Effective Date: [30/06/2025]
Servanan International Pte. Ltd. (“OK.com”, “we”, “us”, or “our”) are committed to protecting and respecting your privacy. This OK.com Privacy Policy (the “Policy”) describes how we collect, store, use, and share (“process”) information through the APP and Websites operated by us (“Services”).
Please note, our Services may involve integrations with websites and services managed by third parties. By interacting with these third parties, you are providing information directly to the third party and not us and subject to the third party’s privacy policy. Please read their privacy policies or other documentation. Our linking to another site or service doesn’t mean we endorse that third party.
- 1. Controllers of personal data
Servanan International Pte. Ltd. is data controller of personal data collected and used through the Services.
- 2. What personal data we collect and process
We collect information about you when you provide it to us, when you use our Services, and when other sources provide it to us, as further described below:
- Personal data you provide to us
We collect information about you when you register for an account, create or modify your profile, and use our Services, including:
- If you use the Services as an end user, we collect and process your following personal data:
- Identification data: telephone number, email, third-party App account, social media accounts, profile photo, name, sex, age, country of residence;
- Subscription information: email address and account of subscribed user, type of subscription;
- Customer service information: the Services also include our customer support, where you may choose to submit information regarding a problem you are experiencing with a Service;
- If you use the Services as a company user, we collect and process the following personal data:
- Identification data: name, telephone number of the company contact;
- Customer service information: the Services also include our customer support, where you may choose to submit information regarding a problem you are experiencing with a Service.
- Personal data from other sources
- Account information. When registering or signing in via third-party platforms (including Google, Apple and Facebook), we gather relevant account data according to your permission settings. The specific profile details obtained may differ across social networks, though typically encompass your email address and profile image.
- 3. How we use your personal data and our legal bases
For purposes of the UK GDPR and other applicable data protection laws, we rely on a number of legal bases to process your personal data. Please kindly note that this section only applies to jurisdictions where such legal bases for processing and corresponding disclosure is required.
- Legal Basis in General
We will only use your personal data when the applicable laws allow us to. Our legal basis for collecting and using the personal data described in this Policy depends on the personal data we collect and the specific context in which we collect the information:
- We need to perform a contract with you;
- You have given us consent to do so;
- In specific jurisdictions, processing your personal data is in our legitimate interests, including
- providing and maintaining our Services;
- detecting, preventing and enforcing violations of our Terms of Use including misuse of Services, fraud, abuse, and other trust and safety protocols; and
- protecting our legal rights and the rights of others.
If legitimate interest is not an available legal base in a particular jurisdiction, we will engage in the processing activities described above on a legal basis that is available in that particular jurisdiction;
- We need to comply with our legal obligations under the applicable laws.
- Purposes and Legal Basis for Processing
The purposes for which we process personal data, subject to applicable laws, and the legal basis on which we perform such processing, are as follows:
|
Purpose |
Type of Personal Data |
Legal Basis |
|
To provide you with functions related to user account management, such as account registration, account deletion, account login, and modification of account information |
Identification data Account information |
Contract |
|
To provide, facilitate and improve the Services you request |
Data that is generated as part of the Services you request Device information and permissions |
Contract |
|
To provide you with push notifications within the Services |
Account information Data that is generated as part of the Services you request Device information and permissions |
Contract and Consent |
|
To provide you with subscription service |
Subscription information |
Consent |
|
To provide you with marketing services |
Identification data Device information and permissions Data that is generated through your other actions when you use the Services and which is linked to your account Subscription information Social media information |
Consent |
|
To achieve statistical purposes |
Data that is generated as part of the Services you request Data that is generated through your other actions when you use the Services and which is linked to your account |
Legitimate interests |
|
To assist you in dispute resolution |
Identification information Data that is generated as part of the Services you request |
Contract and Legitimate interests |
|
To identify the abnormal status, ensure the stability and security of our Services, and to meet governmental and institutional policy obligations |
Identification data Account information Data that is generated as part of the Services you request Data that is generated through your other actions when you use the Services and which is linked to your account Device information |
Legitimate interests and Legal obligations |
|
To respond to your inquiries, comments, feedback or questions |
Identification information Account information Feedback information |
Contract and Legitimate interests |
- 4. How we disclose information we collect
Some or all of your personal data may be disclosed, for the purposes listed above and on a strict need to know basis.
- Affiliates and corporate partners
For proper business administration and service maintenance, we share the specified personal information above within our network of affiliated entities, adhering strictly to applicable legal frameworks.
- Service providers
We may share any personal data listed above with our services providers. These parties help us provide the Services or perform business functions on our behalf, including:
- Hosting and technology providers, including AWS, Google, Firebase, GetStream, etc.
- Law enforcement agencies, public authorities or other judicial bodies and organizations
We may share personal information when legally required or when we genuinely believe it’s necessary to:
- Meet legal requirements or respond to official requests;
- Enforce our rules and policies, including investigating potential breaches;
- Identify and resolve security risks, fraud, or technical problems;
- Protect the rights and safety of our company, users, others, or the public, as allowed by law (such as sharing data with other organizations to prevent fraud).
- Change of corporate ownership
We may share your personal information if our company goes through business changes like mergers, acquisitions, or financial reorganizations. If this happens, we’ll do our best to let you know before your data comes under new privacy and security rules.
- 5. International transfers of personal data
As a global enterprise, our servers are deployed across multiple countries and regions to support reliable and efficient service delivery as indicated below:
|
Your residence |
Server location |
|
the US, Canada, the UK |
the US |
|
Other jurisdictions |
Singapore |
We also rely on service providers around the globe to support our operations. Consequently, your personal data may be accessed by our affiliates or transferred to third-party service providers and business partners in various locations, to fulfill the purposes set forth in this Policy. These entities commit to processing information in compliance with applicable privacy laws and to implementing appropriate security measures to protect your information.
In the event of an international transfer of personal data, when required by applicable laws, we will provide an adequate level of protection for your personal data using various means, including implementing Standard Contractual Clauses or data transfer agreements that comply with applicable laws between our affiliates and third parties or any other lawful approach that permits the lawful transfer of personal data from those countries. For users residing in the UK, we comply with the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce and as applicable. You can obtain more details of the protection given to your personal data when it is transferred outside of your country by contacting us as referred to in the Section “Contact Us” below.
Please immediately stop accessing or using the Services if you do not want your information transferred to, processed, or maintained outside of the country or jurisdiction where you are located.
- 6. Your rights regarding your personal data
We respect your rights regarding personal information. Should you wish to inquire about or exercise these rights, please contact us using the details provided in Section “Contact Us”. We will respond to your request within the time limit required by applicable legislation upon identification verification (if necessary).
- Right to access. Request details about what personal data we process about you and obtain a copy.
- Right to rectification. Ask us to update inaccurate information or complete partial data where appropriate.
- Right to erasure. Request removal of your data, though we may retain it when required by law.
- Right to restriction of processing. In certain cases, you may ask us to restrict how we use your information, though legal exceptions may apply.
- Right to object. Challenge our use of your data when processed for legitimate business interests, subject to legal exceptions.
- Right to withdraw consent. Revoke previously given permissions at any time, without affecting prior lawful processing.
- Right to unsubscribe marketing information. You can update your contact preferences or unsubscribe from any contact from us at any time. You’ll find the unsubscribe link or similar instructions in any marketing message from us. Alternatively, you can also request removal of your personal information and subscription.
- We are dedicated to resolving any privacy concerns amicably. However, if you are unsatisfied with our handling of your Personal Data, you have the right to lodge a complaint with your local data protection authority.
- 7. Minors
OK.com operates as a lifestyle services platform, and our Services are primarily intended for use by adults. Minors may only access and use our Services with the consent and under the supervision of a parent or legal guardian. If your guardian does not consent to your use of our Services, you shall discontinue use immediately.
If we become aware that we have inadvertently collected personal data from a minor without the necessary consent from their parent or legal guardian, we will take appropriate steps to deactivate the relevant account and promptly delete the data from our records.
- 8. Contact
For more information about your data subject rights, or how we process your personal data, please contact us by the information below.
Controller: Servanan International Pte. Ltd.
Address: 1 Raffles Place, #36-01, One Raffles Place, Singapore 048616
Contact Person: OK.com Legal Team
Contact Details: legal@ok.com
We will respond to your request or complaint in due course under the applicable laws.
- 9. Update of this Policy
The Services and our business may change from time to time. We recommend checking this page to stay up to date with the latest changes. If there are any substantial changes to this Privacy Policy, depending on the nature of such changes, we will notify you in advance through pop-ups, push notifications, and other appropriate means.
Singapore
The Singapore Personal Data Protection Act (“PDPA”) provides for the establishment of a National Do Not Call (DNC) Registry, which allow individuals to register their Singapore telephone numbers to opt out of receiving marketing phone calls, mobile text messages such as SMS or MMS, and faxes from organizations from 2 January 2014 onwards.
We aim to comply with the requirements of the PDPA and respect your choices. If you have registered your telephone number with the DNC Registry, we will not send you our promotional and marketing messages via phone calls, text messages and faxes. However, if you have previously given us consent to contact you for such purposes, we will continue to do so until you withdraw your consent.
California
We collect personal data from and about you in the preceding 12 months as described in Section 2 above.
We disclose personal data with third parties for business purposes in the preceding 12 months as below:
|
Categories of personal data |
Disclosed to which categories of third parties |
|
All categories detailed in Section 2 above |
Cloud storage services provider Our affiliates |
|
Location information Device information and permissions |
Location-based service provider |
|
Identification data Subscription information Customer service information |
Real-time chat service provider |
To the extent provided by local law and subject to applicable exceptions, you may have the following rights:
- Opt-out of marketing communications. We provide marketing information through in-app notifications, email, SMS and WhatsApp. If you do not wish to receive these notifications, you can disable them using the method specified therein.
- Do Not Sell or Share My Personal Data. Based on the definition of “sell” and “share” by California law, we do not believe that we engage in such activity and have not engaged in such activity in the past 12 months from the effective date of this Policy.
- You may appeal our refusal to take action on a request by contacting us using the contact details provided in Section “Contact Us”. If your appeal is denied and you are a California resident, you may contact the California Attorney General about the results of the appeal by submitting a complaint by clicking here: https://oag.ca.gov/contact/consumer-complaint-against-business-or-company.
- Direct Marketing. We do not disclose personal data to third parties for their direct marketing purposes.
Canada
If you are located in Canada and would like to receive written information regarding our policies and practices concerning service providers outside of Canada, you may contact us by the information listed in the Section “Contact Us”. Our privacy team will assist with any questions related to the collection, use, disclosure, or storage of personal data by these service providers.
When we engage service providers who may have access to your personal data, we require them to uphold privacy and security standards that are equivalent to our own. We ensure this through contracts and other safeguards that protect the confidentiality and integrity of your information and restrict its use strictly to the purposes outlined in this Policy.
Egypt
By clicking “Accept” or proceeding with the sign-up process, you confirm that you have read, understood, and agreed to this Policy. If you do not agree with the terms of this Policy, you must refrain from using the Service.
By doing so, you also acknowledge and consent to the processing, storage, and cross-border transfer of your personal data. Such transfers may occur to any country where we or our affiliates maintain databases or operations, including but not limited to Singapore.
If you are a new user, you have seven (7) days from the date of acceptance to raise any objections to this Policy.
As a data subject residing in Egypt, you are entitled to certain rights under the Egyptian Personal Data Protection Law.
Turkey
We process your personal data based on legal grounds such as your explicit consent, the necessity for contract performance, or to comply with our legal obligations, in line with Articles 5 and 6 of the Law on the Protection of Personal Data (KVKK).
As a data subject in Turkey, you have the rights outlined in Article 11 of the KVKK, including the right to:
- learn whether your personal data is being processed,
- request information regarding such processing,
- understand the purpose of the processing and whether it is being used accordingly,
- know the third parties to whom your data is transferred domestically or internationally,
- request correction of inaccurate or incomplete data,
- request deletion or destruction of your data under Article 7 of the DPL,
- object to automated decisions that have legal or significant effects, and
- request compensation for damages caused by unlawful data processing.