Last updated: [EFFECTIVE DATE]

This Privacy Policy explains how [LEGAL ENTITY NAME] (UEN [UEN]), trading as FreshMart (“FreshMart”, “we”, “us” or “our”), collects, uses, discloses and protects your personal data when you use the FreshMart online store and related services (the “Service”). We comply with the Personal Data Protection Act 2012 of Singapore (“PDPA”). By using the Service, you agree to the collection, use and disclosure of your personal data as described in this policy.

1. Personal data we collect

We collect personal data that you give us and that is generated when you use the Service, including:

• Identity and contact details: name, email address, mobile number, delivery and billing addresses.
• Account details: login details, saved addresses, preferences, wishlist and order history.
• Order and payment details: products bought, amounts, vouchers used, delivery or collection details. Card details are handled by our payment provider; we receive only limited information such as the card brand and last four digits.
• Communications: messages, reviews, feedback and support requests you send us.
• Technical data: IP address, device and browser type, pages visited and cookie identifiers.

We do not ask for your NRIC or other national identification number, except where the law requires it.

2. How we use your personal data

• to create and manage your account;
• to process, deliver or prepare for collection, and provide support for your orders, including payments, refunds, substitutions and order updates;
• to verify transactions and prevent fraud and misuse of the Service;
• to respond to your enquiries, feedback and complaints;
• to improve our products, website and services;
• to send you marketing messages about our products and promotions, where you have consented to receive them;
• to comply with legal and regulatory obligations, including tax and accounting requirements.

3. Consent and marketing

We collect, use and disclose your personal data with your consent or where the PDPA otherwise permits. We will only send you marketing messages if you have opted in, and we comply with the Do Not Call provisions of the PDPA. You may unsubscribe at any time using the link in our emails, in your account’s privacy settings, or by contacting us. You may also withdraw your consent to our use of your personal data by contacting our Data Protection Officer. If you withdraw consent, we may not be able to continue providing some parts of the Service, and we will tell you what the consequences are before acting on your request.

4. Disclosure of personal data

We do not sell your personal data. We share it only as needed for the purposes above with:

• payment service providers that process your card or PayNow payments;
• delivery partners and our outlet staff who deliver or hand over your order;
• IT, hosting, email and customer support providers who operate the Service on our behalf;
• professional advisers, auditors, and government or regulatory authorities where required by law.

These parties may only use your personal data for the purposes we specify and must protect it.

5. Cookies

We use essential cookies to run the website, such as keeping you logged in and remembering your cart. With your consent, we also use analytics and marketing cookies. You can change your choice at any time through “Privacy & Cookie Preferences” at the bottom of every page, or through your browser settings.

6. Transfers outside Singapore

Some of our service providers may store or process personal data outside Singapore. When this happens, we take steps to ensure that your personal data receives a standard of protection comparable to that under the PDPA.

7. Protection and retention

We use reasonable administrative, physical and technical safeguards, such as encrypted connections and access controls, to protect your personal data. We keep your personal data only for as long as it is needed for the purposes for which it was collected, or as required by law (for example, transaction records kept for tax purposes), and then delete or anonymise it. If a data breach occurs that is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as required by the PDPA.

8. Access and correction

You may ask for access to the personal data we hold about you and information on how it has been used or disclosed in the past year, or ask us to correct it. You can update most details directly in your account. For other requests, contact our Data Protection Officer. We will respond as soon as reasonably possible and may charge a reasonable fee for an access request, which we will tell you about in advance.

9. Children

The Service is not intended for children under 13, and we do not knowingly collect their personal data without the consent of a parent or guardian.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page, with the date it was last updated.

11. Contact our Data Protection Officer

Data Protection Officer, [LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
Email: [DPO EMAIL]
Phone: [CUSTOMER SERVICE PHONE]