Privacy Policy (GDPR & PDPA Compliant)
Last updated: 20251201
This Privacy Policy explains how [b-iii.com] (“we”, “our”, “us”) collects, uses, discloses, and protects your personal data in accordance with:
The EU General Data Protection Regulation (GDPR), and
The Singapore Personal Data Protection Act 2012 (PDPA).
By accessing our website, registering an account, or placing an order, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.
1. Personal Data We Collect
1.1 Personal Data Provided by You
When you register, place an order, or communicate with us, we may collect:
Full name
Email address
Mobile phone number
Billing and delivery address
Order and transaction details
Account login credentials
Any information you voluntarily provide through forms or customer support
This information is required for account registration, order processing, delivery fulfillment, and customer service.
1.2 Automatically Collected Data
When you browse our website, we may automatically collect:
IP address
Device and browser information
Usage data and interaction logs
Cookies and similar technologies
This data is used for security, analytics, fraud prevention, and website optimization.
2. Purpose and Legal Basis for Processing
We collect and process personal data for the following purposes and legal bases:
Purpose Legal Basis
Account registration & management Consent / Contract
Order processing & delivery Performance of contract
Payment processing Contract / Legal obligation
Customer support & communications Legitimate interests / Consent
Website security & fraud prevention Legitimate interests
Legal and regulatory compliance Legal obligation
By registering an account or placing an order, you expressly consent to the collection and use of your personal data for the purposes stated above.
3. Disclosure of Personal Data
We do not sell your personal data.
Your data may be disclosed only to:
Logistics and delivery partners (for shipping and fulfillment)
Payment service providers (for secure transaction processing)
IT service providers and system vendors (platform operation and maintenance)
Government authorities or regulators, where required by law
All third parties are contractually obligated to protect your personal data and process it only for authorized purposes.
4. International Data Transfers
Where necessary, your personal data may be transferred outside Singapore or the European Economic Area (EEA).
In such cases, we ensure appropriate safeguards are in place, including:
Standard contractual clauses
Adequate data protection agreements
Compliance with GDPR cross-border transfer requirements
5. Data Protection and Security Measures
We implement reasonable administrative, technical, and physical safeguards to protect personal data, including:
Secure servers and access controls
Encryption where applicable
Restricted internal access to personal data
Despite these measures, no system is completely secure, and we cannot guarantee absolute security of your data.
6. Data Retention
We retain personal data only for as long as necessary to:
Fulfill the purposes for which it was collected
Meet legal, accounting, or regulatory requirements
When data is no longer required, it will be securely deleted or anonymized.
7. Your Rights (GDPR & PDPA)
You have the right to:
Access your personal data
Request correction of inaccurate or incomplete data
Withdraw consent at any time (where consent is the legal basis)
Request deletion of your personal data (subject to legal obligations)
Object to or restrict certain processing activities
Requests can be made by contacting us using the details below.
We may need to verify your identity before processing requests.
8. Cookies Policy
We use cookies and similar technologies to enhance user experience and analyze website traffic.
You may manage or disable cookies via your browser settings.
Please note that disabling cookies may affect certain website functionalities.
9. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time.
Updates will be posted on this page with a revised “Last updated” date.
Continued use of the website after changes constitutes acceptance of the updated policy.
10. Contact Information (Data Protection)
If you have any questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact: SDAI LIMITED