VEXA Privacy Policy

Effective Date: 09 August 2026
Last Updated: 12 August 2026

VEXA is operated by ONEORVE & CO (PTE.) LTD. (“ONEORVE”, “we”, “us” or “our”).

We respect your privacy and are committed to protecting personal data entrusted to us. This Privacy Policy explains how we collect, use, disclose, protect and retain personal data when you visit or use the VEXA website and related services.

VEXA is a professional directory and identity platform within the ONEORVE ecosystem. A key purpose of VEXA is to allow members of the public, clients, partners and other stakeholders to identify and verify individuals who are recognised as ONEORVE Stewards.

This Privacy Policy should be read together with our VEXA Terms of Use.

1. Singapore Personal Data Protection Act

ONEORVE is committed to complying with the Personal Data Protection Act 2012 (“PDPA”) and applicable regulations and guidelines issued by Singapore's Personal Data Protection Commission (“PDPC”).

The PDPA establishes a framework for the collection, use and disclosure of personal data by organisations in Singapore and includes obligations relating to notification, consent, purpose limitation, accuracy, protection, retention, transfer, access and correction, and data-breach notification.

This Privacy Policy is intended to provide transparency about how VEXA manages personal data.

2. What is Personal Data?

For the purposes of this Policy, “personal data” generally means data about an individual who can be identified from that data alone or together with other information that we have or are likely to have access to.

Depending on how you interact with VEXA, personal data may include:

name;
photograph or profile image;
professional title or designation;
professional biography;
areas of expertise and skills;
professional qualifications and certifications;
professional experience;
organisation, business or professional affiliation;
country or general location;
professional contact details;
username or account information;
information you provide when communicating with us;
technical information associated with your use of VEXA; and
other information that you voluntarily provide to us.

We generally do not require sensitive personal information for the operation of VEXA.

You should not submit sensitive or unnecessary personal information through VEXA unless specifically requested and authorised by ONEORVE.

3. How We Collect Personal Data

We may collect personal data through:

Information provided by you

For example, when you:

create or update a VEXA profile;
register for an account;
provide information as a ONEORVE Steward;
contact us;
submit an enquiry or request;
provide feedback; or
otherwise voluntarily provide information to ONEORVE.

Information provided by ONEORVE

Where appropriate, information may be provided or verified by ONEORVE or an authorised representative for the purpose of establishing and maintaining a Steward's professional profile.

Information collected automatically

When you access VEXA, certain technical information may be collected automatically, such as:

IP address;
browser type;
operating system;
device information;
approximate location derived from technical information;
pages visited;
date and time of access;
referring website; and
technical or diagnostic information.

Such information may be used for security, administration, analytics and improving the Platform.

4. Why We Collect and Use Personal Data

We may collect, use and disclose personal data for purposes including:

A. Professional identification and verification

To create and maintain VEXA profiles and enable visitors to identify and verify ONEORVE Stewards.

B. Platform administration

To create accounts, administer access, maintain profiles and operate VEXA.

C. Communication

To respond to enquiries, requests, feedback and communications.

D. Security

To protect VEXA against unauthorised access, misuse, fraud, malicious activity and security threats.

E. Platform improvement

To understand how VEXA is used and improve its functionality, usability, performance and security.

F. ONEORVE administration

To maintain appropriate records relating to ONEORVE Stewards, contributors, partners and other participants in the ONEORVE ecosystem.

G. Legal and regulatory requirements

To comply with applicable Singapore laws, regulations, legal processes, court orders or requests from competent authorities.

H. Other notified purposes

For other purposes that we notify you of at the time of collection or that are otherwise permitted under applicable law.

We will not use personal data for purposes that are incompatible with the purposes for which it was collected, unless permitted or required under applicable law.

5. Publicly Available Steward Profiles

A central purpose of VEXA is to provide a publicly accessible directory of ONEORVE Stewards.

Accordingly, information contained within a Steward's VEXA profile may be visible to members of the public.

Depending on the profile configuration, publicly visible information may include:

name;
profile photograph;
professional designation;
professional biography;
areas of expertise;
professional experience;
professional qualifications;
professional affiliations;
country or general location; and
other information specifically designated for public display.

ONEORVE will seek to limit publicly displayed information to information that is reasonably necessary for the professional identification and verification purposes of VEXA.

We encourage Stewards to consider carefully what information they provide for public display.

6. Verification of ONEORVE Stewards

VEXA may contain profiles of individuals recognised as ONEORVE Stewards.

ONEORVE may use personal data to:

confirm a person's identity;
confirm their association with ONEORVE;
verify professional information;
maintain the accuracy of the VEXA directory; and
update or remove profiles when an individual's association with ONEORVE changes.

The appearance of an individual on VEXA indicates that, at the time of publication, ONEORVE recognises that individual as part of its Steward network or ecosystem.

However, a VEXA profile does not by itself establish that the individual is an employee, agent, legal representative, partner or authorised signatory of ONEORVE.

7. Accuracy of Personal Data

ONEORVE seeks to maintain accurate and complete personal data, particularly where such information is used to identify or verify a ONEORVE Steward.

If you discover that information associated with your profile is inaccurate, incomplete or outdated, you may contact us to request correction.

ONEORVE may also update information based on information received from authorised sources or through its verification processes.

8. Consent

Where consent is required under the PDPA, ONEORVE will obtain consent before collecting, using or disclosing personal data for the relevant purpose, unless an applicable exception under the PDPA permits us to do otherwise.

Where appropriate, you may withdraw consent by contacting us.

Please note that withdrawal of consent does not affect the lawfulness of any collection, use or disclosure carried out before the withdrawal.

Withdrawal of consent may also affect our ability to provide certain services or maintain certain features of your VEXA account.

9. Disclosure of Personal Data

We may disclose personal data where reasonably necessary for the purposes described in this Policy, including to:

authorised ONEORVE personnel;
service providers supporting VEXA;
hosting, cloud and infrastructure providers;
technology and cybersecurity providers;
analytics or technical service providers;
professional advisers;
auditors;
insurers;
legal advisers;
regulators, government authorities or law-enforcement agencies where required or permitted by law; and
other parties where you have provided consent or disclosure is otherwise permitted under applicable law.

We will take reasonable steps to ensure that third parties handling personal data on our behalf provide an appropriate level of protection and process personal data only for authorised purposes.

10. Overseas Transfer of Personal Data

VEXA and its supporting services may use technology, hosting or service providers located outside Singapore.

Where personal data is transferred outside Singapore, ONEORVE will take appropriate steps required under the PDPA to ensure that the transferred personal data receives a standard of protection comparable to that provided under the PDPA.

Where appropriate, contractual, technical or organisational safeguards may be implemented to protect personal data transferred internationally.

11. Protection of Personal Data

ONEORVE takes reasonable security arrangements to protect personal data in our possession or under our control against:

unauthorised access;
unauthorised collection;
unauthorised use;
unauthorised disclosure;
copying;
modification;
disposal; and
similar risks.

Security measures may include access controls, authentication, encryption, monitoring, backups, system updates and other technical or organisational safeguards appropriate to the nature of the information and the risks involved.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12. Data Breaches

ONEORVE maintains procedures for responding to suspected or confirmed personal-data breaches.

Where a data breach is assessed as requiring notification under the PDPA, ONEORVE will notify the relevant parties, including the PDPC and affected individuals where required, within the applicable statutory requirements.

We will also take reasonable steps to contain, investigate and remediate the breach.

13. Retention of Personal Data

ONEORVE will retain personal data only for as long as it is reasonably necessary to fulfil the purposes for which it was collected or for other legitimate business or legal purposes.

When personal data is no longer required, we will take reasonable steps to delete, anonymise or dispose of it appropriately.

Retention periods may vary depending on:

the nature of the information;
the purpose for which it was collected;
legal or regulatory requirements;
contractual obligations;
security and audit requirements; and
legitimate business requirements.

Where a Steward's relationship with ONEORVE ends, their VEXA profile may be removed, archived or otherwise updated in accordance with applicable policies and legal requirements.

14. Cookies and Similar Technologies

VEXA may use cookies and similar technologies to:

operate the website;
maintain user sessions;
remember preferences;
improve website functionality;
understand website usage;
monitor performance; and
support security.

Cookies may be either session cookies or persistent cookies.

You may configure your browser to reject or restrict cookies. However, disabling certain cookies may affect the functionality of VEXA.

Where third-party analytics or similar technologies are used, their respective privacy policies may also apply.

15. Third-Party Websites

VEXA may contain links to websites or services operated by third parties, including ONEORVE's other websites.

These third-party websites operate independently from VEXA and may have their own privacy policies and practices.

We encourage you to review the relevant privacy policy before providing personal data to a third-party website.

ONEORVE is not responsible for the privacy practices of third-party websites that we do not control.

16. Access to Personal Data

You may request access to personal data about you that is in our possession or under our control, and information about how your personal data has been used or disclosed within the applicable period, subject to the exceptions and requirements under the PDPA.

Requests should be submitted to our Data Protection Officer using the contact details provided below.

We may need to verify your identity before processing an access request.

Certain information may be withheld where permitted or required under applicable law.

17. Correction of Personal Data

If you believe that personal data held by ONEORVE is inaccurate or incomplete, you may request that we correct the information.

We may verify the requested correction before making changes.

Where required under the PDPA, we will take reasonable steps to correct the personal data and, where applicable, communicate the correction to relevant organisations to which the data was previously disclosed.

18. Withdrawal of Consent

If you have provided consent for the collection, use or disclosure of your personal data, you may withdraw that consent by contacting our Data Protection Officer.

We will explain the likely consequences of the withdrawal before processing the request where appropriate.

Withdrawal of consent will not affect any collection, use or disclosure that occurred before the withdrawal.

19. Complaints and Data Protection Enquiries

If you have any questions, concerns or complaints regarding how ONEORVE handles your personal data, please contact our Data Protection Officer.

We encourage individuals to contact us first so that we can understand and address the matter.

Data Protection Officer
ONEORVE & CO (PTE.) LTD.
Singapore

Email: dpo@oneorve.co

We will review and respond to data-protection enquiries within a reasonable period.

20. Children's Privacy

VEXA is primarily intended for professional networking, identification and verification purposes.

We do not knowingly collect personal data from children for purposes unrelated to the operation of the Platform.

Where a person is under the age applicable to the relevant consent requirements, ONEORVE will take reasonable steps to comply with applicable Singapore law concerning consent and the collection, use and disclosure of personal data.

21. Changes to this Privacy Policy

ONEORVE may update this Privacy Policy from time to time to reflect:

changes to VEXA;
changes to our data-processing practices;
changes in technology;
changes in legal or regulatory requirements; or
other operational requirements.

The latest version will be published on VEXA together with its effective date.

Where required, we will provide appropriate notice of material changes.

22. Governing Law

This Privacy Policy is governed by the laws of the Republic of Singapore.

Any matters arising from or relating to this Privacy Policy will be subject to the applicable laws and jurisdiction of Singapore, subject to any mandatory rights or remedies available under applicable law.

23. Contact Us

For questions about this Privacy Policy or how ONEORVE handles personal data:

ONEORVE & CO (PTE.) LTD.

Singapore

Data Protection Officer
Email: dpo@oneorve.co

For general enquiries regarding VEXA or ONEORVE, please visit:

ONEORVE Group:
https://www.oneorve.co/

ONEORVE:
https://www.oneorve.com/

ONEORVE.org:
https://www.oneorve.org/

VEXA is part of the ONEORVE ecosystem.

الخصوصية