Privacy Policy

This Privacy Policy explains how White Gate Partners Pte. Ltd. (“White Gate Partners”, “WGP”, “we”, “our” or “us”) collects, uses, discloses, stores and protects personal data when individuals visit our website, contact us, or engage with our executive search, specialist recruitment, talent solutions and related consulting services.

This Policy is primarily governed by the Personal Data Protection Act 2012 of Singapore (“PDPA”). Where the laws of another jurisdiction apply to a particular processing activity, we will take reasonable steps to comply with the applicable requirements.

Part A — General Privacy Policy

1. Who We Are and Scope

White Gate Partners is a Singapore-based executive search, specialist recruitment and talent solutions firm. This Policy applies to personal data in our possession or under our control, including personal data processed for us by service providers and other third parties.

It applies to candidates, job applicants, clients, prospective clients, business contacts, referral partners, independent recruiters, consultants, website visitors and other individuals who interact with us.

2. Personal Data We Collect

Depending on your relationship with us, we may collect the following categories of personal data:

• Identification and contact details, including name, email address, telephone number, mailing address and professional profile links.
• Professional and employment information, including CVs, work history, education, qualifications, certifications, technical skills, sector experience and areas of specialisation.
• Recruitment-related information, including current and expected compensation, notice period, availability, career interests, location preferences, willingness to travel or relocate, nationality, residency and work-authorisation status.
• Assessment and process information, including interview notes, consultant observations, references, feedback, offer details, placement information and communications with WGP.
• Client and business information, including company, job title, hiring requirements, commercial enquiries, contracts, billing information and relationship history.
• Technical and website information, including IP address, device type, browser information, referring pages, website usage and security logs.
• Any other information that you voluntarily provide through forms, emails, messages, documents or conversations.
• Sensitive or potentially sensitive recruitment information. Depending on the role, client requirements and applicable law, we may collect criminal-record or other background-check information; health or medical information; disability or accessibility status; salary history; and diversity information, such as race or ethnic origin, religion or marital status.

We do not intentionally request sensitive personal data unless it is relevant and reasonably necessary for a stated purpose. Where you choose to provide information such as health or accessibility requirements, we will handle it with appropriate care.

3. How We Obtain Personal Data

We may collect personal data:

• Directly from you, including through our website, email, telephone, messaging platforms, meetings, interviews and recruitment processes.
• From professional networking platforms, public professional profiles, company websites, job boards and other publicly available sources.
• From clients, referral partners, independent recruiters, search partners, professional contacts and persons authorised to provide information about you.
• From referees, former employers, educational institutions and verification providers, where relevant and permitted.
• Automatically through our website, hosting environment, security tools and related technologies.

Where we obtain your personal data from another source, we will use it only for reasonable purposes connected with our services and in accordance with applicable law.

4. How We Use Personal Data

We may collect, use and disclose personal data for purposes including:

• Providing executive search, specialist recruitment, talent solutions and related consulting services.
• Responding to enquiries and communicating with candidates, clients, partners and other business contacts.
• Identifying, approaching, assessing and matching potential candidates with current or future opportunities.
• Preparing candidate profiles, arranging interviews, managing feedback and supporting offer, placement and onboarding processes.
• Understanding client hiring requirements, market conditions and talent availability.
• Managing client, candidate, supplier, referral and partnership relationships.
• Conducting reference, qualification, identity, work-eligibility or other appropriate checks.
• Administering contracts, invoices, payments, guarantees, records and internal operations.
• Improving our website, services, processes, security and user experience.
• Preventing fraud, misuse, security incidents or unlawful activity.
• Complying with legal, regulatory, contractual and professional obligations.
• Establishing, exercising or defending legal claims and resolving complaints or disputes.

Automated decision-making and profiling. WGP does not currently make significant recruitment decisions solely through automated processing without human involvement. We may use technology-assisted, including AI-assisted, search, matching, screening or psychometric assessment tools to support our consultants; where such tools are used, their outputs are reviewed by an appropriately authorised person.

5. Consent and Other Permitted Grounds

We generally collect, use and disclose personal data with your consent, which may be expressed or deemed from the circumstances. In particular, where permitted and the statutory conditions are met, WGP may rely on deemed consent by contractual necessity under section 15 of the PDPA, including where collection, use or disclosure is reasonably necessary to enter into or perform a contract with you, and deemed consent by notification under section 15A of the PDPA, including when sourcing relevant professional information from a third-party platform after notifying you of the purposes and giving you a reasonable opportunity to opt out. We may also rely on other exceptions or permitted grounds under the PDPA or other applicable law.

You may withdraw consent by contacting us. We will explain the likely consequences of withdrawal and will cease the relevant collection, use or disclosure within a reasonable period, subject to any legal or business grounds that permit or require continued processing.

6. Disclosure of Personal Data

We may disclose personal data, where reasonably necessary, to:

• Prospective and existing clients in connection with recruitment, search, consulting or talent assignments.
• WGP employees, consultants, independent recruiters and authorised recruitment or search partners.
• Overseas partners supporting cross-border or regional assignments.
• Referees, former employers, educational institutions, verification providers and other persons involved in appropriate checks.
• Technology, hosting, CRM, email, document-storage, cybersecurity, analytics and other service providers.
• Professional advisers, auditors, insurers, banks and payment providers.
• Government agencies, regulators, law-enforcement bodies, courts or other parties where disclosure is required or permitted by law.
• A purchaser, investor or successor in connection with a proposed or completed corporate transaction, subject to appropriate safeguards.

We do not sell personal data.

7. Overseas Transfers

Because WGP supports regional and cross-border assignments and uses service providers that may operate internationally, personal data may be transferred, stored or processed outside Singapore.

Where personal data is transferred outside Singapore, we will use a permitted transfer mechanism and take steps to ensure the recipient provides a standard of protection comparable to that required under the PDPA. Depending on the circumstances, this may include written contractual arrangements requiring comparable protection, including standard data-transfer clauses; binding corporate rules or equivalent intra-group safeguards; transfer to a prescribed or otherwise recognised country or jurisdiction where applicable; or reliance on another statutory exception or permitted mechanism under the PDPA.

8. Security

We implement reasonable administrative, physical and technical safeguards designed to protect personal data from unauthorised access, collection, use, disclosure, copying, modification, loss or disposal.

Security measures may include access controls, password protection, secure cloud services, device and account security, staff and contractor confidentiality requirements, and appropriate vendor management. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

9. Retention

We retain personal data only for as long as it is reasonably required for the purposes for which it was collected, for an ongoing business or recruitment relationship, or to satisfy legal, contractual, accounting, regulatory, dispute-resolution or record-keeping requirements.

Candidate records are generally reviewed for deletion or anonymisation within two (2) years of our last meaningful interaction, unless there is an ongoing recruitment process, placement, contractual obligation, dispute, legal requirement or other legitimate business reason requiring longer retention.

Indicative retention periods include:

• Client and engagement records — generally seven (7) years after the relevant engagement ends to support statutory accounting and record-keeping.
• Financial, accounting and tax records — generally five (5) to seven (7) years, or longer where required by IRAS or other applicable law.

These periods are guidelines rather than fixed guarantees and may be extended where necessary, after which the data will be deleted, anonymised or securely disposed of.

Client, commercial, financial and placement records may be retained for a longer period where required for business, accounting, legal or regulatory purposes. When retention is no longer necessary, we will take reasonable steps to delete, anonymise or securely dispose of the data.

10. Website Data, Cookies and Analytics

When you visit our website, our hosting, security and technology providers may automatically collect technical information such as IP address, browser type, device information, access time, referring page and website activity.

Our website may use the following cookie categories:

• Essential cookies, which support security, basic functionality and site operations.
• Functional cookies, which remember preferences.
• Analytics cookies, which help us understand use of the website and may include Google Analytics where enabled.
• Marketing or advertising cookies, only where applicable, lawfully permitted and enabled with the required consent.

You may control cookies through your browser settings and, where provided, our cookie banner.

11. Your Rights and Choices

Subject to the PDPA and any applicable exceptions, you may:

• Request access to personal data that we hold about you and information about how it was used or disclosed during the preceding year.
• Request correction of an error or omission in your personal data.
• Withdraw consent for specified collection, use or disclosure of your personal data.
• Ask us to review whether particular personal data should be retained, deleted, anonymised or no longer used, subject to legal and business requirements.
• Request, where the data portability obligation in Part VIA of the PDPA applies, that personal data be transmitted to another organisation in a commonly used, machine-readable format, subject to applicable conditions and exceptions.
• Raise a question or complaint about how we handle personal data.
• Lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC) about our handling of your personal data, without limiting any other rights or remedies.

To protect personal data, we may need to verify your identity and the scope of your request. We may charge a reasonable fee for an access request where permitted and will inform you of the fee in advance.

We will generally respond to access or correction requests within thirty (30) calendar days. If more time is required, we will inform you of the expected response timeframe.

12. Marketing Communications

We may send business updates, market insights, event invitations or other relevant communications where permitted. You may opt out of non-essential marketing communications at any time by using the unsubscribe method provided or contacting us at privacy@whitegatepartners.sg.

We may continue to send service, recruitment, contractual or administrative communications that are necessary for an existing relationship or transaction.

Before sending marketing messages to Singapore telephone numbers, including calls and text messages, WGP will check the Do Not Call Registry where required and comply with the applicable Do Not Call provisions in Part IX of the PDPA, including requirements relating to consent, identification and opt-out requests.

13. Third-Party Information and Links

If you provide personal data relating to another individual, you confirm that you are authorised to provide it to us and have informed the individual of the purposes for which it may be used.

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties, and you should review their privacy notices separately.

14. Data Breaches

We maintain procedures to assess and respond to suspected personal-data breaches. Where required by applicable law, we will notify the relevant authority and affected individuals of a notifiable breach within the prescribed timeframe.

15. Updates to This Policy

We may update this Policy from time to time to reflect changes in our services, practices, technology or legal obligations. The revised version will be published with an updated “Last updated” date. Where a material change affects how we use personal data, we will provide additional notice or obtain consent where required.

16. Data Protection Officer and Contact

Questions, requests, complaints or feedback relating to this Policy or your personal data may be directed to:

Part B — Candidate Privacy Notice

Updated as at 25 August 2026

This Candidate Privacy Notice supplements the General Privacy Policy above and explains how White Gate Partners handles personal data relating to candidates, potential candidates and job applicants.

1. Scope

This Notice applies to individuals whom WGP considers, contacts, represents, assesses or introduces for employment, contract, consulting or other opportunities with our clients, as well as individuals applying to work or engage directly with WGP. WGP's services and recruitment processes are intended for individuals who are at least eighteen (18) years of age, and WGP does not knowingly collect personal data from minors. If we learn that personal data of a minor has been collected without appropriate authority, we will take reasonable steps to delete it.

2. Candidate Data We May Collect

Candidate personal data may include:

• Name, contact details, location and professional profile links.
• CV, employment history, education, qualifications, certifications, skills, sector experience and achievements.
• Current and expected compensation, notice period, availability and career preferences.
• Nationality, residency, work-authorisation status, willingness to travel or relocate, and preferred work locations.
• Interview notes, assessments, communications, references, feedback and consultant observations.
• Offer, placement, onboarding and guarantee-related information.
• Identity, qualification, reference, employment or other verification information where appropriate.
• Sensitive or potentially sensitive recruitment information, such as criminal record or background-check results, health or medical information, disability or accessibility status, salary history, and diversity information, including race or ethnic origin, religion or marital status, where relevant, lawfully collected and, where required, with your explicit consent.

3. Sources of Candidate Data

We may obtain candidate data:

• Directly from you or your authorised representative.
• From LinkedIn, other professional platforms, public profiles, job boards and company websites.
• From referrals, professional contacts, clients, independent recruiters and search partners.
• From referees, former employers, educational institutions and verification providers.
• From information generated during interviews, assessments and communications with WGP or our clients.

4. How We Use Candidate Data

We may use candidate data to:

• Identify and contact you about suitable current or future opportunities.
• Assess your experience, qualifications, interests, availability and potential fit.
• Discuss roles, organisations, compensation, location, mobility and other relevant considerations with you.
• Prepare candidate summaries, shortlists and recruitment materials.
• Present or discuss your candidacy with a client after you have authorised us to do so, or where you have otherwise authorised the disclosure and it is permitted by law.
• Arrange interviews, collect and communicate feedback, manage offers and support placement or onboarding.
• Conduct appropriate reference, qualification, identity, employment or work-authorisation checks.
• Maintain recruitment records, manage placements and provide related services.
• Comply with legal, regulatory and contractual requirements, and manage disputes or claims.

5. Sharing Candidate Data with Clients and Partners

Before presenting identifiable candidate information to a client, we will obtain your consent, unless you have already provided consent covering that presentation or an exception under the PDPA or other applicable law applies. We will limit any disclosure to information relevant to the opportunity and share it only with clients, authorised search or recruitment partners, service providers and other persons involved in the recruitment process, subject to confidentiality and purpose limitation.

For cross-border assignments, your data may be shared with a client or authorised partner outside Singapore. The overseas transfer safeguards described in the General Privacy Policy will apply.

6. Accuracy and Candidate Responsibilities

You should provide information that is accurate, complete and not misleading, and inform us of material changes that may affect a recruitment process. You should not provide confidential information belonging to a current or former employer unless you are authorised to do so.

7. Withdrawal, Access and Correction

You may withdraw consent, request access to your personal data, or request correction of errors or omissions by contacting privacy@whitegatepartners.sg. Withdrawal may affect our ability to consider or represent you for opportunities, and we will explain the likely consequences before processing the request.

We will generally respond to access or correction requests within thirty (30) calendar days, subject to identity verification, applicable exceptions and any extension permitted by law.

8. Retention of Candidate Data

Candidate records are generally reviewed for deletion or anonymisation within two (2) years of our last meaningful interaction. We may retain information for longer where there is an ongoing recruitment relationship, placement, guarantee period, contractual obligation, legal requirement, dispute or other legitimate business reason.

9. Contact

Questions, requests, complaints or feedback relating to this Notice or your personal data may be directed to: