency.

Responding to legal and/or regulatory requests for information.

Complying with corporate financial responsibilities (audit, accounting and tax requirements).

Managing corporate information technology (e.g., IT support, corporate directory, IT security).

Conducting security screenings (to the extent permitted by law).

From the data subject, our affiliates, counterparties to transactions or disputes with the data subjects, employers, agents or professional advisers authorised to disclose data on behalf of the data subject and from other publicly available or subscription-based sources.

Our affiliates, suppliers, and service providers where necessary to perform functions on our behalf (e.g., infrastructure/IT services providers, providers of services relating to client intake, global travel, finance, customer relationship management, business analytics and marketing and conference and event hosting).

Financial institutions (for invoicing and payment).

Corporate purchasers - as part of any sale of company assets, transition of service to another provider or in the event of insolvency, bankruptcy or

Mandatory disclosures and legal claims (e.g., to comply with any subpoena, court order or other legal process or to comply with any regulatory, governmental or other legally binding request).

2

Any categories of personal information described in subdivision (e) of Section 1798.80: “Personal information” means any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. “Personal information” does not include publicly available information that is lawfully made available to the general public from federal, state, or local government records.”

See section 1 above.

See section 1 above.

See section 1 above.

3

Characteristics of protected classifications under California or federal law (classes include race, colour, religion, national origin, sex (including pregnancy, childbirth, and related medical conditions), disability, leave, age, citizenship status, genetic information, ancestry, breastfeeding, marital status, gender identity, gender expression, sexual orientation, medical condition including AIDS/HIV, political activities and affiliations, military and veteran status, and status as a victim of domestic violence, assault, or stalking).

Solely as strictly necessary for the purposes described in section 1 above regarding employee data and as otherwise required in connection with managing the employment relationship (e.g., sick leave, sick pay, accidents at work, other employment related claims, accommodating disability within the workplace, maternity leave, etc.).

Solely to the extent required to comply with the Company’s legal or other best practice obligations (e.g., AML, equality laws, monitoring diversity and inclusion, etc.).

See section 1 above.

Our affiliates, suppliers and service providers where necessary to perform functions on our behalf.

Mandatory disclosures and legal claims (e.g., to comply with any subpoena, court order or other legal process or to comply with any regulatory, governmental or other legally binding request).

4

Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

See section 1 above.

See section 1 above.

See section 1 above.

5

Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.

To make our website more intuitive and easy to use. 

To protect the security and effective functioning of our website.

Via company websites.

1) To our service providers to the extent necessary for the provision of IT services on our behalf.

2) Our affiliates.

6

Audio, electronic, visual, thermal, olfactory, or similar information.

Audio/visual - where required for legal/regulatory reasons.

Conference calls and video conferences with clients and other third parties.

1) Our affiliates.

2) To our service providers to the extent necessary for the provision of IT services on our behalf.

Mandatory disclosures and legal claims (e.g. to comply with any subpoena, court order or other legal process or to comply with any regulatory, governmental or other legally binding request).

7

Professional or employment-related information.

See section 1 above in relation to employees and job applicants.

See section 1 above in relation to employees and job applicants.

See section 1 above in relation to employees and job applicants.

8

Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99).

See section 1 above in relation to employees and job applicants.

See section 1 above in relation to employees and job applicants.

See section 1 above in relation to employees and job applicants.


Last updated: 05/2024