Privacy Policy

Effective Date: January 1, 2024

KANAYA SINGAPORE FARM LIMITED ("we", "our", "us") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use our website and services. By using our services, you consent to the collection and use of your personal data as described in this policy.

1. Personal Data We Collect

In accordance with the PDPA, we may collect the following types of personal data:

• Personal Identification Information: name, phone number, email address, date of birth (if provided), and other information you voluntarily provide
• Order and Transaction Information: order details, delivery address, billing address, payment information, purchase history, and transaction records
• Usage and Technical Information: how you access our website, pages viewed, features used, time spent, IP address, browser type, device information, and cookies
• Device and Location Information: device type, operating system, unique device identifiers, and approximate location (if enabled)

2. How We Use Your Personal Data

We use your personal data for the following purposes, in compliance with the PDPA's Purpose Limitation Obligation:

• Process, fulfill, and manage your orders and transactions
• Send you order confirmations, delivery notifications, service updates, and important account information (with your consent for SMS)
• Improve our products, services, website functionality, and user experience
• Respond to your inquiries, requests, complaints, and provide customer support
• Comply with legal obligations, regulatory requirements, and enforce our terms of service

4. Data Protection and Security

In compliance with the PDPA's Protection Obligation, we implement reasonable technical, administrative, and physical security measures to protect your personal data from unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include encryption of sensitive data in transit and at rest, access controls, regular security assessments, and staff training on data protection.

5. Disclosure of Personal Data

We do not sell, rent, or trade your personal data. We may disclose your personal data to third parties only in the following circumstances, in compliance with the PDPA:

• With your explicit consent for specific purposes
• As required by Singapore laws, regulations, court orders, or government authorities
• To trusted service providers who assist us in operating our business (e.g., payment processors, delivery partners, IT service providers) under strict confidentiality agreements
• To protect our legal rights, property, safety, or that of our users, or to prevent fraud or illegal activities

6. Your Rights Under the PDPA

You have the following rights regarding your personal data:

• Right of Access: Request access to and obtain a copy of your personal data in our possession
• Right of Correction: Request correction of inaccurate or incomplete personal data
• Right to Withdraw Consent: Withdraw your consent for collection, use, or disclosure of personal data (subject to legal and contractual restrictions)
• Right to Object: Object to the processing of your personal data for certain purposes
• Right to Complain: File a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe we have violated the PDPA

7. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. You can manage cookie preferences through your browser settings. Some cookies are essential for the website to function properly.

8. Data Retention

In compliance with the PDPA's Retention Limitation Obligation, we retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When personal data is no longer needed, we will securely delete or anonymize it. Generally, we retain account information for the duration of your account and for a reasonable period thereafter for legal and business purposes.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. Updated policies will be posted on our website with a revised effective date. We encourage you to review this policy periodically. Material changes will be notified to you via email or prominent notice on our website.

13. Contact Us and Data Protection Officer

If you have any questions, concerns, or wish to exercise your rights under the PDPA regarding this Privacy Policy or your personal data, please contact our Data Protection Officer: