Greign Pte Ltd is responsible for the personal data we collect for our business. This policy explains what we collect, why we use it and how you can make a request about it. It covers shopping with us, customer accounts, enquiries, appointments and aftercare.
For privacy requests, email contact@greign.com with the subject “Privacy request” and address your message to the Data Protection Officer.
Information we collect
We collect information relevant to the features you use:
- Contact and delivery details: your name, email, telephone number, delivery and billing addresses, and a recipient’s details if you send a gift.
- Orders and service records: items purchased, payments and refunds, transaction references, delivery updates, return requests, repairs and correspondence.
- Account and preferences: account identifiers, saved creations, preferred language or contact channel, and records of marketing choices, including when those choices were made.
- Enquiries and bespoke requests: information you give us about appointments, sizing, designs and care concerns, including photographs you choose to send.
- Technical information: IP address, browser and device information, session identifiers, error or security logs, and website activity collected by enabled technologies as explained in our Cookie Policy.
Payment information is handled through our checkout and payment providers. GREIGN receives information needed to confirm and manage transactions. Please do not email full card details, account passwords, sign-in codes or copies of identity documents unless we have explained a specific need and provided a suitable way to share them.
We receive information directly from you, through your use of our website, and from providers supporting payment, delivery, account services or fraud prevention. If you provide another person’s details, share only what is necessary and make sure you are authorised to do so.
How we use information
We use personal data to process orders and payments; deliver purchases; maintain accounts and saved creations; respond to enquiries; arrange appointments, returns and repairs; keep business records; prevent fraud; and meet legal obligations.
We also use appropriate technical information to operate, troubleshoot and improve the website. Optional analytics and advertising technologies are subject to the choices described in our Cookie Policy.
We collect, use and disclose personal data with consent where required, including consent that may be recognised by applicable law, or under an applicable legal exception. We will explain a new purpose and obtain fresh consent where required. Buying from us or asking a service question does not, by itself, sign you up for promotional messages.
Marketing and contact preferences
You can choose whether to receive promotional email or WhatsApp messages. These choices are separate from your preferred channel for enquiries and order support.
To stop promotional emails, use the unsubscribe link or email us. To stop WhatsApp promotions, reply “STOP” or email us. Where account preference controls are available, you can also update your choices there. We will apply your request as soon as practicable and within applicable legal deadlines.
We may still send necessary messages about an order, account security, a repair or a privacy request. Withdrawing marketing consent does not affect your purchase or aftercare rights.
Who receives information
We share relevant information with providers that help us operate the business. Depending on the service used, these include Shopify for commerce and customer accounts; payment providers; delivery partners; website, email and IT providers; and repair workshops or laboratories working on your request.
We limit the information shared to what is reasonably needed. A workshop may need your item reference and repair instructions; it does not automatically need your full customer history.
Where you choose WhatsApp, your messages and contact details also pass through that platform under its own privacy terms. We may disclose information to professional advisers, authorities or other parties when required or permitted by law, or as part of a lawful business transfer with appropriate protections.
We do not rent customer contact lists. If we introduce optional advertising features that share personal data with advertising partners, we will disclose the parties, purposes and available choices before using those features, and obtain consent where required.
Shopify and other providers
Shopify and some payment or communications providers may process certain information for their own purposes under their privacy notices, in addition to processing information for GREIGN. You can read the Shopify Consumer Privacy Policy. Contact us if you are unsure who handles a particular request.
Overseas processing
Our service providers may store or process information outside Singapore. Where we transfer personal data overseas, we take steps required by the Singapore Personal Data Protection Act to ensure a comparable standard of protection, such as appropriate contractual obligations or another permitted basis. Contact us for information about the safeguards relevant to your data.
Security and retention
We use reasonable organisational and technical measures to protect personal data and restrict access to people who need it for their work. No system is completely secure. If a breach requires notification, we will notify the relevant regulator and affected individuals as required by law.
We keep information for as long as needed for the purpose collected and applicable business or legal requirements. Order and payment records may be needed for accounting, tax and disputes; repair records for service history; and limited consent records to respect your choices. We delete, anonymise or stop retaining data when those purposes no longer apply. Closing an account does not automatically erase records we must lawfully retain.
Your requests and complaints
You can ask to access your personal data, correct an error, and obtain information about its use or disclosure during the preceding 12 months, subject to applicable exceptions. You can also withdraw consent on reasonable notice or ask us to close your account or delete information that is no longer needed. Deletion is subject to applicable retention obligations; it is not an unrestricted right under Singapore law.
Email contact@greign.com with enough information to identify the relevant account or interaction. We may need to verify your identity proportionately. We will explain any permitted fee for an access request before proceeding. We respond as soon as reasonably possible; if an access request cannot be completed within 30 days, we will tell you within that period when to expect a response.
If withdrawing consent prevents us from fulfilling a service, we will explain the consequence. It does not affect processing that was lawful before withdrawal. If a request cannot be fulfilled, we will explain the reason where permitted.
You may raise a concern with our Data Protection Officer or the Personal Data Protection Commission Singapore. Other rights may apply under the laws of your country.
Children and updates
Our services are intended for adult purchasers. If a child has provided personal data without appropriate permission, a parent or guardian can contact us so we can assess and address it.
We will update this policy when our practices change and show a new effective date. For material changes, we will provide additional notice or seek consent where required.