PRIVACY POLICY.TXT
_ □ ×
PRIVACY POLICY
Gechel Holdings LLP (UEN T22LL0798F) · Last updated: 01 January 2026 · Effective date: 8 August 2022
1. INTRODUCTION
Gechel Holdings LLP (“Gechel”, “we”, “us” or “our”) is committed to protecting the personal data of our customers, suppliers, business contacts and website visitors in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”). This Privacy Policy explains how we collect, use, disclose, protect and retain personal data, and the rights available to you in respect of that data. This Policy applies to this website and to all brands, businesses, and services owned, operated, or managed by Gechel Holdings LLP, including those not specifically named in this Policy. Where you purchase from one of our Brands through a third party marketplace, that platform operates its own privacy policy in respect of the data it collects from you directly. This Policy governs only the personal data that we receive, hold or process.
2. WHAT IS PERSONAL DATA
“Personal data” means data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access.
3. PERSONAL DATA WE COLLECT
Depending on how you interact with us, we may collect identity and contact data such as name, delivery and billing address, email address and telephone number; order and transaction data such as order contents, history, delivery instructions, gift messages, recipient details, delivery dates and records of correspondence; payment data including transaction references, the last four digits of a card and payment method used; communications data including enquiries, feedback, complaints, reviews and information you provide by email, messaging app, social media or telephone; and technical and usage data including IP address, browser type, device identifiers, operating system, referring URL, pages viewed, and visit dates and times collected through cookies and similar technologies. We do not store full payment card numbers.
4. PURPOSES FOR WHICH WE USE PERSONAL DATA
We collect, use and disclose personal data to fulfil orders and purchases; arrange and effect delivery, including to third party recipients; process payments, refunds, exchanges and cancellations; communicate order updates and issues; respond to enquiries, feedback and complaints; provide after-sales support; maintain records of our dealings; manage supplier, vendor and business partner relationships; undertake record keeping, accounting, invoicing and audit; analyse sales, product performance and website usage; detect, prevent and investigate fraud, misuse or unlawful activity; send promotions, offers, new product announcements and newsletters where you have consented or where permitted by law; conduct surveys and request reviews; comply with applicable laws, regulations, codes of practice and guidelines; respond to public-authority requests; and establish, exercise or defend legal claims. Where we intend to use personal data for a purpose not described above, we will notify you and, where required, obtain your consent.
5. BASIS ON WHICH WE COLLECT, USE AND DISCLOSE
We rely on your consent, on deemed consent under the PDPA, including where you voluntarily provide personal data for a purpose that is reasonably obvious in the circumstances, and on exceptions permitted under the PDPA, including the legitimate interests and business improvement exceptions where applicable.
6. DISCLOSURE OF PERSONAL DATA
We may disclose personal data to delivery and logistics providers, including riders and couriers; payment processors and financial institutions; marketplace and delivery platforms through which an order was placed; IT, hosting, email, customer support and analytics service providers; professional advisers including accountants, auditors and lawyers; regulators, law enforcement agencies, courts and other public authorities; and a purchaser or prospective purchaser in connection with any sale, merger or restructuring of our business or any Brand. We do not sell personal data. Where we engage a third party to process personal data on our behalf, we require that party by contract to provide a standard of protection comparable to that required under the PDPA.
7. PROTECTION OF PERSONAL DATA
We implement reasonable administrative, physical and technical measures to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. These measures include access controls, restricting access on a need-to-know basis, use of reputable service providers, and secure disposal of records. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. DATA BREACH NOTIFICATION
If a data breach occurs that results in, or is likely to result in, significant harm to affected individuals, or is of a significant scale, we will notify the Personal Data Protection Commission and affected individuals in accordance with the PDPA.
9. RETENTION OF PERSONAL DATA
We retain personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required for our legal or business purposes. Transaction and accounting records are retained for at least five years in accordance with Singapore tax and record keeping requirements. Personal data that is no longer required is deleted or anonymised.
10. YOUR RIGHTS
Subject to the PDPA, you may request access to the personal data we hold about you and information about how it has been used or disclosed in the preceding year; request correction of personal data that is inaccurate or incomplete; and withdraw consent to our collection, use or disclosure of your personal data for any purpose, on reasonable notice. Withdrawing consent may mean we are no longer able to provide certain products or services, and we will inform you of the likely consequences before giving effect to the withdrawal. To make a request, please contact our Data Protection Officer using the details below. We may require identity verification, and a reasonable fee may apply to access requests. We will respond within 30 days, or inform you of the time by which we will respond if we are unable to do so within that period.
11. DATA PROTECTION OFFICER
Questions, requests or complaints relating to this Policy or to our handling of personal data may be addressed to:
Data Protection Officer, Gechel Holdings LLP.
Email: DPO@gechel.com
Address: 55 Toh Guan Road East #03-06, Uni-Tech Centre, Singapore 608601.
12. CHANGES TO THIS POLICY
We may update this Policy from time to time. The revised Policy will be posted on this page with an updated “Last updated” date and takes effect from the date of posting. Your continued use of our website or services after that date constitutes acceptance of the revised Policy.
13. GOVERNING LAW
This Policy is governed by and construed in accordance with the laws of Singapore.