Privacy Policy

This Privacy Policy explains how NATRAHEA manages Personal Data in compliance with the Singapore Personal Data Protection Act 2012 (No. 26 of 2012) (“Act”). We encourage you to read this Privacy Policy to understand how your Personal Data is collected, used, disclosed, and protected.

We may update this Privacy Policy from time to time. Subject to your rights under the Act, you agree to be bound by the prevailing version of this Privacy Policy. We encourage you to check the latest version of this Privacy Policy regularly.

“Personal Data” refers to data, whether true or not, about an individual who can be identified from that data, or from that data in combination with other information to which the organization may have access and includes the meaning otherwise as defined in the Act as amended from time to time.

By purchasing, using, or interacting with any products, services, campaigns, or websites operated by NATRAHEA, you consent to NATRAHEA, its related entities, affiliates, and subsidiaries (collectively, “we”, “us” or “our”) collecting, using, and disclosing your Personal Data in accordance with this Privacy Policy.

This Privacy Policy and your use of this website shall be governed in all respects by the laws of Singapore.

1. Collection & Consent

1.1

Personal Data may be collected from you in one or more of the following ways:

(a) when you make an appointment, enquiry, or purchase products or services from us;

(b) when you contact or interact with us via our website, email, telephone, messaging platforms, or in person;

(d) when you respond to promotions, campaigns, surveys, or attend our events;

(e) when you visit or use our website (including through cookies and analytics tools);

(f) when CCTV recordings, photographs, or videos are taken at our premises or events;

(g) when we receive your Personal Data from authorised third parties; and

(h) when your Personal Data is otherwise collected by lawful means.

Personal Data collected may include your name, contact details, appointment details, and other information necessary to provide our products or services.

1.2

Unless permitted by law, we will not collect, use, or disclose your Personal Data without your knowledge or consent. In certain circumstances, consent may be deemed or not required under the Act, including where Personal Data is necessary for contractual performance, legal compliance, or legitimate business purposes.

1.3

You confirm that the Personal Data you provide is accurate and complete, and that you are authorised to provide any Personal Data relating to another individual.

1.4

If you are under eighteen (18) years of age, you should obtain consent from your parent or legal guardian before providing Personal Data to us. We collect and use children’s Personal Data only where necessary and with additional care.

2. Purposes for Collection, Use and Disclosure

2.1

Your Personal Data may be collected, used and/or disclosed for the following purposes:

(a) managing appointments, enquiries, and customer relationships;

(b) providing products and services to you;

(d) communicating with you regarding your appointments, purchases, requests, or service-related matters;

(e) monitoring or recording customer interactions (including calls) for quality assurance, training, security, and identity verification purposes;

(f) improving our website, products, services, and business operations;

(g) conducting marketing, promotions, surveys, and campaigns (where consent is given);

(h) preventing fraud, conducting investigations or audits, and managing risk;

(i) complying with legal and regulatory requirements;

(j) enforcing our legal rights and obligations;

(k) facilitating corporate or business asset transactions; and

(l) purposes reasonably related to the above.

Transactional or service-related communications are necessary for service provision and are not subject to marketing opt-out.

2.2

We may disclose your Personal Data for the purposes stated above to our officers and employees and to third parties, affiliates, service providers, business partners and advisers, including without limitation:

(a) payment processors, banks, credit card companies and financial institutions;

(b) logistics, courier and delivery service providers;

(d) marketing, customer communication and call centre service providers;

(e) professional advisers and insurers, including consultants, auditors and lawyers;

(f) business partners, authorised agents, distributors or resellers;

(g) debt collection agencies and credit information companies, where applicable;

(h) relevant government regulators, authorities or law enforcement agencies, where required by law; and

(i) any other party to whom you authorise us to disclose your Personal Data.

Except for disclosures to government authorities or law enforcement agencies, we will take reasonable steps to ensure that such parties are bound by confidentiality obligations and use your Personal Data only on a need-to-know basis and for authorised purposes.

2.3

Where you have consented to receive marketing communications via your Singapore telephone number(s) or email address, we may contact you via calls, messages, or email. You may opt out at any time.

2.4

Your Personal Data may be transferred, stored and/or processed in a country or territory outside Singapore, and you consent to any such transfer, storage and/or processing of your Personal Data outside Singapore. We will however ensure that any party to whom we transfer your Personal Data outside Singapore provides to such Personal Data a standard of protection at least comparable to the protection under the Act. This includes without limitation ensuring that any party coming into contact with the Personal Data outside Singapore:

(a) complies with the Act and accompanying guidelines issued by the relevant regulatory authorities, all applicable laws and regulations and this Privacy Policy (“Data Standards”) and shall not do or permit anything to be done which might cause such party or us to breach the Data Standards;

(b) takes all appropriate measures to ensure such compliance by implementing such Data Handling Principles as notified by us to them from time to time and appropriate technical and organisational measures and providing a standard of protection for the Personal Data that is comparable to the protection under the Act; and

(c) protects the Personal Data by making reasonable security arrangements to prevent unauthorised access, use, disclosure or modification.

3. Withdrawal of Consent & Access

3.1 General Withdrawal and Access

You may withdraw your consent to the collection, use, or disclosure of your Personal Data, or request access to your Personal Data, by contacting our Data Protection Officer at dpo@natrahea.com.sg.

Withdrawal of consent may affect our ability to provide certain products or services. Requests are generally processed within 30 working days.

3.2 Marketing Opt-Out

If you wish to opt out of marketing communications (emails, SMS, calls) from NATRAHEA, you may do so at any time via the unsubscribe options provided in our communications or by submitting the online opt-out form here.

This will not affect service-related communications necessary to fulfil your orders, appointments, or other obligations.

3.3 Access and Correction

We will provide access to your Personal Data as permitted under the Act and allow correction or updating of your Personal Data. A reasonable administrative fee may apply where applicable.

4. Accuracy & Correction

4.1

We take reasonable steps to ensure that Personal Data used by us is accurate and complete.

4.2

To help us maintain the accuracy of your Personal Data, we encourage you to inform us when there are any changes to your Personal Data which you have provided us by writing to the Office of our Data Protection Officer at dpo@natrahea.com.sg. We will correct or complete your Personal Data as soon as reasonably practicable.

5. Protection Measures & Data Breach Management

We implement reasonable administrative, technical, and physical safeguards to protect Personal Data against unauthorised access, use, disclosure, alteration, or loss.

Notwithstanding our security measures for protecting your Personal Data, you acknowledge that no data transmission over the Internet is completely secure and by providing your Personal Data, you are transmitting information at your own risk.

In the event of a data breach, we will take reasonable steps to assess, contain, and mitigate the breach, and notify affected individuals and the Personal Data Protection Commission where required under the Act.

6. Retention of Personal Data

Personal Data is retained only for as long as necessary to fulfil business or legal purposes, after which it will be securely deleted or anonymised.

7. Cookies

7.1

We gather Information on our website activity, such as data on the number of visitors, the pages they visit, the duration of their stay, etc. Such information is collected on an aggregate, anonymous basis, which means no Personal Data is associated with this data and gathered through the use of web server logs and cookies. We do not at our website automatically collect Personal Data unless you provide such information or login with your account credentials.

7.2

Cookies are small bits of data automatically stored in the hard drive of the end user and are commonly used to track preferences in relation to the subject of such website. If you enable these cookies, then your web browser adds the text in a small file. You may wish to set your web browser to notify you of a cookie placement request or refuse to accept cookies by modifying relevant internet options or browsing preferences of your computer system, but to do so you may not be able to utilize or activate certain available functions on our website.

7.3

By accessing and using our website and services, you consent to the storage of cookies, other local storage technologies, beacons and other information on your devices. You also consent to the access of such cookies, local storage technologies, beacons and information by us or our representatives or agents.

8. Third-Party Links

Our website and/or services may link to third-party websites and services that are outside our control. For example, we may enable you to share certain materials on the services with others through social networking services such as Facebook. We are not responsible for the security or privacy of any information collected by websites or other services. You should exercise caution, and review the privacy statements applicable to the third-party websites and services you use. To the fullest extent permitted under laws, we cannot be responsible for a third party’s acts, omissions, data policies or their use of cookies nor the content or security of any third party websites, even if linked to our website. Any such liability is expressly disclaimed and excluded.

9. Data Protection Officer

If you have any questions, requests, or feedback regarding this Privacy Policy or our handling of Personal Data, please contact:

Data Protection Officer

NATRAHEA

7 Jalan Kilang, #04-01

Singapore 159407

Email: dpo@natrahea.com.sg