Privacy Policy

1. Data Controller and Contact Details

For the purposes of the PDPA, the organisation responsible for the personal data described in this Policy is:

• Natural Wild Honey Pte. Ltd.
• Registered address: 22 New Industrial Road, #05-20/21 Primax, Singapore 536208
• Email: sales@naturalwildhoney.com.sg
• Telephone: 62823743 / 94870358
• Website: https://naturalwildhoney.com.sg

2. Scope and Application

This Policy applies to personal data collected through our website, checkout process, customer accounts, administrative systems, email communications, telephone enquiries, in-store interactions linked to online accounts, and any other channel through which you provide personal data to us in connection with the Services.

This Policy does not apply to third-party websites, payment gateways, or platforms that may be linked from our website. Those third parties are independently responsible for their own privacy practices.

3. Definitions

In this Policy, "personal data" has the meaning given in the PDPA and refers to data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access.

"Customer", "you", or "your" means any individual who browses, registers for, or uses the Services, or otherwise provides personal data to us.

4. Personal Data We Collect

We collect personal data that is reasonably necessary for us to provide the Services, process transactions, comply with law, and operate our business. The categories of personal data we may collect include:

• Identity and contact data: full name, email address, telephone number, billing and delivery addresses, postal code, and unit number (where applicable).
• Account data: login credentials, account preferences, order history, saved addresses, and communication records associated with your account.
• Transaction data: order details, product selections, payment status, delivery instructions, invoices, receipts, and correspondence relating to purchases.
• Payment-related data: payment method selected and transaction references generated by our payment processors. We do not store full payment card numbers on our servers; card and wallet processing is handled by our payment service providers.
• Review and feedback data: product ratings, review titles and content, language preference, verification status, and any information you voluntarily include in reviews or customer support messages.
• Technical and usage data: IP address, browser type, device information, session identifiers, pages visited, and timestamps, collected through server logs, cookies, and similar technologies. Essential technologies support authentication, security, and cart functionality. Planned analytics and advertising technologies are described separately in Section 8.
• Marketing and communications data: your responses to promotions, enquiry forms, and records of consent or opt-out preferences where applicable.

5. Purposes for Collection, Use, and Disclosure

We collect, use, and disclose personal data for the purposes notified to you at or before the point of collection, or for purposes reasonably related thereto, including:

• processing and fulfilling orders, arranging delivery, and providing customer support;
• creating and administering customer accounts, including password reset and order tracking;
• processing payments, preventing fraud, and reconciling transactions;
• communicating with you about orders, deliveries, refunds, product information, and service updates;
• displaying verified product reviews and aggregated rating information on our website;
• complying with legal, regulatory, tax, and accounting obligations;
• enforcing our Terms of Service, protecting our rights, and managing disputes;
• improving our website, products, and customer experience through internal analysis;
• where analytics or advertising tools are enabled, understanding website usage, measuring advertising results, and supporting relevant advertising, subject to the notices and applicable PDPA requirements described in Section 8;
• sending marketing communications where you have provided consent or where permitted by law, and honouring withdrawal of consent or opt-out requests.

6. Consent, Notification, and Withdrawal

Under the PDPA, we will not collect, use, or disclose your personal data without your consent except as authorised under the PDPA or other applicable law.

Where consent is required, we seek consent that is informed, specific, and freely given. You may withdraw consent at any time by contacting us at the email address in Section 1, subject to legal and contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide certain Services, including order fulfilment and account access.

If you provide personal data relating to another individual (for example, a delivery recipient), you represent and warrant that you have obtained that individual's consent for you to provide their personal data to us for the purposes described in this Policy.

7. Disclosure of Personal Data

We may disclose personal data to the following categories of recipients where necessary for the purposes in Section 5:

• payment processors and financial institutions, including Stripe and HitPay, for secure payment processing;
• logistics and courier partners for delivery within Singapore;
• technology service providers, including hosting, database, authentication, and email delivery providers (such as Supabase and Resend), engaged under contractual obligations of confidentiality and data protection;
• where the tools described in Section 8 are enabled, analytics and advertising providers such as Google and Meta, for the purposes and data processing described in that section;
• professional advisers, auditors, insurers, and consultants bound by confidentiality obligations;
• government authorities, regulators, courts, or law enforcement agencies where required or permitted by law;
• successors in title in the event of a merger, acquisition, reorganisation, or sale of assets, subject to appropriate safeguards.

8. Cookies and Similar Technologies

Our website uses cookies, local storage, session storage, and similar technologies to support secure login sessions, shopping carts, checkout, security, and preferences such as your selected language. Some information lasts only for a browser session; other information remains until it expires or is cleared.

Google Analytics and Meta Pixel are planned integrations and are not enabled on this website as of the Last Updated date above. The descriptions below explain their intended purposes. Before enabling them, we will review their configuration, update this Policy to reflect their actual use, and obtain consent where required or establish an applicable basis under the PDPA. Publication of this Policy or your use of the website does not, by itself, constitute consent to every form of tracking.

9. Retention of Personal Data

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, or reporting requirements, resolve disputes, and enforce our agreements.

Order and transaction records are generally retained for at least seven (7) years where required for accounting and tax compliance. Account data is retained while your account remains active and for a reasonable period thereafter. Marketing suppression records may be retained after opt-out to honour your preferences.

When personal data is no longer required, we will take reasonable steps to destroy or anonymise it in accordance with our internal retention schedule and applicable law.

10. Protection of Personal Data

We implement reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include access controls, secure transmission where supported, and restricted access on a need-to-know basis.

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

11. Accuracy and Correction

We take reasonable steps to ensure that personal data we use or disclose is accurate and complete, having regard to the purposes for which it is used or disclosed.

You may request correction of your personal data by contacting us at the email address in Section 1 or by updating your account details where self-service functionality is available. We will respond to correction requests within a reasonable time.

12. Your Rights under the PDPA

Subject to exceptions under the PDPA and other applicable law, you have the right to:

• request access to personal data about you that is in our possession or under our control;
• request correction of personal data about you that is inaccurate or incomplete;
• withdraw consent to our collection, use, or disclosure of your personal data, subject to legal and contractual restrictions;
• lodge a complaint with us regarding our handling of your personal data.

13. Marketing Communications and the Do Not Call Registry

We will not send marketing messages to Singapore telephone numbers registered on the Do Not Call Registry unless we have obtained the requisite consent or an applicable exemption applies under the PDPA and related regulations.

Where available at checkout, you can choose whether to receive marketing by email, SMS, or phone, and adjust the individual channels. Marketing is optional and separate from acceptance of our Terms of Service and from order or delivery communications. Account holders can change each channel under Profile & Delivery. Previously saved withdrawals are not reset by an untouched checkout default.

You may withdraw marketing consent by contacting us at the email address in Section 1; an account login is not required to make a withdrawal request. You may also use an unsubscribe mechanism provided in a marketing email. We will apply withdrawals to the relevant sending systems and future customer-list exports; previously downloaded copies of an export are snapshots and must be refreshed before use.

14. Personal Data of Minors

Our Services are intended for individuals who are at least eighteen (18) years of age or who have parental or guardian consent to place orders. We do not knowingly collect personal data from children without appropriate consent. If you believe we have collected personal data from a minor without proper authority, please contact us immediately.

15. Changes to This Policy

We may update this Policy from time to time to reflect changes in law, regulatory guidance, technology, or our business practices. The updated version will be posted on this page with a revised "Last Updated" date.

Where changes materially affect how we use personal data previously collected, we will provide notice as required by the PDPA, which may include email notification or a prominent notice on our website. Continued use of the Services after the effective date of an updated Policy constitutes your acknowledgement of the updated Policy, subject to any additional consent required by law.

16. Governing Law

This Policy is governed by the laws of the Republic of Singapore. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Singapore, without prejudice to your rights under the PDPA to lodge a complaint with the PDPC.