PRIVACY POLICY

  1. Who we are
    This Privacy Policy explains how ALTERMANA (“Altermana”, “we”, “us”, “our”) collects, uses, discloses, and protects personal data when you use our website, services, and interact with us. Our principal place of business is 168D Simei Lane #03-72, Singapore 524168.
  2. Scope
    This policy applies to our website, online store, customer support, marketing activities, and any other channels we control. It does not cover third-party sites or services that we do not operate.
  3. What “personal data” means
    Under Singapore’s Personal Data Protection Act 2012 (“PDPA”), personal data is data about an individual who can be identified from that data, or from that and other information to which we have access. Examples include: name, contact details, delivery address, order details, payment information (tokenised), device identifiers, IP address, and interaction/usage data.
  4. Data we collect
    • Information you provide: account details, name, email, phone, billing/shipping addresses, order notes, returns/exchanges, support requests, marketing preferences.
    • Transaction data: orders, payments (processed by our payment providers), refunds, and anti-fraud signals.
    • Device/usage data: IP address, browser and device type, pages viewed, time on page, referring/exit pages, and similar diagnostics.
    • Cookies and similar technologies: used for core site functionality (e.g., cart), performance/analytics, and (if you opt-in) marketing. You can adjust your browser cookie settings at any time. Some features may not work without essential cookies.
  5. Why we collect and use your data
    We process personal data for purposes permitted under the PDPA, including:
    • To provide and operate our website, fulfil orders, deliver products, process payments, manage returns/warranty, and provide customer support.
    • To manage accounts, authentication, and security (including fraud prevention and troubleshooting).
    • To communicate with you about orders, service updates, and customer support matters.
    • With your consent or where permitted, to send marketing communications, promotions, surveys, and event invitations.
    • To personalise content, measure performance, and improve our products, services, and site.
    • To comply with laws, enforce our terms, and protect our rights, users, and the public.
    • In connection with a business transaction (e.g., merger, acquisition, asset transfer) as permitted under the PDPA.
  6. Legal bases under the PDPA
    We rely on one or more of the following: your consent; deemed consent (e.g., where reasonably necessary to fulfil your request or after appropriate notification); the “legitimate interests” exception (after conducting an assessment and providing suitable safeguards); other PDPA exceptions (e.g., for investigations, emergencies, business asset transactions, or where required by law).
  7. Direct marketing and Do Not Call (DNC)
    We send electronic marketing only with your consent or where an exception applies. For voice calls, SMS, or fax marketing to Singapore numbers, we comply with the DNC Registry unless you have given clear and unambiguous consent or another exemption applies. You can opt out of marketing at any time via the unsubscribe link or by contacting us.
  8. When we disclose your data
    We may share personal data with:
    • Service providers and data intermediaries (e-commerce platform, payment processors, logistics/couriers, analytics, cloud hosting, email/SMS providers, customer support tools) who process it on our instructions.
    • Professional advisers, insurers, auditors, regulators, and law enforcement where required.
    • Another organisation in a business transaction permitted by the PDPA (subject to conditions).
    We do not sell your personal data.
  9. Overseas transfers
    If personal data is transferred outside Singapore (for example, to our platform, hosting, or support providers), we will ensure it is protected to a standard comparable to the PDPA, such as through legally enforceable obligations and appropriate safeguards.
  10. Retention
    We retain personal data only as long as necessary for the purposes stated above or to meet legal, accounting, or reporting requirements. When data is no longer needed, we will anonymise or securely delete it.
  11. Accuracy
    We take reasonable steps to ensure personal data is accurate and complete. Please keep your details up to date, and notify us of any changes.
  12. Security
    We implement reasonable administrative, physical, and technical safeguards to protect personal data. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
  13. Data breach notification
    If a data breach occurs that results in, or is likely to result in, significant harm to individuals, or is of significant scale, we will notify Singapore’s PDPC and affected individuals as required by the PDPA.
  14. Your choices and rights
    Subject to the PDPA and applicable exceptions, you may:
    • Request access to your personal data and information about how it has been used or disclosed in the past year.
    • Request correction of inaccurate or incomplete personal data.
    • Withdraw consent to our collection, use, or disclosure of your personal data (this may affect our ability to provide certain services).
    To make a request, contact our DPO at [insert DPO/privacy email]. We may require information to verify your identity and will respond within the timelines prescribed by the PDPA.
  15. Children
    Our services are not directed to children under 13. We do not knowingly collect personal data from children under 13 without appropriate consent. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.
  16. Third-party sites and services
    Our site may contain links to third-party websites or services that we do not operate. We are not responsible for their privacy practices. Review their policies before providing personal data.
  17. Changes to this policy
    We may update this Privacy Policy from time to time. We will post the updated version on our website with a new “Last updated” date. Material changes may be communicated by additional notice.
  18. Contact us
    For questions, feedback, access/correction requests, or to withdraw consent, please contact our Data Protection Officer:
    Email: help@altermana.com
    Address: 168D Simei Lane #03-72, Singapore 524168