Aboocha Pte Ltd (“Aboocha”, “we”, “us” or “our”) operates the website aboocha.sg and sells kombucha and jun tea to customers in Singapore. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it under the Personal Data Protection Act 2012 (PDPA) of Singapore. By using our website or placing an order with us, you agree to the practices described in this policy.
What personal data we collect
Depending on how you interact with us, we may collect:
- Contact details such as your name, email address, phone number, and delivery/billing address.
- Order information, including the products you purchase, order history, order value, and delivery instructions.
- Payment-related information needed to process a transaction. We do not store your full card details ourselves — payments are processed by third-party payment processors (such as WooCommerce Payments and/or PayPal), and only limited, non-sensitive transaction data (such as order status and the last few digits of a card, where provided by the processor) is retained on our systems.
- Account information, if you create an account with us, such as your login details and saved addresses.
- Marketing preferences, such as whether you have opted in to receive newsletters or promotional messages.
- Communications you send us, for example through our Contact page, email, or social media.
- Technical and usage data collected automatically via cookies and analytics tools, such as your IP address, browser type, device type, and how you use our website.
Why we collect and use your data
We collect and use personal data for purposes including:
- Processing and fulfilling your orders, including arranging chilled delivery within Singapore.
- Communicating with you about your order, account, or enquiries, including responding to customer service requests.
- Processing payments securely through our payment processors.
- Sending you marketing communications, offers, or updates about new products — only where you have opted in, and you may withdraw this consent at any time.
- Improving our website, products, and customer experience, including through analytics.
- Complying with our legal and regulatory obligations, including tax, accounting, and food safety record-keeping requirements.
- Preventing fraud and protecting the security of our website and business.
How we store and protect your data
We take reasonable technical and organisational measures to protect the personal data we hold from unauthorised access, disclosure, alteration, or loss. Access to personal data within our business is limited to staff and service providers who need it to perform their roles. Where we engage third-party service providers (such as our website host, email service, or delivery partners) to process personal data on our behalf, we take reasonable steps to ensure they provide a comparable standard of protection.
Payment card details are handled directly by our payment processors under their own security standards (such as PCI-DSS); we do not store full card numbers on our own servers.
Cookies and analytics
Our website uses cookies and similar technologies to operate correctly, remember your preferences (such as items in your cart), and understand how visitors use our site through analytics tools. You can control or disable cookies through your browser settings, though some parts of the site may not function properly if you do so.
Sharing your data
We do not sell your personal data. We may share personal data with:
- Payment processors, to process your transactions.
- Delivery and logistics partners, to fulfil and deliver your order.
- Service providers who support our website, email, and business operations (for example, hosting and IT providers), acting on our instructions.
- Regulators or authorities, where required by law.
How long we keep your data
We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When personal data is no longer needed for these purposes, we take reasonable steps to delete it or render it anonymous.
Your rights under the PDPA
Subject to applicable exceptions under the PDPA, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete personal data.
- Withdraw your consent to our collection, use, or disclosure of your personal data at any time (for example, to stop receiving marketing messages), by contacting us or using the unsubscribe link in our emails.
Withdrawing consent may affect our ability to provide certain services to you, such as processing an order or responding to a request, and does not affect the lawfulness of processing carried out before your withdrawal.
Children’s data
Our website and products are intended for general audiences making purchase decisions as adults, and we do not knowingly collect personal data from young children beyond what may be provided by a parent or guardian placing an order.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. The updated version will be posted on this page.
Contact us
If you have any questions about this Privacy Policy, or wish to make a request regarding your personal data, please reach out to us via the contact form on our Contact page.