9.1 Withdrawal of Consent. The consent you provide for collecting, using, and disclosing your personal data will remain valid until you are withdrawing it in writing. You may withdraw consent and request us to stop using and/or disclosing your personal data for any or all of the purposes listed above by submitting your request in writing and email to our Data Protection Officer (refer to paragraph 1.4 above for contact details). Upon receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we shall seek to process your request within fourteen (14) days of receiving it. While we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue providing our goods or services to you, and we shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform us in writing and email our Data Protection Officer (see paragraph 1.4 above for contact details). Please note that withdrawing consent does not affect our right to continue collecting, using and disclosing personal data where such collection, use and disclosure without consent is permitted or required under applicable laws. If you are located in the EU, we will seek and rely on your consent as a legal basis for using your personal data where we have expressly sought it for the specific purpose(s). You will be asked to provide clear and affirmative consent to collect, process, and use your personal data. If we do rely on your consent to use your personal data, you have the right to change your mind at any time (but this will not affect any processing that has already taken place).
9.2 Access to and Correction of Personal Data. If you wish to make (A) a request for access to a copy of the personal data which we hold about you or information about the ways in which we use or disclose your personal data, or (B) a request to correct or update any of your personal data which we hold about you, you may submit your request in writing and email to our Data Protection Officer (refer to paragraph 1.4 above for contact details). Where permitted by law, we may charge you a fee to process your access request. If so, we will inform you of the fee before processing your request. We will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any personal data or make a correction requested by you, we shall generally inform you of why we are unable to do so (except where we are not required to do so under the PDPA). We may also be permitted under applicable laws to refuse a request.
9.3 Limitations. We may be permitted under applicable laws to refuse your request to exercise your rights. For example, we may refuse (A) a request for erasure where the personal data is required in connection with claims, or (B) an objection request and continue processing your personal data based on compelling legitimate grounds for the processing.