CUSTOMER PRIVACY MANAGEMENT APPROACH Yanlord is committed to implementing a comprehensive Privacy Policy, outlining the procedures used for the collection, usage, processing, disclosure, and protection of personal data acquired by or otherwise provided to the Group. This policy is accessible for review on our official website. List of Data Privacy Laws we comply with: PRC Personal Information Protection Law, Network Security Law, Data Security Law and Cybersecurity Law of the PRC Singapore Personal Data Protection Act 2012 Hong Kong SAR Personal Data Privacy Ordinance Managing Customer Privacy PRC In line with the principle of “data user is responsible”, Yanlord remains committed to safeguarding customers’ personal information by ensuring that all employees handle data security responsibly within their respective roles. Access to sensitive information, such as credit card details and guest ID data, is strictly limited to authorised personnel who are responsible for managing bookings and reservations. To prevent unauthorised disclosures, we enforce clear restrictions on sharing customer information beyond designated personnel and their areas of authorities. Yanlord continues to reinforce the importance of customer privacy protection through comprehensive employee training programs. In the Hotels & Serviced Apartments business, all employees receive mandatory training on handling guests’ personal information during onboarding, with annual refresher courses to reinforce best practices. Training topics include room entry procedures, guest confidentiality during check-in, and protocols for issuing a second room key. To uphold the security of customer data, Yanlord follows strict internal procedures, ensuring that access to personal information is restricted to authorised personnel only. We also implement secure data transfer and archiving measures to protect customer records, demonstrating our ongoing commitment to privacy and data security. Singapore In Singapore, the Group’s Privacy Policy remains in effect across all our operations, including our indirect subsidiaries, unless explicitly stated otherwise. The Do Not Call Policy, Data Breach Management Plan and Personal Data Protection Policy were formulated in conformance with the relevant laws and regulations in Singapore. In FY 2024, O’Connor’s Singapore Pte Ltd, our subsidiary, was certified with Data Protection Trustmark (DPTM), a voluntary enterprise-wide certification for organisations to demonstrate accountable data protection practices, by Infocomm Media Development Authority (IMDA). To stay ahead of industry developments, we actively participate in seminars, review industry newsletters, and keep our employees informed of the latest updates in privacy and data protection. Our Privacy Policy is periodically reviewed and updated to reflect regulatory changes, legal requirements, and emerging industry trends. This proactive approach ensures that our data protection practices remain robust, compliant, and well-adapted to the evolving landscape of privacy regulations. Contents Introduction Approach to Sustainability Upholding Good Governance Caring for Our Customers Empowering Our People Preserving Our Planet Creating Shared Value for Our Society GRI Content Index 38 Yanlord Land Group Limited Sustainability Report 2024
RkJQdWJsaXNoZXIy NTkwNzg=