Privacy notice

Last updated 20 October 2026

The Kampung Apothecary Pte. Ltd. (UEN 202646084G) runs this ordering app. This notice explains what personal data we collect, why, who processes it for us, and how to reach us. We follow Singapore's Personal Data Protection Act (PDPA).

What we collect and why

• Email address: to sign you in with a one-time code, and to send you your receipt and invoice and identify your orders.
• Name: so we know who an order is for.
• WhatsApp number: to tell you when your order is ready or about its delivery.
• At checkout, we ask for your name, WhatsApp number and email so that we can deliver your order and send you the receipt and invoice. You do not need an account to check out. If you check out without signing in, the email you type is not confirmed with a code.
• Delivery address (block, street, unit, postal code): to deliver your order. When you type a postal code, we look it up to fill in the block and street.
• Orders and payments: what you ordered, totals, and whether it was paid or refunded. Card and PayNow details are handled by our payment provider; we never see them.
• Returned bottles and credit: how many bottles you returned and the credit you earned.
• Saved details (optional): your WhatsApp number and address, if you tick “save for next time”. You can delete them in Profile at any time.
• Why you left checkout: if you leave without ordering, we may ask one question, “What stopped you?”. You tap one of a few answers. Nothing you type is sent, and the answer is not linked to your name, email or phone number.
• How the app is used: pages visited and buttons tapped, and recordings of app sessions with every field you type into hidden. This tells us where the app is confusing. It does not include your name, email, phone number or address.

Paying without an account

If you pay without signing in, we create a temporary account for you on your phone so that your order is linked to you. If you do not place an order, we delete that account after 30 days. If you do place an order, the account is kept with the order, for the time set out below. Afterwards you can add your email to the account, with a code we send you, to keep your order history and bottle credit.

Private order links

The emails we send about an order contain a private link to your order page. Anyone who has the link can see what you ordered and its status, and can download its invoice, which shows your name and email address and, for a delivery, your delivery address. Please do not share the link. The link is not included in the usage data described above.

Who we share it with

We use a small number of trusted service providers to host the app, take payments, send sign-in emails, look up addresses and understand how the app is used. They only use your data to provide that service to us. Some of them store data outside Singapore; we only use providers that protect it to a standard comparable to the PDPA. We don't sell your data or use it for advertising.

How long we keep it

Order and payment records are kept for at least five years, as Singapore's tax and company rules require. Saved details are kept until you delete them. Other data is kept only as long as we need it for the purposes above.

Your choices

• Delete your saved details in Profile.
• Ask us for a copy of your data, to correct it, or to close your account: email us (below).
• You can withdraw consent at any time; we may then be unable to take your orders.

Contact

Our data protection contact is reachable at admin@kampungapothecary.com.