PRIVACY POLICY

In this policy, “we,” “us,” “our,” or “STARVAULT” means BOXPARK PTE. LTD. (UEN201100612H), owner and operator of the STARVAULT automated safe deposit box facility at 506 ChaiChee Lane, Singapore 469026.

This policy applies only to STARVAULT safe deposit box services (including viewings, box accounts,authorised users and Will Custodian). BOXPARK self-storage is covered separately at boxpark.com.sg. 

We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (PDPA).

We do not inspect, inventory or record what you put in your box. 

Staff have no access your box and is not able to modify access to your box without the OTP verification of the customer. 

 Private viewing rooms have no CCTV.

What we collect

We collect personal data you give us, and data created when you use the facility or website, including: 

• Identity and contact details (for example name, NRIC or passport, address, phone, email)
• Account and billing details
• Biometric data used for access (facial recognition and fingerprint)
• Access and security records (card identifiers, PIN-related records, OTP logs, box retrieval and return times)
• CCTV of common areas, entrances and vault exterior
• Details of authorised users, Will Custodian nominees and an alternate contact if you give us one
• Enquiries, viewing bookings and website technical data (such as IP address and cookies needed for the site to work)

Give us another person’s details (authorised user, executor or alternate contact) only if they know and agree you are providing them.

How we use it

We use this data to:

• Verify identity and provide 24/7 box access
• Send access notifications and OTP checks for account changes
• Bill you and manage your account
• Contact you — or your alternate contact if we cannot reach you — about the account or the facility
• Protect the facility and investigate incidents
• Reply to enquiries and viewing requests, and follow up on them
• Meet legal and regulatory requirements

Biometric data is used only for access control, not marketing.

If you opt in, we may send STARVAULT service updates. You can withdraw that consent at any time.

Who we share it with

We do not sell personal data.

We may share it with service providers who help us operate (for example hosting, email, payments and access systems), or Singapore Authorities where the law requires. 

We currently do not insure box contents and we do not give insurers your data for contents claims unless you ask us to or the law requires it.

How long we keep it

We keep personal data only as long as needed for the purposes above, or as required by law or to deal with aclaim or security incident. We then delete or anonymise it.

CCTV is kept only as long as needed for security.

Your rights

You may ask for access to or correction of your personal data, or withdraw consent where we rely onconsent. Some data we must keep for legal or security reasons. Withdrawing consent needed to run the box(for example biometrics or contact details) may mean we can no longer provide access.

Contact

Please contact us at the following site: https://www.starvault.com.sg/contact-us

We may update this policy from time to time. The current version will be published on starvault.com.sg.