Privacy Policy (PDPA)

We may collect personal data such as your full name, NRIC or passport number, date of birth, gender, address, contact details (phone, email), photographs or images for identification, payment and transaction information, occupation, source of funds, purchase history, marketing preferences, and any other information that you voluntarily provide. We may also collect technical information such as IP address, browser type, and device identifiers when you use our website.

Your personal data is used to: (a) verify your identity and process membership applications; (b) process transactions, fulfil orders, and manage rewards; (c) communicate with you regarding your account, transactions, and customer support; (d) comply with legal, regulatory, and Anti-Money Laundering / Counter-Terrorism Financing obligations; (e) detect and prevent fraud or unlawful activity; (f) improve our products, services, and website experience; and (g) send marketing communications, where you have consented.

We may disclose your personal data to: (a) our affiliates, employees, and authorised personnel on a need-to-know basis; (b) third-party service providers who support our operations (e.g. payment processors, logistics providers, IT vendors); (c) regulatory or law enforcement authorities where required by law; and (d) professional advisers such as auditors and lawyers. We require all third parties to handle your personal data with appropriate confidentiality and security safeguards.

Where you have consented, we may send you marketing communications about our products, promotions, events, or new collections via email, SMS, phone, or other electronic means. You may withdraw your consent at any time by contacting us or by following the unsubscribe instructions in our messages.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations (including AMLA 2001 record-keeping requirements). When personal data is no longer required, we will take reasonable steps to securely destroy or anonymise it.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Under the PDPA, you have the right to: (a) request access to your personal data held by us; (b) request correction of any inaccurate or incomplete personal data; (c) withdraw your consent to our processing of your personal data (subject to legal or contractual restrictions); and (d) limit the processing of your personal data. Requests may be subject to a reasonable processing fee in accordance with the PDPA.

Our website uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and analyse website traffic. You may disable cookies in your browser settings, but doing so may affect the functionality of our website.

We may update this Privacy Notice from time to time to reflect changes in our practices or applicable law. The latest version will be posted on our website with the updated revision date. Your continued use of our services after such changes constitutes acceptance of the revised notice.

If you have any questions, concerns, or requests regarding this Privacy Notice or your personal data, please contact us through our official contact channels. We will endeavour to respond within a reasonable timeframe.