1. Introduction
Rootz (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our services.
2. Collection of Personal Data
We may collect personal data directly from you or through authorized third parties when you:
- Register or use our services
- Communicate with us (e.g., via email, phone, or chat)
- Participate in promotions, surveys, or events
- Access our website, applications, or platforms
Examples of personal data collected:
- Name, NRIC/FIN (where legally required), contact details
- Payment and billing information
- Device and usage data (IP address, cookies, app activity)
- Preferences and feedback
3. Purpose of Data Use
Your personal data may be used for:
- Providing and improving our services
- Processing transactions and managing accounts
- Customer support and communication
- Marketing, promotions, and service updates (with consent)
- Compliance with legal and regulatory obligations
- Security, fraud prevention, and risk management
4. Consent
By providing your personal data, you consent to its collection, use, and disclosure as described in this Policy.
You may withdraw consent at any time by contacting us (see Section 10).
5. Disclosure of Personal Data
We may disclose personal data to:
- Service providers and business partners assisting in operations
- Regulatory authorities, law enforcement, or government agencies (where required by law)
- Professional advisors (legal, financial, compliance)
- Any party with your consent
We do not sell personal data to third parties.
6. Data Protection & Security
We implement reasonable administrative, physical, and technical safeguards to protect personal data against unauthorized access, disclosure, alteration, or destruction.
7. Retention of Data
Personal data will be retained only as long as necessary for business or legal purposes.
When no longer required, data will be securely deleted or anonymized.
8. Access & Correction Rights
Under the PDPA, you have the right to:
- Request access to your personal data
- Correct inaccuracies in your personal data
- Withdraw consent for data use
Requests will be processed in accordance with PDPA requirements.
9. International Transfers
If personal data is transferred outside Singapore, we will ensure that the receiving party provides a comparable standard of protection as required under the PDPA.
10. Contact Us
For questions, requests, or complaints regarding this Privacy Policy, please contact:
Data Protection Officer (DPO)
Rootz Pte. Ltd.
📧 Email: dpo@rootz.sg
📞 Phone: +65 XXXX XXXX
11. Updates to Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices.
Updates will be posted on our website with the effective date clearly indicated.