Your Data Has Value. Your Trust Matters More. How Circles.Life Approaches Privacy and Security

Quick Answer

Circles.Life's Data Protection Policy, effective 11 February 2025, explains what personal data may be collected and why, and limits collection to what is necessary. It gives customers routes to withdraw consent, request access or correction and contact a Data Protection Officer. It also describes security arrangements, retention and overseas transfers. 

Key Takeaways

• Personal data has value, but the trust behind it matters more.

• Privacy covers what is collected and why. Security covers how it is protected.

• Responsible handling runs through the full lifecycle, from collection to deletion.

• Circles.Life's policy states collection limits, conditions for sharing and routes for consent, access and correction.

The Part of Your Mobile Service You Rarely Think About

You probably think about your mobile service in terms of calls, data, roaming and how easily you can get things done. There is another side to that relationship that rarely gets the same attention: the information you hand over along the way.

Your name and number. The ID you used to sign up. How you pay, and what you asked for last month. Each detail feels small. Together, they describe you.

Personal data has value. The greater value is the trust you place in whoever receives it.

That is why privacy and data protection belong inside the customer relationship, not in a legal footnote. This guide covers why it matters, what a responsible digital telco should do, and what Circles.Life's published policy actually says.

Why Personal Data Has Real Value

One phone number is just a number. Add a name, an address, a billing history, a device and a support record, and the picture gets much more detailed.

For a mobile provider, that picture can include identity details, contact information, account and subscription records, billing and payment information, technical data and customer support notes. Mobile data privacy starts with noticing how quickly those small details add up.

Companies value this information because it lets them verify you, bill you correctly and help when something goes wrong. You value it because it is yours. Both things are true at once.

Privacy and Security Are Connected, But They Are Not the Same

Privacy is about choices: what is collected, why, how it is used, who can see it and how long it is kept. Security is about protecting that information from unauthorised access, loss or misuse.

Here is a simple example. Whether a company needs your home address is a privacy question. How that address is stored is a security question.

Security protects the information. Transparency helps protect the relationship.

You need both. A well-protected record that nobody explained still leaves questions. A clear explanation means little if the record is poorly protected.

What Responsible Data Handling Should Look Like

Privacy protection is a lifecycle, not a single control. Follow one piece of information from the moment you share it, and six things should happen.

1. Collect with purpose. Ask for what is needed, for a stated reason, rather than everything that might be useful someday.

2. Explain clearly. Put the reasons in a privacy notice a customer can read without a legal dictionary.

3. Protect appropriately. Match the safeguards to how sensitive the information is.

4. Give meaningful control. Let customers ask questions, see their data, correct it and withdraw consent where that is possible.

5. Retain responsibly. Keep information only while there is a real reason to, then delete or anonymise it.

6. Review and improve. Revisit policies regularly, because practices that were right once can age.

What Should Customers Expect From a Digital Telco?

Five things, in plain terms:

• Transparency: clear answers on what is collected and why.

• Purpose: use of data for reasons connected to the service, not whatever is convenient.

• Protection: reasonable security arrangements around the information held.

• Customer control: real routes to access, correct and withdraw consent.

• Accountability: a named point of contact and a company that stands behind its published words.

Data protection in Singapore starts with the Personal Data Protection Act 2012, which sets the legal baseline. Under PDPA Singapore rules, the PDPC's published obligations cover consent, notification, protection, retention, overseas transfer, and access and correction, among others. The PDPC also issues PDPA Singapore guidelines that explain how organisations apply them.

The law is the floor. Customer data privacy earns trust when a company explains itself in plain language.

How Circles.Life Approaches Privacy and Data Protection

Circles.Life sets out its approach in its Circles.Life Data Protection Policy, effective 11 February 2025. Here is what it says, in everyday language.

What may be collected, and why

Depending on your relationship with Circles.Life, the policy lists account details, billing and payment information, identification numbers such as NRIC, FIN or passport, subscription and order records, technical information about devices and sessions, and customer support records.

Stated purposes include verifying identity, providing the service, billing, customer care, credit checks, improving operations, preventing fraud and meeting legal requirements. Marketing is listed too, and it has its own opt-out, covered below.

Limits on collection and sharing

The policy says collection is limited to what is necessary for the identified purposes. It also states that Circles.Life will not sell personal data for payment to anyone for unauthorised purposes.

Personal data is not disclosed to third parties without your consent, with listed exceptions such as legal requirements, emergencies that threaten life, health or safety, investigations and public-interest cases.

Consent, access and correction

You can ask the Data Protection Officer to withdraw your consent. The policy is upfront that withdrawing may limit the services Circles.Life can provide.

Marketing messages have a separate route: the unsubscribe option, Manage My Account or the customer service hotline.

You can also request access to, or correction of, your personal data in writing. Once the request has enough detail, the policy says Circles.Life will seek to respond within 30 days or as applicable law requires, and will tell you if it needs longer. A reasonable fee may apply to access requests, with a written estimate provided.

Security, retention and overseas transfers

Circles.Life states that it puts reasonable security arrangements in place against unauthorised access, collection, use, disclosure, copying, modification, leakage, loss, damage or alteration.

Personal data is kept only as long as needed for the stated purposes or as law requires. After that, the policy describes destruction or anonymisation.

Because Circles.Life's affiliates and service providers operate around the world, data may be transferred overseas. The policy says this follows applicable law, including consent unless an exception applies, and steps to ensure the recipient is legally bound to protect the data.

Singapore context and who to contact

The Singapore supplement explains that, beyond the exceptions in the PDPA, the Telecommunications Code of Practice allows certain uses without consent: network planning and maintenance, interconnection between telecommunications licensees, and roaming information for inbound roamers.

Questions go to the Data Protection Officer at dpo@circles.co.

Trust Is Built Into the Details

Anyone can write a promise. Trust becomes believable when the details can be checked.

Here is what can be checked. A policy that is public and carries an effective date. Clear routes for consent, access and correction requests. A described approach to security, retention and overseas transfers. And a vulnerability disclosure program on the Circles.Life website that invites security researchers to report issues, with reports triaged through HackerOne.

The policy also says Circles.Life reviews its policies, procedures and processes from time to time, and encourages customers to check back for updates. That is accountability in a practical form.

No policy removes every risk. That is why a clear route for questions matters as much as the policy itself.

What You Can Do With Your Own Data

Trust runs both ways. A few habits keep your side strong.

• Read the privacy notice before you agree. Focus on purposes, sharing and how to withdraw consent.

• Keep your details current. The policy notes that accuracy depends partly on customers telling Circles.Life when details change.

• Turn on two-factor authentication. The Cyber Security Agency of Singapore's 2024 survey found 41% of respondents had enabled it for all their online accounts and apps, up from 35% in 2022. Applying practical mobile device security habits further reduces your risk of unauthorised account access.

• Pause before sharing an OTP or personal details. Phishing reports to CSA fell about 21% in 2025, to roughly 4,800 from about 6,100. Knowing how to protect yourself and report scammers helps keep Singapore's digital space safer for everyone.

• Know where to ask. Privacy questions go to the Data Protection Officer, but reviewing a general app permissions and privacy guide is an easy way to check what data third-party applications are accessing in the background.

The Trust Behind Staying Connected

Every time you top up, sign up, call support or tap "agree", you hand over a small piece of yourself. Most days, nobody thinks about it again.

That is exactly why it deserves care. Behind every bill and every call is a person trusting that their details will be handled with respect.

Circles.Life's privacy and data protection policy puts that respect in writing: what is collected and why, what is limited, what you can ask for, and who to ask. Written down, it can be read, questioned and held to account.

Your data has value, but your trust matters more. Connectivity may be the service, yet trust is the relationship behind it, and the work ahead is to keep earning it.