Personal Data Protection Policy

1. Introduction
1.1. Heybo is a Salad Stop Pte Ltd brand (hereinafter, SaladStop!), which recognizes the importance of safeguarding the personal data of our customers and complies with the Singapore Personal Data Protection Act (PDPA) 2012.
1.2. This Personal Data Protection Policy sets out how SaladStop! collects, uses, discloses, and protects your personal data in accordance with the PDPA.
1.3. Personal data refers to data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which an organization has or is likely to have access, as defined by the PDPA.

2. Lawful bases for Data Processing
2.1. SaladStop processes certain data based on your consent:
Send you emails about the products and services, competitions, offers, promotions or special events we believe may interest you;
Use analytics and profiling cookies to personalize your experience, and deliver content tailored to your interests; and
Ensure the security of our networks and systems, including helping diagnose technical and service issues, and troubleshoot issues, bugs or defects related to your account or our online services.
2.2. SaladStop processes your order and payment data to provide our service and and contract with you:
Carry out your requests, fulfill orders, and process payments for our products and services;
Communicate with you about your orders, purchases or accounts with us, including handling any requests, questions or comments you may have;
Provide customer support, including processing any concerns about our services; and
Provide online services to you, which include our websites and/or mobile applications.
2.3. SaladStop processes certain data to comply with applicable law:
protect against fraud and other crimes, claims and liabilities;
comply with legal obligations and our policies;
establish or defend a legal claim; and
monitor and report compliance issues.
2.4. Your consent to our collection, use and disclosure of your data will be valid until you withdraw your consent in writing by emailing your withdrawal to our Data Protection Officer at dpo@saladstop.com.sg.

3. Collection, Use and Disclosure of Personal Data
3.1. SaladStop! may collect your personal data through various means, including when you:
Visit our website
Purchase products or services from us
3.2. The types of personal data that SaladStop! may collect include but are not limited to:
Name and surname
Contact details (such as address, phone number, and email address)
Details of your orders and purchases
Information related to your dietary preferences and allergies
Feedback or enquiries submitted by you
3.3. Please note that our stores in Singapore are monitored by closed-circuit television cameras which record photographic and videographic images of persons in and around the stores for security and safety purposes.

4. Use of Personal Data
4.1. SaladStop! may use your personal data for the following purposes:
To process and fulfill your orders and purchases
To communicate with you regarding your orders and purchases, as well as to respond to your feedback or enquiries
To improve our products and services, including by analyzing customer preferences and behaviors
To send you marketing and promotional materials about our products and services, subject to your consent
4.2. SaladStop! may also use your personal data for any other purpose that is permitted or required by law.

5. Disclosure of Personal Data
5.1. SaladStop! may disclose your personal data to the following parties:
Our affiliated companies, subsidiaries, and related entities. Some of our companies are not placed in Singapore, therefore we make sure that international data transfers are properly regulated.
Service providers who assist us in providing our products and services, such as payment processors, delivery companies, and marketing agencies.
Business partners who collaborate with us on events, promotions, or other initiatives.
Law enforcement agencies, government bodies, or other authorized entities, as required by law.
5.2. SaladStop! will take reasonable steps to ensure that any third parties to whom we disclose your personal data are bound by obligations of confidentiality and that they use and disclose your personal data only for the purposes for which it was disclosed to them.

6. Security of Personal Data
6.1. SaladStop! takes reasonable precautions and implements appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure.
6.2. However, you should be aware that no technique of electronic storage or communication over the Internet is 100 percent secure. Although full security cannot be guaranteed, we make every effort to safeguard your information and always improve and assess our information security procedures.

7. Access and Correction of Personal Data
7.1. You may request access to or correction of your personal data that we hold by contacting our Data Protection Officer (DPO) contraction the following e-mail: dpo@saladstop.com.sg.
7.2. Please be aware that an access request may be subject to a reasonable fee. If so, we will let you know the cost upfront before handling your request.
7.3. Your request will be addressed as soon as it is possible. Our response will typically come within thirty (30) business days. We shall notify you in writing within thirty (30) days of the period by which we will be able to reply to your request if we are unable to do so within thirty (30) days of receiving it. In general, we must notify you of the reasons we are unable to give you any personal data or to make a change that you have requested (unless the PDPA exempts us from such obligation).

8. Accuracy of Personal Data
8.1. Typically, we use the personal information you (or someone authorized by you) have given us to provide you with our services. To make sure that we have the most up-to- date, accurate, and complete information about you, please update your information by sending an email to support@heybo.sg. If not possible, please notify us at: dpo@saladstop.com.sg.

9. Withdrawal of Consent
9.1. You may withdraw your consent to SaladStop!'s use of your personal data for any purpose by contacting our DPO using the following e-mail: dpo@saladstop.com.sg.
9.2. Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue providing our goods or services to you and we shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform us immediately.
9.3. Please note that withdrawing consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclosure without consent is permitted or required under applicable laws.

10. Retention of Personal Data
10.1. We may process your personal data for as long as it takes to accomplish the purpose for which it was acquired or as long as allowed or required by relevant laws.
10.2. When it is reasonable to infer that continuing to retain your personal data does not further the goals for which it was originally obtained and is no longer required for legal or business reasons, we shall stop doing so or erase the means by which the data can be used to identify you.

11. Transfers of Personal Data Outside of Singapore
We may transfer your personal data to countries outside of Singapore for the purposes described in this Privacy Policy. When we transfer your personal data to these countries, we will take all reasonable steps to ensure that your data is processed securely and in accordance with the PDPA.

12. Effect of Policy and Changes to Policy
12.1. This Policy is in addition to any other notifications, agreements, and consent clauses that may be applicable in connection with our collection, use, and disclosure of your personal information.
12.2. We reserve the right to update this Policy at any moment and without previous notice. By looking at the date this Policy was last modified, you can find out if any such changes have been made. Your understanding and acceptance of such modifications can be verified by your ongoing use of our services.

Privacy Policy