PARIS BAGUETTE DATA PROTECTION POLICY

1. General

1.1 This Data Protection Policy (“Policy”) sets out the basis which Paris Baguette Singapore Pte Ltd (“Paris Baguette”, “we”, “us”, or “our”) may collect, use, disclose or otherwise process personal data of our customers in accordance with the Personal Data Protection Act (“PDPA”).

1.2 This Policy applies to personal data in our possession or under our control, including personal data in the possession of third parties which we have engaged to collect, use, disclose or process personal data for our purposes.

2. Definitions

2.1 “customer” means an individual who:

(a) Has contacted us through any means to find out more about any goods or services we provide; or

(b) May, or has, entered into a contract with us for the supply of any goods or services by us.

2.2 “Personal Data” means data, whether true or not, about a customer who can be identified:

(a) From that data; or

(b) From that data and other information to which we have or are likely to have access.

Depending on the nature of your interaction with us, some examples of personal data which we may collect from you include name, email address, mobile phone number, gender and date of birth. Please see Paragraph 4 for a non-exhaustive list of personal information which we may collect from you.

2.3 “PB Rewards” is Paris Baguette’s cardless membership program implemented to show our appreciation and reward our loyal customers with exclusive benefits whenever they dine-in or takeaway at all participating Paris Baguette stores in Singapore.

2.4 “Website” means our websites including “https://www.parisbaguette.com.sg” and any other website owned or operated by Paris Baguette.

2.5 “Special Events” means events or campaigns organised by us which includes but is limited to promotions, competitions, contests and lucky draws.

2.6 Other terms used in this Policy shall have the meanings given to them in the PDPA (where the context so permits).

3. When Does Paris Baguette Collect Personal Data?

3.1 We may collect information about you in several situations when you:

(a) Purchase products from our online stores or physical stores;

(b) Register as a member of our PB Rewards program,

(c) Participate in surveys or any other types of research we may conduct;

(d) Communicate with us directly in relation to our products and services;

(e) Visit our Websites or our pages on social media platforms;

(f) Use services that are made available on our Website;

(g) Register for or participate in any of our Special Events; or

(h) Apply for employment with us.

4. What Types of Information Does Paris Baguette Collect from You?

4.1 We may collect following information about you:

(a) Name, postal address, phone number, and e-mail address;

(b) Financial account information such as credit card number and other payment information;

(c) Information related to your transaction history such as what you buy, where you buy, how frequently you buy;

(d) Information on your visits to our Websites, such as website traffic data; location data; and the resources that you access on the Website

(e) Information related to your membership with us including your membership card number, rewards you earn, and rewards you redeem; or

(f) demographics information, your comments, feedback, questions or suggestions, and information about subjects that may interest you.

4.2 We may automatically collect online use information when you visit our Websites or use our services. This information may include information about your Internet service provider, your operating system, browser type, domain name, Internet protocol (IP) address, your access times, the website that referred you to us, the Web pages you request, and the date and time of those requests. Our collection of online use information may involve the use of cookies and Web beacons. Cookies are small data files stored on your hard drive by a website. Among other things, cookies help us improve our Websites and your experience. We use cookies to see which areas and features are popular and to count visits to our Websites. Web beacons are electronic images that may be used on our Websites or in our emails. We use Web beacons to deliver cookies, count visits, understand usage and campaign effectiveness and to tell if an email has been opened and acted upon.

4.3 You may choose to set your browser to warn you when a cookie is being sent or to remove or reject cookies. Each browser is a little different, so look at your browser Help menu to learn the correct way to modify your cookie settings. If you choose to remove or reject cookies, it may affect certain features or services on our Websites.

4.4 Paris Baguette stores in Singapore are monitored by closed circuit television cameras which record photographic and videographic images of persons in and around the stores.

4.5 We may combine information we collect about you with information we receive from third parties.

4.6 If you have applied for employment with us, we will collect personal data that you provide to us during the recruitment process, including personal data that is contained in your resume and in any application form that we require you to fill up. Such personal data may include your employment history and working eligibility rights. Further, you are deemed to have consented to us contacting the character references stated therein (if any); and your previous employers to evaluate your suitability for the role you have applied for.

4.7 Sharing of your personal data is completely voluntary. However, do note that we may not be able to provide some of our services or accept payments without the required information.

5. How Does Paris Baguette Use Information About You?

5.1 We may collect and use your personal data for any or all of the following purposes:

(a) Performing obligations in the course of or in connection with our provision of the goods and/or services requested by you;

(b) Verifying your identity;

(c) Conduct market research;

(d) Responding to, handling, and processing queries, requests, applications, complaints, and feedback from you;

(e) To communicate with you by post, telephone, email, and/or SMS about your orders or purchases, your services, accounts and program participation, a contest or lucky draw you have entered, and your requests for information;

(f) To communicate with you by post, telephone, email, SMS, social media and/or engagement platforms, about our brands, products, events or other promotional purposes, including co-branded offers and affiliate and partner offers;

(g) To create personalized promotions by combining your personal information with non-personal information about you, such as the amounts and types of purchases you make through our online and physical stores or any benefits you receive through PB Rewards.

(h) Processing payment or credit transactions;

(i) Complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;

(j) Any other purposes for which you have provided the information;

(k) For internal operations, including troubleshooting, data analysis, testing, research and service improvement;

(l) Any other incidental business purposes related to or in connection with the above.

(m) Any other purpose for which you have consented or deemed to have consented; or

(n) Any other purposes as permitted or required by any applicable law or regulation.

6. When would Paris Baguette Share Information About You with Third Parties?

6.1 We may share or disclose your personal data with the following third parties for any or all of the above purposes set out in Paragraph 5:

(a) Agents, vendors or service providers who provide support services to us (such as online ordering or delivery services, credit card processors or other payment services providers, mailing houses or website hosts);

(b) Other third parties we have engaged to market our products and services and assist us by communicating (directly or indirectly) with our customers (such as email vendors and social media and engagement platforms). These third parties may use information about you to perform their functions on our behalf;

(c) In the event of a merger, acquisition, financing, or sale of assets or any other situation involving the transfer of some or all of our business assets, we may disclose personal information to those involved in the negotiation or transfer; or

(d) With others with your consent.

7. We May Rely Certain Exceptions Under the PDPA

7.1 In compliance with the PDPA, we may collect, use or disclose your personal data without your consent for the legitimate interests of Paris Baguette Singapore or another person. In relying on the legitimate interests exception of the PDPA, Paris Baguette Singapore will assess the likely adverse effects on the individual and determine that the legitimate interests outweigh any adverse effect.

7.2 In line with the legitimate interests’ exception, we will collect, use or disclose your personal data for the following purposes:

(a) Fraud detection and prevention.

(b) Detection and prevention of misuse of services.

(c) Network analysis to prevent fraud and financial crime, and perform credit analysis; and

(d) Collection and use of personal data on company-issued devices to prevent data loss.

7.3 The purposes listed in the above clause may continue to apply even in situations where your relationship with us (for example, pursuant to a contract) has been terminated or altered in any way, for a reasonable period thereafter.

8. How Can You Withdraw Your Consent?

8.1 The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you in writing.

8.2 You may withdraw consent and request for us to stop collecting, using and/or disclosing your personal data for any or all of the purposes listed above by submitting your request in writing at the contact details provided in Paragraph 14.1.

8.3 Upon receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we shall seek to process your request within ten (10) business days of receiving it.

8.4 Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue providing our goods or services to you and we shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform us in writing in the manner described in Paragraph 8.2 above.

8.5 Please note that withdrawing consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclose without consent is permitted or required under applicable laws.

9. Other Requests

9.1 If you wish to make:

(a) A request for access to a copy of the personal data which we hold about you or information about the ways in which we use or disclose your personal data; or

(b) A request to correct or update any of your personal data which we hold about you, you may submit your request in writing or via email to us at the contact details provided in Paragraph 14.1.

9.2 Please note that a reasonable fee may be charged for an access request provided in (a). If so, we will inform you of the fee before processing your request.

9.3 In general, our response will be within ten (10) business days. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you of the time frame we require to respond to request.

9.4 If we are unable to provide you with any personal data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the PDPA).

10. Protection of Personal Data

10.1 Paris Baguette takes reasonable steps to maintain appropriate physical, technical and administrative security to help prevent loss, misuse, unauthorized access, disclosure or modification of personal information..

10.2 While Paris Baguette uses reasonable efforts to protect personal data in its possession or under its control, you should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.

10.3 Accordingly, you should ensure that you only transmit your personal data from a secure environment, and you are at all times responsible for your own privacy or security settings. We are not responsible and accept no liability for the functionality, privacy, or security measures of any other third-party websites or links.

11. Accuracy of Personal Data

11.1 We generally rely on personal data provided by you (or your authorised representative). To ensure that your personal data is current, complete and accurate.

11.2 You may request to update or change your personal information by:

(a) Follow the opt-out instructions in the promotional emails and SMS we send you;

(b) To update personal information submitted when you register for a PB Rewards account, following instructions on the PB Rewards website to;

(c) Submit a “contact us” online form through the website: https://www.parisbaguette.com.sg/contact;

(d) Send a request to update personal information to us in writing via email at the contact details provided below.

12. Retention of Personal Data

12.1 We may retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws.

12.2 We will cease to retain or anonymise your personal data, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal data was collected and is no longer necessary for any legal or commercial purposes.

13. Transfers of Personal Data Outside of Singapore

13.1 We generally do not transfer your personal data to countries outside of Singapore. However, if we do so, we will obtain your consent for the transfer to be made and we will take steps to ensure that your personal data continues to receive a standard of protection required under the PDPA.

14. Contact Us

14.1 If you have any enquiries or feedback on our Policy and procedures, or if you wish to make any request, Please contact us at:

Paris Baguette Singapore Pte Ltd

Email Address: [email protected]

Office Address: 16 Tai Seng Street #01-01/02 Singapore 534138

Mondays to Fridays 9 am to 6pm. Closed on weekends and public holidays.

15. Changes to Our Policy

15.1 This Policy applies in conjunction with other policies, contractual clauses and consent clauses that apply in relation to the collection, use and disclosure of your personal data by us.

15.2 We may revise this Policy from time to time without any prior notice. You may determine if any such revision has taken place by referring to the date on which this Policy was last updated. Your continued use of our Services or participation in any of our Special Events constitutes your acknowledgement and acceptance of such changes.

Effective date : 27/05/2024
Last updated : 27/05/2024