Last updated: 17 September 2026

Smartfuture Pte Ltd (“SmartFuture”, “we”, “us” or “our”) respects the privacy of individuals and is committed to protecting personal data in accordance with applicable data protection laws, including Singapore’s Personal Data Protection Act 2012 (“PDPA”).

This Privacy Policy explains how we may collect, use, disclose, process, store and protect personal data in connection with our websites, business activities, healthcare technology solutions and related services.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal data handled by SmartFuture in connection with our websites, business activities, healthcare technology platforms, mobile and web applications, connected medical device solutions, remote monitoring solutions and related services.

Depending on the solution and our relationship with the customer, SmartFuture may process personal data on our own behalf or on behalf of healthcare providers, medical assistance providers, employers, insurers, corporate customers and other organisations.

Where SmartFuture processes personal data on behalf of a customer, the customer generally determines the purposes for which the personal data is collected and used. SmartFuture processes such data in accordance with the customer’s instructions, our contractual obligations and applicable law. The customer’s own privacy notice or other specific privacy terms may also apply.

Where there is any conflict between this Privacy Policy and a specific privacy notice or contractual arrangement applicable to a particular service or deployment, the specific terms applicable to that service or deployment will apply to the extent of the conflict.

This distinction is appropriate under Singapore's PDPA framework, which recognises circumstances where an organisation processes personal data on behalf of another organisation as a data intermediary.

2. Personal Data We May Process

Depending on how you interact with SmartFuture and the solution or service being used, personal data we may process can include:

• identification and contact information, such as name, email address and telephone number;
• organisation, employment and professional information;
• user account and authentication information;
• health and wellness information, including vital signs, measurements, questionnaires and other information collected through connected medical devices or entered into a SmartFuture solution;
• patient, case and care-related information provided through our platforms;
• communications and information exchanged through supported communication features;
• device, application and technical information, including device identifiers, IP addresses, logs and usage information;
• location information where required by and enabled for a particular service;
• information submitted through our websites, applications or customer support channels; and
• other personal data required to provide a particular solution or service.

The specific personal data processed depends on the customer, deployment, configured features and services being used.

Please do not submit patient health information or other sensitive personal information through our general website contact forms unless specifically requested through an appropriate channel.

3. How We Receive Personal Data

Depending on the service, we may receive personal data:

• directly from you;
• from a healthcare provider, employer, medical assistance provider, insurer, corporate customer or other organisation providing or administering a service;
• through connected medical devices and supported third-party integrations;
• through SmartFuture applications, websites and platforms;
• from authorised users of our solutions;
• from service providers and business partners where permitted by applicable law; or
• from publicly available professional or business sources where appropriate.

The sources of personal data vary depending on the particular solution and deployment.

4. How We Use and Process Personal Data

Where SmartFuture processes personal data on behalf of a customer, we process that information for the purposes instructed or authorised by that customer and as necessary to provide, operate, secure and support the relevant services.

Depending on the particular deployment, this may include processing information to:

• operate healthcare technology platforms and applications;
• receive and display readings from connected medical devices;
• support remote monitoring and care workflows;
• enable configured alerts, questionnaires and communications;
• provide dashboards, reports and other configured functionality;
• facilitate supported integrations with customer or third-party systems;
• provide technical support, maintenance and security; and
• fulfil our contractual obligations to the customer.

Where SmartFuture determines the purposes for which personal data is processed, we may use personal data to:

• respond to enquiries and requests;
• arrange meetings and product demonstrations;
• prepare proposals, quotations and agreements;
• manage customer, supplier and business relationships;
• provide and support our products and services;
• administer user accounts where applicable;
• operate, maintain and improve our websites and business operations;
• protect our systems, services and users;
• maintain appropriate business and compliance records;
• comply with applicable legal and regulatory requirements; and
• communicate with customers and business contacts, including marketing communications where permitted by applicable law.

Under the PDPA, organisations are expected to notify individuals of the purposes for which personal data is collected, used or disclosed, subject to applicable exceptions.

5. Health and Care Information

Some SmartFuture solutions are designed to process health, wellness or care-related information, including information collected through connected medical devices.

SmartFuture processes such information only as required to provide and support the relevant solution and in accordance with applicable customer instructions, contractual requirements and applicable law.

Where SmartFuture processes patient or health information on behalf of a customer, the customer remains responsible for determining the purposes of processing and its clinical use, subject to the applicable contractual and legal framework.

SmartFuture does not use patient health information processed on behalf of customers for unrelated advertising or marketing purposes.

Where artificial intelligence or automated technologies are used within a particular solution, their use will depend on the configured service, customer requirements and applicable contractual arrangements.

6. Disclosure of Personal Data

Depending on the circumstances and our role in processing the information, personal data may be disclosed or made available to:

• the customer or organisation responsible for the relevant service;
• authorised healthcare professionals and other authorised users of the relevant solution;
• SmartFuture employees and authorised personnel who require access for their work;
• technology, infrastructure, communications and other service providers supporting our services;
• third parties providing integrations or services required for a particular deployment;
• professional advisers, auditors and insurers;
• government authorities, regulators, courts or law-enforcement agencies where required or permitted by law; and
• another organisation in connection with a merger, acquisition, restructuring or transfer of our business or assets, subject to appropriate safeguards.

Where service providers process personal data for us, we take appropriate steps to require them to protect that information and process it for the relevant purposes.

SmartFuture does not sell personal data to third parties.

7. International Processing and Transfers

SmartFuture and its customers operate internationally. The location in which personal data is processed or stored may therefore vary depending on the particular solution, customer requirements, infrastructure and service providers involved.

Where SmartFuture is responsible for transferring personal data outside Singapore, we take appropriate measures as required by applicable data protection laws and contractual requirements.

Singapore's PDPA requires organisations responsible for overseas transfers to ensure that transferred personal data receives a standard of protection comparable to that under the PDPA.

Additional requirements may apply depending on the country, customer and deployment.

8. Cookies and Website Analytics

Our websites may use cookies and similar technologies to support website functionality, understand how visitors use our websites and improve their performance.

We may also use third-party analytics or embedded services that place or access cookies or similar technologies.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.

Where consent is required for particular cookies or similar technologies, we will seek consent as appropriate.

9. Marketing Communications

Where permitted by applicable law, we may use business contact information to communicate about SmartFuture, our solutions, events and relevant updates.

You may unsubscribe from marketing communications by using the unsubscribe option provided in the communication or by contacting us.

We may continue to send communications that are necessary to administer an existing customer, supplier or other business relationship.

10. Protection of Personal Data

We take reasonable administrative, technical and organisational measures to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.

Access to personal data is restricted according to appropriate roles and business requirements.

No electronic transmission or storage method can, however, be guaranteed to be completely secure.

The PDPA's Protection Obligation requires organisations to make reasonable security arrangements to protect personal data in their possession or control. Data intermediaries also have direct protection obligations for data they process on behalf of another organisation.

11. Retention of Personal Data

We retain personal data only for as long as required for the purposes for which it was collected or processed, or for legitimate business, contractual, legal or regulatory purposes.

Retention periods may differ between solutions and customers and may be determined by applicable customer requirements or contractual arrangements.

When personal data is no longer required, we take reasonable steps to cease retention or remove the means by which the information can be associated with particular individuals, as appropriate.

The PDPA includes a Retention Limitation Obligation requiring personal data not to be retained when it is no longer necessary for business or legal purposes.

12. Access and Correction

Subject to applicable law, you may request access to personal data held by SmartFuture about you and information about how it has been used or disclosed. You may also request correction of personal data that is inaccurate or incomplete.

Where SmartFuture processes your personal data solely on behalf of a customer, we may refer your request to, or coordinate the request with, the relevant customer as appropriate.

We may need to verify your identity before processing a request, and applicable legal exceptions may apply.

13. Withdrawal of Consent

Where SmartFuture relies on your consent to collect, use or disclose personal data, you may withdraw that consent by contacting us.

We will inform you of any likely consequences of withdrawing consent where required and process the request in accordance with applicable law.

Withdrawal of consent does not affect processing that was lawfully carried out before the withdrawal.

Where your personal data is processed on behalf of a SmartFuture customer, requests relating to consent may need to be directed to or handled in coordination with that customer.

14. Third-Party Services and Websites

SmartFuture solutions may integrate with or provide links to third-party websites, applications, devices, platforms or services.

Third parties may have their own privacy policies and data-processing practices. Where a third party processes personal data independently of SmartFuture, its own privacy terms will apply.

SmartFuture is not responsible for the privacy practices of third-party websites or services that are outside our control.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, solutions, technology, data-processing practices or applicable requirements.

The latest version will be published on this page with the updated date shown above.

Where appropriate or required by law, we may provide additional notice of material changes.

16. Contact Us

If you have questions about this Privacy Policy, our handling of personal data, or would like to make a request relating to your personal data, please contact:

Data Protection Officer
Smartfuture Pte Ltd
246 MacPherson Road, #03-01 Betime Building
Singapore 348578
Email: dpo@oursmartfuture.com