image

Privacy Policy

Last Updated: November 10, 2025

---

# Privacy Policy

## Who We Are

Growe Supply Pte. Ltd. (UEN: 202125297K) is a B2B wholesale distributor of authentic Southeast Asian bath and beauty products based in Singapore.

Registered Office:
2 Venture Drive #14-02
Vision Exchange
Singapore 608526

Trading As: growesupply.com and wholesale.growesupply.com

We are committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data.

Important: This website is intended for business customers only and is not intended for children under 18 years of age.

---

## Quick Navigation

1. What Information We Collect
2. How We Use Your Information
3. Your Privacy Rights
4. Data Security
5. Contact Us

---

## What Information We Collect

### Personal Information

Identity & Profile Data:
- Full name
- Username and account credentials
- Date of birth
- Account preferences and order history

Business Information (B2B Customers):
- Business name and UEN
- Business type (retail, e-commerce, salon, etc.)
- Business address
- Authorized representative details

Contact Data:
- Email address
- Phone number (including WhatsApp)
- Billing and delivery addresses

Financial Data:
- Purchase history and transaction amounts
- Payment method type
- Store credit balance
- Volume discount tier

Important: We do NOT store complete credit/debit card numbers or CVV codes. Payment processing is handled by secure third-party gateways.

Technical & Usage Data:
- IP address, browser type, device type
- Pages visited, products viewed, search queries
- Shopping cart activity and feature usage

WhatsApp Data:
- WhatsApp phone number (for OTP verification)
- Message delivery status for login verification
- Order notifications

Note: We do NOT read or store your WhatsApp chat messages. WhatsApp is only used for one-time passwords (OTP), order notifications, and customer support when you initiate contact.

---

## How We Collect Your Information

Direct Interactions:
When you create an account, place orders, contact support, subscribe to our newsletter, or provide feedback.

Automated Technologies:
Through cookies, web analytics, and tracking technologies when you use our website.

Third-Party Sources:
From payment processors, delivery partners, business verification services, and our platform provider (Take App).

Take App Platform:
Our website is built on Take App (https://take.app), which provides e-commerce functionality, account management, WhatsApp integration, and order processing.

---

## How We Use Your Information

### Legal Basis for Processing

We only use your personal data when the law allows:

Contract Performance: To fulfill our obligations when you purchase from us

Legitimate Interests: To operate and improve our business (provided your rights don't override our interests)

Legal Compliance: To comply with Singapore laws and regulations

Your Consent: For marketing communications (you can withdraw anytime)

### Specific Uses

Order Processing & Delivery:
- Process orders and payments
- Deliver products to you
- Send order updates and tracking

Account Management:
- Manage your wholesale account
- Verify wholesale eligibility
- Process returns and refunds

Business Operations:
- Provide customer support
- Prevent fraud and ensure security
- Comply with tax and legal requirements
- Establish credit terms

Improvements:
- Improve our website and services
- Generate analytics (anonymized)
- Understand customer preferences

Marketing (With Your Consent):
- Send promotional offers and new product launches
- Share industry trends and tips
- Invite you to events

Your Control: Opt-out anytime by clicking "Unsubscribe" in emails or emailing marketing@growesupply.com

---

## Cookies and Tracking

### What Are Cookies?

Small text files stored on your device that help websites function properly.

### Types We Use

1. Strictly Necessary Cookies (Cannot be blocked)
Essential for website operation - keep you logged in, remember your cart, enable secure payments.

2. Performance/Analytics Cookies (Can be blocked)
Help us understand how visitors use our site - track popular pages, identify navigation issues, measure performance.

3. Functionality Cookies (Can be blocked)
Remember your preferences - username, previous searches, display settings, language choice.

4. Targeting/Advertising Cookies (Can be blocked)
Deliver relevant ads and measure campaigns - show relevant ads on other websites, limit ad frequency.

### Managing Cookies

Browser Settings:
Most browsers allow you to view, delete, or block cookies through Settings > Privacy.

Warning: Blocking all cookies may prevent website functionality including logging in, adding items to cart, and completing checkout.

---

## Third-Party Services

We work with trusted service providers:

E-commerce Platform: Take App (https://take.app) - provides website hosting, shopping cart, order management, WhatsApp integration

Payment Processing: Secure payment gateways (PCI-DSS compliant) - we do NOT store full card details

Delivery & Logistics: Delivery partners - receive name, address, phone, order contents

Communication: WhatsApp (Meta) - for OTP verification and order notifications

Analytics & Marketing: Google Analytics and email platforms - often anonymized data

Important: All third-party processors sign data processing agreements with us and are required to protect your data.

### Third-Party Links

Our website may link to external websites (brand sites, social media, partners). We do NOT control these sites and are NOT responsible for their privacy practices. Review their privacy policies when you visit.

---

## Data Security and Retention

### How We Protect Your Data

Technical Measures:
- SSL/TLS encryption for data transmission
- Encrypted data storage and secure servers
- Regular security updates
- Secure backup systems

Organizational Measures:
- Access controls (role-based permissions)
- Employee training on data protection
- Confidentiality agreements
- Regular security audits

Access Restrictions:
Only authorized personnel can access your data on a business-need-to-know basis.

### Data Breach Procedures

If a breach occurs, we'll notify you within 72 hours if your data is affected, including what happened, what data was affected, and steps you should take.

Report suspected breaches: security@growesupply.com

### How Long We Keep Your Data

Active Customers:
- Account data: While active + 2 years after last transaction
- Order history: 7 years (tax/accounting compliance)
- Marketing data: Until you unsubscribe + 30 days

Inactive Accounts:
- May delete accounts inactive for 5+ years after notifying you

Legal Requirements:
- Data retained longer if required by law or legal proceedings

Anonymized Data:
- May retain anonymized data indefinitely for statistical analysis (cannot be traced back to you)

---

## Information Sharing and Transfer

### Who We Share Your Data With

Within Growe Supply:
Authorized employees, management, IT personnel (for business operations)

Third-Party Service Providers:
Payment processors, delivery partners, e-commerce platform, analytics providers

Legal Authorities:
When required by law, to comply with legal processes, or to protect our legal rights

Business Transfers:
In the event of merger, acquisition, or asset sale (you'll be notified)

### What We DON'T Do

❌ Sell your personal data to third parties
❌ Share your data for others' marketing without consent
❌ Rent or lease customer lists

### International Data Transfers

Current Operations: Primary operations and data storage in Singapore/Southeast Asia

When Transferred Outside Singapore:
We ensure protection through standard contractual clauses, adequacy decisions (EU GDPR compliance), and explicit consent where required.

Countries We May Transfer To:
- USA (for cloud hosting services)
- European Union (for certain service providers)
- Other ASEAN countries (for regional operations)

2025 International Expansion: As we expand, we'll maintain appropriate data protection measures and comply with local laws.

---

## Your Privacy Rights

Under Singapore's Personal Data Protection Act (PDPA), you have these rights:

### 1. Right to Access
Request a copy of your personal data we hold.

How: Email privacy@growesupply.com with "Data Access Request"
Timeline: Within 30 days
Fee: Usually free

### 2. Right to Correction
Request correction of inaccurate or incomplete data.

How: Email privacy@growesupply.com or update directly in your account settings
Timeline: Within 30 days

### 3. Right to Erasure
Request deletion of your personal data.

When Possible:
- Data no longer necessary
- You withdraw consent
- You object to processing

Limitations:
We may retain data if required by law (e.g., tax records for 7 years), necessary for legal claims, or to complete existing orders.

How: Email privacy@growesupply.com with "Data Deletion Request"

### 4. Right to Object
Object to certain processing, especially direct marketing.

How: Click "unsubscribe" in emails or email marketing@growesupply.com

### 5. Right to Restriction
Request we limit how we use your data (e.g., when you contest data accuracy).

### 6. Right to Data Portability
Receive your data in a structured, commonly used format (CSV, JSON, etc.).

### 7. Right to Withdraw Consent
Withdraw consent for marketing communications or optional data collection anytime.

How to Exercise Your Rights:

Email: privacy@growesupply.com (include your name, account email/phone, specific request)

Mail:
Growe Supply Pte. Ltd.
Attn: Privacy Officer
2 Venture Drive #14-02
Vision Exchange
Singapore 608526

Processing Time: 30 days from receipt of valid request
Verification: We may need to verify your identity
Fees: Generally free (reasonable fee for clearly unfounded/excessive requests)

---

## Children's Privacy

Age Restriction: Our services are for business customers only, not for individuals under 18.

No Knowing Collection: We do not knowingly collect personal data from children.

If You Believe: We've inadvertently collected data from a minor, contact us immediately at privacy@growesupply.com for prompt deletion.

---

## Contact Us

### Privacy Questions or Concerns

Email: privacy@growesupply.com

Mail:
Growe Supply Pte. Ltd.
Attn: Privacy Officer
2 Venture Drive #14-02
Vision Exchange
Singapore 608526

Phone: +65 XXXX XXXX (Mon-Fri, 9am-6pm SGT)

### Other Contacts

General Inquiries: info@growesupply.com
Customer Support: support@growesupply.com
Sales: sales@growesupply.com
Marketing Opt-Out: marketing@growesupply.com
Security Issues: security@growesupply.com

### Complaints

Internal: We aim to resolve privacy concerns directly. Please contact us first.

External: You can lodge complaints with the Personal Data Protection Commission (PDPC)
Website: https://www.pdpc.gov.sg/complaints-and-reviews

---

## Changes to This Policy

Last Updated: November 10, 2025

We review this policy regularly and may update it to reflect changes in our practices or legal requirements.

How You'll Be Notified:
- Email notification for significant changes
- Notice on website homepage
- Updated "Last Updated" date

Your Continued Use: Continued use of our services after changes constitutes acceptance of the updated policy.

---

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

For questions or to exercise your rights, contact us at privacy@growesupply.com