Privacy Policy
Last updated: 2026-05-23
1. Scope and Co-Controllers
This Privacy Policy governs the collection, processing, storage, and cross-border transfer of personal data by Mentawai One Pte. Ltd. (incorporated in Singapore, UEN: 20260321M) and its joint venture affiliates, including PT Mentawai One Indonesia (the registered developer and operator of the Special Economic Zone). Mentawai One acts as co-controllers of your personal information, aligning with the Personal Data Protection Act 2012 (PDPA) of Singapore and Law No. 27 of 2022 on Personal Data Protection (UU PDP) of the Republic of Indonesia.
2. Categories of Personal Data Collected
We collect and process personal data that is necessary to facilitate your engagement with the Mentawai One programme. This includes:
• Identity and Contact Data: Full name, corporate designation, business/residential address, email address, and telephone numbers.
• Investor and Accreditation Data: Financial profiles, investment preferences, source of funds declarations, and accreditation credentials required under Singapore SFA and Indonesian OJK regulations.
• Technical and Usage Data: Internet Protocol (IP) addresses, device types, browser configurations, page interaction timings, and language preference details (including the 'site-locale' cookie).
• Identity and Contact Data: Full name, corporate designation, business/residential address, email address, and telephone numbers.
• Investor and Accreditation Data: Financial profiles, investment preferences, source of funds declarations, and accreditation credentials required under Singapore SFA and Indonesian OJK regulations.
• Technical and Usage Data: Internet Protocol (IP) addresses, device types, browser configurations, page interaction timings, and language preference details (including the 'site-locale' cookie).
3. Legal Bases and Purposes of Processing
Your personal data is collected and processed under the following lawful bases and for the specified purposes:
• Consent: When you voluntarily submit contact or registration requests, or consent to analytical cookies.
• Contractual Obligation: To facilitate administrative onboarding, joint-venture preparations, and investor portal access.
• Legal and Statutory Compliance: To comply with anti-money laundering (AML/CFT) rules under the Monetary Authority of Singapore (MAS) and the Indonesian Financial Transaction Reports and Analysis Center (PPATK), as well as mandatory reporting to the Indonesian KEK Administrator.
• Legitimate Interests: To protect the security and integrity of our digital platforms and evaluate land-use, B-Corp community, and conservation feedback.
• Consent: When you voluntarily submit contact or registration requests, or consent to analytical cookies.
• Contractual Obligation: To facilitate administrative onboarding, joint-venture preparations, and investor portal access.
• Legal and Statutory Compliance: To comply with anti-money laundering (AML/CFT) rules under the Monetary Authority of Singapore (MAS) and the Indonesian Financial Transaction Reports and Analysis Center (PPATK), as well as mandatory reporting to the Indonesian KEK Administrator.
• Legitimate Interests: To protect the security and integrity of our digital platforms and evaluate land-use, B-Corp community, and conservation feedback.
4. Cross-Border Data Transfers
Mentawai One operates dynamically between its corporate headquarters in Singapore and the Special Economic Zone development site on Siberut Island, West Sumatra, Indonesia. Consequently, your personal data will be transferred, processed, and stored across national boundaries. In accordance with Chapter VI of the Singapore PDPA and Article 56 of the Indonesian UU PDP, we implement stringent protection standards (including intra-group data sharing agreements and Standard Contractual Clauses) to ensure that the recipient jurisdictions provide a level of data protection equivalent to that of the originating jurisdiction.
5. Data Retention and Security
We implement appropriate technical and organisational security measures (including end-to-end encryption, restricted access protocols, and regular penetration testing) to guard against unauthorised access, alteration, or loss. In compliance with Indonesian sectoral and tax regulations, and standard Singapore administrative laws, personal data is retained for a standard period of five (5) years from the date of last active transaction, or for as long as required to resolve legal disputes or statutory audit obligations.
6. Your Legal Rights
As a data subject under the Singapore PDPA and Indonesian UU PDP, you hold comprehensive rights regarding your personal information, including:
• Access and Information: The right to request copies of your personal data and detailed info on its processing.
• Rectification: The right to correct incomplete, outdated, or inaccurate personal records.
• Erasure (Right to be Forgotten): The right to demand deletion of your records under UU PDP and PDPA parameters when data is no longer necessary or consent is withdrawn.
• Withdrawal of Consent: The right to revoke consent for any processing grounded in prior consent.
• Access and Information: The right to request copies of your personal data and detailed info on its processing.
• Rectification: The right to correct incomplete, outdated, or inaccurate personal records.
• Erasure (Right to be Forgotten): The right to demand deletion of your records under UU PDP and PDPA parameters when data is no longer necessary or consent is withdrawn.
• Withdrawal of Consent: The right to revoke consent for any processing grounded in prior consent.
7. Data Protection Officer (DPO) and Enquiries
For formal inquiries, data rights requests, or to register a concern regarding our personal data handling practices, please contact our Data Protection Officer:
Email: dpo@mentawai.one or privacy@mentawai.one
Singapore Address: Mentawai One Pte. Ltd., Attn: Data Protection Officer, 10 Collyer Quay, Ocean Financial Centre, Singapore 049315
Indonesia Address: PT Mentawai One Indonesia, Attn: Legal and Compliance, Gedung KEK, Jl. Raya Padang-Painan, Padang, West Sumatra, Indonesia
Email: dpo@mentawai.one or privacy@mentawai.one
Singapore Address: Mentawai One Pte. Ltd., Attn: Data Protection Officer, 10 Collyer Quay, Ocean Financial Centre, Singapore 049315
Indonesia Address: PT Mentawai One Indonesia, Attn: Legal and Compliance, Gedung KEK, Jl. Raya Padang-Painan, Padang, West Sumatra, Indonesia
