This is the Cookie Policy of Hotlotz Pte Ltd (Company Number 201524698M), with office address at 28 Jalan Kilang Barat, Singapore 159362 ("us", "we" or "our").
This Cookie Policy forms part of Hotlotz’ Privacy Policy ("Privacy Policy"). If you have any data privacy queries or requests in relation to your personal data, please refer to our Privacy Policy.
1.What are cookies?
Cookies are small data files sent by a website to your computer that are stored on your hard drive when you visit certain online pages of our website. Each cookie is unique to your web browser. It will contain some anonymous information such as a unique identifier and the site name and some digits and numbers.
Cookies may be essential to enable you to move around our website, webpage or mobile application and use its features, which may not work properly, or at all, if you do not allow these cookies to be used. Cookies allow the website to identify and interact with your computer (for example so we can remember your login details if you have opted to 'stay signed in'). For example, some cookies are used by us to collect information about how visitors use our website. We use the information to compile reports and to help us improve our website. The cookies collect information, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. It allows a website to remember things like your preferences or what’s in your shopping basket.
2.The types of cookies that we use:
2.1 Strictly necessary cookies
These cookies are essential to enable you to visit our website and use its features, such as accessing secure areas of the website. Most of the functions on our website will not work properly if you do not allow these cookies to be used. They include, for example, cookies that enable you to log into secure areas of our website and place bids. We may not be able to provide many of the services you may wish to request unless you accept the use of these cookies.
2.2 Performance cookies
These cookies collect information about how visitors use a website, e.g. which pages visitors go to most often. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are visiting it. This helps us to improve the way our website works, for example, by ensuring that visitors are finding what they are looking for easily. [These cookies do not collect information that identifies a visitor: all information these cookies collect is aggregated and is therefore anonymous. The information is only used to improve how the website works.]
2.3 Functionality cookies
We use third party functionality cookies to personalise our content for you and make your browsing experience more convenient. These cookies allow the website to remember choices you make (such as your username) and provide enhanced, more personal features (for example, remembering changes you have made to text size and fonts). These are used to recognise you when you return to our website. This enables us to greet you by name and remember your preferences for example, your choice of language or region and allow us to customise our site according to your individual interests.
2.4 Targeting cookies
These cookies record your visit to our website, the pages you have visited and the links you have followed. They are anonymous so cannot be used to identify individuals. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
2.5 Third party advertising and analytics cookies
We use third party analytics software to collect data about traffic to our site and how visitors use our site via a display advertising cookie. The display advertising cookie allows advertising to be targeted to you based on your preferences, browsing habits on our site, the type of ads you show an interest in and other data the third party may collect from your visits to other sites outside the control of Hotlotz. These cookies are used for statistical analysis by allowing the third party to count how many people have seen the advertisement or have seen it more than once, limit the number of times you see an advertisement, and/or help measure the effectiveness of an advertising campaign. They might also allow the third party to tailor advertising to you when you visit other websites. None of these cookies store personally identifiable information and we only use trusted advertising partners. These third parties will have their own privacy policies and they may be different from ours.
3.Your cookies setting
You can set your browser to accept or reject all cookies or notify you when a cookie is sent. If you reject cookies or delete our cookies, you may still use our websites, but you may have reduced functionality and access to certain areas of our websites or your account. Your continued use of our website is your acceptance of our continued use of cookies on our website.
4.Notifications to your mobile devices
We may deliver information or notifications to your phone or mobile device. You can disable these notifications by changing the settings in either the app or on your mobile device.
5.Changes to our cookies policy
We reserve the right to amend or update this Cookies Policy at any time. We will notify users by posting any updated policy on this page and such changes will be effective immediately and without further notice. Where appropriate, we may notify you directly of changes to this Cookies Policy either through email or a prominent notice on our website.
Purpose | Legal basis for processing personal data under GDPR (Please refer to section 5 below) | Legal basis for processing personal data under Singapore PDPA |
your access or use of, or to otherwise provide or administer, our products, services, information, content, features, premises or other business activities (including verifying your identity, know your customer, eligibility, membership or subscription, accepting, rejecting or blocking you if needed, and selling or purchasing property or services) | Legitimate interests Performance of a contract (for membership or subscription and selling or purchasing property or services) | Consent Legitimate interests Contractual necessity |
to enter into or perform any contract with you, including processing of any payments, refunds, deliveries and logistics | Performance of a contract | Consent Contractual necessity |
notifying you about changes to our products, services, information, content, features, premises or other business activities | Legitimate interests (if you have previously requested or received services) Consent (if you have not requested or received services but have signed up to receive Hotlotz’ marketing materials) | Legitimate interests (if you have previously requested or received services) Consent |
responding to enquiries and requests from you or people you have authorised | Performance of a contract | Contractual necessity |
forecasting, planning, record keeping, management and administration | Legitimate interests | Legitimate interests Compliance with a legal obligation |
contact relationship management, managing your membership or account and providing you with customer support | Legitimate interests | Consent Legitimate interests |
benefit, loyalty, promotional and reward programs | Legitimate interests | Consent Legitimate interests |
market research, business and sales analysis or analytics, feedback and satisfaction surveys to improve our products, services, information, content, features or premises | Legitimate interests | Consent Legitimate interests |
ensuring that our websites, webpages or applications are presented in the most effective manner for you and your devices | Legitimate interests | Consent Legitimate interests |
product and service improvement, enhancement, personalisation, design or development | Legitimate interests | Consent Legitimate interests |
training, learning and development | Legitimate interests | Consent Legitimate interests |
advising you of forthcoming sales, events, products and services | Legitimate interests (if you have previously requested or received services) Consent (if you have not requested or received services but have signed up to receive Hotlotz’ marketing materials) | Consent Legitimate interests |
providing updates, offers, promotions, invitations to events and relevant advertising and informing you about products and services | Legitimate interests (if you have previously requested or received services) Consent (if you have not requested or received services but have signed up to receive Hotlotz’ marketing materials) | Consent Legitimate interests |
ensure the safety and security of our properties and systems and other security and risk management or information | Legitimate interests | Consent Legitimate interests |
conducting checks against money laundering, terrorism/proliferation financing and related risks | Compliance with a legal obligation | Consent Compliance with a legal obligation Legitimate interests |
preventing and detecting fraud or other crimes or other wrongdoing or recovering debts | Compliance with a legal obligation | Consent Compliance with a legal obligation Legitimate interests |
conducting internal audits or investigations | Legitimate interests | Consent Legitimate interests |
resolving any disputes or in relation to any transaction, demand, order, request, right, enforcement, property or safety issue, claim, proceeding, insurance or other law, regulation or requirements | Legitimate interests | Consent Compliance with a legal obligation Legitimate interests |
in connection with any corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the event of insolvency or the like | Legitimate interests | Consent Legitimate interests |
complying with other laws, regulations or requirements, including providing assistance to law enforcement, judicial and other government agencies | Compliance with a legal obligation | Consent Compliance with a legal obligation Legitimate interests |
working with any third party including our service providers (including the ATG group and thesaleroom.com, our whitelabel online auction platform provider, Stripe, our payment processing, Persona, our know your customer and identity verification provider, and delivery and shipping providers) | Legitimate interests | Consent Legitimate interests |
We may contact you for the above purposes by telephone call, email, text or SMS messaging, post and other means.
We will not use your personal data for purposes other than those for which we have informed you, or which are permitted under applicable laws and regulations.
Overview
Singapore has a very stringent AML/CTF/CPF regulatory framework including specific requirements relating to Precious Stones and Precious Metals Dealers (PSMDs).
Hotlotz is committed to conducting business in accordance with ethical standards and in compliance with applicable AML/CTF/CPF laws and regulations in Singapore, including:
● The Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act
● The Anti-Money Laundering and Other Matters Act
● The Terrorism (Suppression of Financing) Act
● The Precious Stones and Precious Metals (Prevention of Money Laundering, Terrorism Financing and Proliferation Financing) Act
● The Precious Stones and Precious Metals (Prevention of Money Laundering and Terrorism Financing) Regulation
● Any sanctions/terrorist designation requirements
As part of these requirements, customer and other identities may need to be KYC-ed in order to verify them.
This policy sets out the framework for detecting, preventing, and reporting relevant activities in the course of Hotlotz’s business, using a business-risk and risk-based approach. This includes the fact that:
● Hotlotz operates a cashless business and does not accept or pay any form of currency or bank cheques or other cash equivalent means.
● Payments can only be accepted from the individual or organisation that is named as the winning bidder on the invoice and not a third party.
● Hotlotz can only make settlement payments to the individual or organisation that is named as the registered seller on the sales contract and not a third party.
This policy applies to Hotlotz (and Hotlotz affiliate) employees (who receive regular training on these topics), contractors and sub-contractors.
It also applies to all customers and counterparties engaging with Hotlotz, including buyers and sellers, and all transactions involving items facilitated by Hotlotz.
Customer due diligence
Customer due diligence may need to be conducted as follows:
● Prior to establishing a business relationship with a customer
● When there is suspicion of money laundering/terrorism financing/proliferation financing
● When there is doubt about the accuracy of previously obtained customer information
All bidders in auctions must register and may be held for approval by Hotlotz while customer due diligence is confirmed or carried out.
Information about customers and transactions is also shared by our white label platform providers, thesaleroom.com and liveauctioneers.com, aggregated from thousands of auction houses around the world who also use those platforms.
Any of the following information may be requested:
For Individuals:
● Full name
● Date of birth
● Nationality
● Identification document (NRIC, passport, or equivalent) with photograph
● Residential address
● Contact number/email
● Occupation and source of funds (when required)
For Entities:
● Company name and registration number
● Date of incorporation
● Place of incorporation
● Registered office and place of business address
● Phone/email
● Nature of business
● Proof of ongoing existence
● Constitution or equivalent
● Identity of senior management
● Details of directors and ultimate beneficial owners (UBOs)
● Identification documents of UBOs
Information may need to be verified using reliable, independent source documents.
Enhanced due diligence
Enhanced due diligence may need to be applied in higher-risk scenarios, such as:
● Politically Exposed Persons (PEPs)
● Transactions involving high-value or unusual items
● Customers from high-risk jurisdictions as identified by the G7’s Financial Action Task Force
● Higher-risk businesses, activities, sectors or customers
● Non-face-to-face customers
Enhanced due diligence measures may include:
● Using technology equivalent to face-to-face measures
● Obtaining additional identification documents
● Corroborating source of wealth or funds
● Conducting background checks
● Enhanced ongoing monitoring
● Obtaining management/executive internal approval
Monitoring and records
Hotlotz may monitor customer transactions to ensure consistency with the customer’s profile. We may scrutinize large or complex transactions with no apparent economic or lawful purpose. We may also review customer profiles and records on a periodic basis.
All customer due diligence records may be retained for at least 5 years after the end of the business relationship or completion of the transaction. Transaction records may need to be sufficient to permit reconstruction of individual transactions.
Reporting
All staff are required to report any suspicious transactions or customers promptly to the Compliance Officer.
The Compliance Officer is responsible for assessing the suspicion and, if necessary, filing a Suspicious Transaction Report (STR) with the Suspicious Transaction Reporting Office (STRO).
No customer will be informed (tipped off) about a STR filing.
Cash Transaction Reports (CTR) and semi-annual returns are also submitted as required.
Governance
Customer-facing employees are the first line of defence for identifying, assessing and controlling money laundering/terrorism financing/proliferation financing risks. The second line of defence includes support functions such as operations when they process transactions. The third line of defence is the internal compliance function.
The Hotlotz Managing Director is the designated Compliance Officer responsible for overseeing AML/CTF/CPF/KYC compliance.
Periodic internal audits are conducted to test the effectiveness of Hotlotz’s policies and procedures.
The Hotlotz directors and senior management are responsible for ensuring resources and authority are provided to enforce this policy. They have set a clear risk appetite and ensure a compliance culture where financial crime is not acceptable.
Sanctions
Hotlotz screens customers and transactions against relevant sanctions/terrorist designation lists (including those kept by the Ministry of Home Affairs and Monetary Authority of Singapore).
The aim of which is to ensure that no business will be conducted with any person or entity on the sanctions lists or in violation of sanctions laws.