Privacy Policy for Borealis Bakehouse

At Borealis Bakehouse, we are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you interact with our online platform, purchase our artisan breads, pastries, custom cakes, coffee, or utilize our catering services.

Information We Collect

We collect various types of information to provide and improve our services to you, including:

• Personal Identification Information: This includes your name, email address, postal address (for delivery or billing purposes), and phone number when you register an account, place an order, subscribe to our newsletter, or contact us.
• Payment Information: When you make a purchase, we collect necessary payment details such as credit/debit card numbers (processed securely by third-party payment processors) or other payment methods. We do not store full payment card details on our servers.
• Order Details: Information related to your purchases, including the products you buy, order history, and preferences.
• Technical Data: This includes your IP address, browser type, operating system, referring URL, pages visited on our site, and the dates/times of your visits. This information helps us understand how our online platform is used and improve its functionality.
• Communication Data: Records of your correspondence with us, such as emails or messages sent through our contact forms.

How We Use Your Information

We use the collected information for various purposes, including:

• To Process and Fulfill Orders: To manage your purchases, process payment transactions, and arrange for delivery or pickup of our products.
• To Provide and Maintain Our Services: To operate, maintain, and improve our online platform, products, and services.
• To Communicate With You: To send you order confirmations, updates, customer service messages, and respond to your inquiries.
• For Marketing and Promotion: With your consent, to send you newsletters, special offers, and information about new products or services that may be of interest to you. You can opt out of these communications at any time.
• For Analytics and Improvement: To monitor and analyze trends, usage, and activities in connection with our services to improve user experience and our offerings.
• To Ensure Security: To detect and prevent fraudulent transactions and other illicit activities, and for security compliance.

Sharing Your Information

We do not sell your personal data. We may share your information with third parties in the following circumstances:

• Service Providers: We may share data with trusted third-party service providers who assist us in operating our online platform, conducting our business, or serving our users (e.g., payment processors, delivery services, website hosting, analytics providers). These parties are obligated to keep your information confidential and use it only for the purposes for which we disclose it to them.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of the transaction. We will notify you via email and/or a prominent notice on our site of any change in ownership or uses of your personal data, as well as any choices you may have regarding your personal data.
• With Your Consent: We may share your information with other third parties when we have your explicit consent to do so.

Data Security

We implement a variety of security measures to maintain the safety of your personal data when you place an order or enter, submit, or access your personal information. These include secure servers, encryption of data in transit (SSL/TLS technology), and restricted access to personal data for authorized personnel only. Despite our efforts, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Data Protection Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have certain rights regarding your personal data:

• The Right to Access: You have the right to request copies of your personal data.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us using the details provided below.

Cookies

Our online platform uses "cookies" to enhance your experience. Cookies are small data files placed on your device. We use cookies to remember your preferences (e.g., items in your shopping cart), track website usage for analytics, and deliver personalized content. You have the option to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of our online platform.

Links to Other Websites

Our online platform may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or would like to exercise any of your data protection rights, please contact us:

Borealis Bakehouse

8 Sentosa Gateway, Singapore, 098269, SG