1. Definitions in Policy

1.1 “Company” shall mean:

  • YY Group, including its subsidiaries, affiliates, and associated entities engaged in HR management services in Singapore.
  • The WheelHR platform, as described at https://wheelhr.com/.
  • Directors, shareholders, employees, advisors, managers, and legal representatives of YY Group.

1.2 “Application” shall mean the WheelHR mobile application, available for download and installation by employees, HR administrators, managers, and super admins to support HR functions such as payslip viewing, claims, leave, rosters, policies, notices, feedback, and inbox management.

1.3 “Software” shall mean all software owned by the Company that supports the Application, enabling seamless HR operations.

1.4 “Platform” shall mean the Company’s technology platforms, digital portals, and website (https://wheelhr.com/) used in conjunction with the Application and Software for HR management.

2.Introduction

The Company values the information you provide or permit us to collect through the WheelHR Application, Software, and Platform. We are committed to protecting your privacy while delivering efficient HR services. All personal data in our possession is collected, used, disclosed, and protected in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA).

This Privacy and Data Protection Policy applies to all personal data submitted via the Application, Platform, or Software, including data received from employers or third parties. By using WheelHR, you agree to this policy’s terms. Please review it carefully before using the Application or providing personal data.

3.PDPA

In Singapore, Personal data is protected under the Personal Data Protection Act 2012 PDPA). The PDPA establishes a data protection law that constitutes various rules governing the collection, use, disclosure and handling of personal data. It acknowledges both the rights of individuals to protect their personal data, including rights of access and correction; and the requirements of organisations to collect, use or disclose personal data for legitimate and reasonable purposes.

In accordance to Advisory Guidelines on the Personal Data Protection Act (“PDPA”) for NRIC and Other National Identification Numbers (“NRIC Guidelines”), organisations are typically not allowed to collect, use or disclose an individual’s NRIC number (or copy of NRIC) from 1st of September 2019 unless:

In accordance to Advisory Guidelines on the Personal Data Protection Act (“PDPA”) for NRIC and Other National Identification Numbers (“NRIC Guidelines”), organisations are typically not allowed to collect, use or disclose an individual’s NRIC number (or copy of NRIC) from 1st of September 2019 unless:

a) required under the laws in Singapore (or an exception under the PDPA applies); or

b) necessary to accurately establish or verify the identity of the individual to a high degree of fidelity, where the failure to do so would pose a significant safety or security risk or significant impact or harm to an individual and/or organisation.

4. Personal Information and Other Relevant Data Collected

Personal data, as defined by the PDPA, refers to data about an identifiable individual. We collect personal data necessary for WheelHR’s HR functions, including:

  • Name, email address, phone number, address.
  • Bank account details (for salary/claim payments).
  • Employee ID, payslip details, claim details (e.g. medical claims).
  • Leave data (e.g., type, dates, reason).
  • Roster details (e.g., work schedules).
  • Feedback comments and inbox messages.
  • Details of interactions with WheelHR (e.g., policy views, notice acknowledgments).
  • Device information (e.g., device type, IP address, identifiers).
  • Usage data (e.g., payslip views, claim submissions).
  • Analytics data (via tools like Google Analytics).

Some data, like bank details, is sensitive. We collect such data only when permitted by law and necessary for HR purposes (e.g., payroll verification).

5. Collection of Personal Data

We collect personal data:

  • Directly from You: When you input data (e.g., leave applications, claims, feedback).
  • From Employers: When your employer provides data (e.g., payslips, rosters, policies).
  • Automatically: Via Application usage, cookies, or tracking technologies.
  • From Third Parties: From service providers (e.g., payroll processors) or public sources, where lawful.

Non-personal data (e.g., browser type, App usage duration) may be collected to improve WheelHR. We may also collect data for purposes notified at the point of obtaining your consent.

6. Use of Cookies

Cookies are small files requiring your permission to be installed on your device. They analyze browsing patterns to tailor WheelHR’s functionality to your needs. Most browsers enable cookies by default, but you can disable them in your settings, which may limit features like payslip access.

We use cookies to:

  • Track usage (e.g., roster views) for analytics.
  • Enhance functionality (e.g., inbox session management).
  • Gather statistical data (removed after analysis).

Cookies do not access your device beyond WheelHR-related activity.

7. Age Limitations

WheelHR is intended for workplace use by individuals of sufficient legal age (18 and above). If we learn a user under 16 has provided data without parental consent, we will delete it promptly. Contact our Data Protection Officer (section 13) to report such cases.

8. Your Consent

By using WheelHR, you consent to the collection, use, and disclosure of your personal data as described herein, subject to updates per section 11. Consent includes sharing data with employers or service providers to verify employment status or process HR tasks. You may withdraw consent by contacting us, though this may affect App functionality.

9. Use of Your Personal Data

We use personal data for:

  • Registering and authenticating users.
  • Verifying identity for payroll, claims, or leave.
  • Delivering services (e.g., payslip viewing, claim submissions, leave applications, roster access, policy distribution, notice delivery, feedback processing, inbox management).
  • Administering HR tasks (e.g., payroll, roster planning).
  • Sending notifications (e.g., claim status, new notices).
  • Providing customer support and resolving inquiries.
  • Analyzing usage to improve WheelHR (e.g., via analytics).
  • Conducting staff training and quality assurance.
  • Complying with laws (e.g., IRAS, MOM).
  • Preventing fraud or addressing security concerns.

10. Sharing Your Personal Data

We may share your data with:

  • Employers: For HR management (e.g., payslips, leave approvals).
  • Company Affiliates: Within Hong Ye Group’s group for operational support.
  • Service Providers: For:
    • Payroll processing (e.g., salary/claim payments).
    • Cloud storage (e.g., AWS).
    • Analytics (e.g., Google Analytics).
    • Payment gateways or mapping services (if applicable).
  • Regulatory Authorities: As required (e.g., IRAS, MOM).
  • Business Transfers: In mergers or acquisitions, with safeguards.

We do not sell personal data. If data is shared overseas, we ensure PDPA-comparable protections.

11. Third-Party Relations

WheelHR may link to third-party services (e.g., payroll systems). These have separate privacy policies, for which we are not responsible. Review their policies before sharing data.

12. Security

We protect your data with industry-standard measures:

  • Encryption for payslips, claims, and NRIC.
  • Access controls to prevent unauthorized use.
  • Regular audits to ensure integrity.

No system is fully secure, so safeguard your credentials. We are not liable for breaches beyond our reasonable control.

13. Retention

We retain data only as necessary:

  • Payroll, payslip, and claim data: 7 years, per Singapore tax/employment laws.
  • Leave, roster, feedback, and inbox data: While employed or as needed for HR.
  • Policies and notices: As relevant to employment.
  • Analytics data: Anonymized indefinitely.
  • Upon account deletion or request, we remove data unless legally required (e.g., IRAS).

14. Access, Update, Withdrawal of Consent

Understand that you may have different privacy concerns, you are entitled to be provided, upon request;

a)access to some or all your personal data that is in the Company's possession or control; or

b)information about the ways in which that personal data has been or may have been used or disclosed by the Company within a year before the date of your request

You must submit a request to the Company's data protection officer, whose contact details are set out in section 18 below, if you subsequently decide to request access to your personal data, update your personal data or withdraw your consent for us to collect, use and/or disclose your personal data, whether partial or in full. Please note that it may take up to 30 business days after receipt of your request to process your request. The Company may require further information from you to accurately verify your identity before processing your request. Kindly also take note that:

a)your updated personal data, will also be sent to all relevant parties which the Company had originally disclosed to them within a year before the date of the update, unless the relevant parties have no more legal or business purposes for the personal data.

b)the PDPA exempts certain types of personal data from being subject to your access request.

c)Should your withdrawal of consent result in any legal consequences arising from such withdrawal, and depending on the extent of your withdrawal of consent, it may result in the discontinuation on your existing relationship with the Company and may limit App access or end your WheelHR relationship.

15. Policy Variation

The Company reserve the right to amend this Privacy and Data Protection Policy at any time. If material changes are made to this Privacy and Data Protection Policy, they will be posted on this page and date stamped. The Company encourages you to review this page periodically in order for you to stay notified of any changes.

Your continued use of the Company’ Application, Platforms and Software. and acceptance of the Company’s services after any changes to this Privacy and Data Protection Policy constitutes your consent to any such changes, to the extent such consent is not otherwise provided.

16. Deactivation of Profile Policy

  • User-Initiated Deactivation: Employees can deactivate their profile via the App’s settings, confirming their choice.
  • Data Retention: Deactivated data is retained for 6 months to allow reactivation, unless deletion is requested.
  • Account Reactivation: Log in within the retention period to restore your profile.
  • Privacy and Security: Deactivated profiles are hidden from users, with data protected during retention.
  • Compliance: Deactivation complies with PDPA and Google Play rules.
  • Profile Deletion: To permanently delete your profile, contact customer support.

17. Complaint Process

If you have concerns about our data handling or PDPA compliance, contact our Data Protection Officer (section 18). We’ll address complaints promptly and fairly.

18. Contact Us

For questions, requests, or complaints, contact our Data Protection Officer:

Hong Ye Group

Email: dpo@hongyegroup.com.sg

Phone: +65 66046896 

Address: 60 Paya Lebar Rd, #09-13, Paya Lebar Square, Singapore 409051

Website: https://wheelhr.com/

19. Governing Law and Jurisdiction

This policy is governed by Singapore law, subject to PDPA rights. You agree to the exclusive jurisdiction of Singapore courts.