PDPA | Envy Her Moms

Personal Data Protection Act (PDPA) Notice (Singapore Context)

This is a simplified example and may need to be adapted based on the specific practices of an organization. It is crucial to consult legal counsel to ensure full compliance with the PDPA.

ENVY HER PTE LTD – Personal Data Protection Notice

Last Updated: 26th April 2025

At Envy Her Pte Ltd (hereinafter referred to as “[Organization Name]”, “we”, “us”, or “our”), we are committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (the “PDPA”) of Singapore. This Notice explains how we collect, use, disclose, and retain your personal data.

1. Collection of Personal Data

We may collect your personal data in various ways, including but not limited to:

When you interact with our website [website address].
When you register for an account or use our services.
When you make a purchase or transaction with us.
When you subscribe to our newsletters or marketing communications.
When you participate in our surveys, contests, or promotions.
When you contact us via email, phone, or other channels.
When you visit our premises (through CCTV surveillance).
From third-party sources (where permitted by the PDPA).

The types of personal data we may collect include:

Identification Data: Name, NRIC/FIN number, date of birth, gender.
Contact Data: Address, email address, phone number.
Account Data: Username, password, purchase history, preferences.
Payment Data: Credit card details, billing address (collected and processed by secure payment gateways).
Usage Data: Information about how you use our website and services, including IP address, browser type, and pages visited.
Marketing and Communications Data: Your preferences for receiving marketing communications from us.
CCTV Footage: Images and recordings of individuals within our premises.
Other Information: Any other personal data you voluntarily provide to us.

2. Use of Personal Data

We may collect, use, disclose, and retain your personal data for the following purposes:

To provide and manage our services to you.
To process your transactions and payments.
To communicate with you, including responding to your inquiries and requests.
To personalize your experience on our website and services.
To send you marketing communications (where you have consented or as otherwise permitted by the PDPA).
To conduct research, analysis, and improve our products and services.
To administer contests, promotions, and surveys.
For security purposes, including fraud prevention and detection.
To comply with applicable laws, regulations, and legal processes.
For our internal administrative and operational purposes.
Any other purposes for which we have obtained your consent.

3. Disclosure of Personal Data

We may disclose your personal data to the following third parties for the purposes outlined above:

Our affiliates and related companies.
Our service providers who assist us in operating our business (e.g., payment processors, IT support, marketing agencies). These providers are contractually obligated to protect your personal data.
Our business partners (where you have consented or as otherwise permitted by the PDPA).
Legal authorities, government agencies, or regulatory bodies when required by law or legal process.
Other third parties with your consent.

4. Retention of Personal Data

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws, regulations, or legal processes.

5. Your Rights Regarding Your Personal Data

Under the PDPA, you have certain rights regarding your personal data, including the right to:

Access: Request access to your personal data that we hold.
Correction: Request the correction of any inaccuracies or incompleteness in your personal data.
Withdrawal of Consent: Withdraw your consent to the collection, use, or disclosure of your personal data (subject to applicable legal and contractual restrictions).
Request Information: Request information about how we have used or disclosed your personal data in the past year.

To exercise any of these rights, please contact our Data Protection Officer (DPO) at the contact details provided below.

6. Data Security

We take reasonable steps to protect your personal data from unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include [mention specific security measures, e.g., encryption, firewalls, access controls].

7. Transfers of Personal Data Overseas

If we transfer your personal data to organizations located outside of Singapore, we will ensure that the recipients provide a standard of protection to your personal data that is comparable to the protection under the PDPA.

8. Contact Us

If you have any questions or concerns about this Notice or our personal data protection practices, please contact our Data Protection Officer (DPO) at:

Name: Envy Her Pte Ltd Email Address: envyhersingapore@gmail.com Postal Address: 69 Oxley BizHub Lobby 3, Ubi Road 1 #08-22/23 Singapore 408731 Phone Number: 9389 7240

9. Changes to this Personal Data Protection Notice

We may update this Personal Data Protection Notice from time to time to reflect changes in our practices or the PDPA. The updated Notice will be posted on our website. Please check back periodically for any updates.

Key Elements Demonstrated in this Example:

Clear Identification of the Organization: States who is collecting the data.
Purpose Limitation: Specifies the reasons for collecting and using personal data.
Consent: Mentions obtaining consent for certain uses (e.g., marketing).
Disclosure: Explains who the data might be shared with.
Retention Limitation: States how long data will be kept.
Data Security: Outlines the measures taken to protect data.
Individual Rights: Informs individuals of their rights under the PDPA.
Accountability: Provides contact information for the Data Protection Officer.
Transparency: Explains how changes to the notice will be communicated.