Privacy Policy

SeaBaeHo is operated by SEABAEHO SEAFOOD PTE. LIMITED (UEN 202319486K), incorporated on 18 May 2023. In this policy, “we”, “us” and “our” refer to that company.

This policy explains how SeaBaeHo handles personal data when you browse our website, sign in, place an order or contact us. Personal data is information that identifies you, alone or together with other information available to us.

We collect, use and disclose personal data for the purposes described here with your consent, or where Singapore’s Personal Data Protection Act 2012 (PDPA) otherwise permits or requires it. Using the website does not, by itself, subscribe you to promotional messages.

• Orders and delivery: your name, mobile number, optional email, delivery address and unit, postal code, requested date, items, quantities, prices and any notes you provide.
• Account details: if you choose Google sign-in, your Google account identifier, name, email, verification status and profile image. We do not receive your Google password or request access to your Gmail or Drive files.
• Saved details: account contact details, saved carts and addresses you choose to save. A successful order made while signed in can update your account contact details.
• Order and support records: order references, payment status or confirmation information, the terms and privacy-policy versions you acknowledged and when we received that acknowledgement, messages and any photographs or documents you choose to send about an order.
• Technical information: browser storage and security cookies, request information such as your IP address, and service diagnostics needed to operate and protect the website.
• Optional campaign information: if you enable it below, the campaign labels, landing page, referring website domain and time associated with how you found the shop.

Please provide only information needed for your order or enquiry. If you order for someone else, make sure you are authorised to share their details and tell them how we will use those details for delivery.

We use the relevant information to process and price orders, confirm stock or final weight, arrange delivery, reconcile payment, provide account features and respond to enquiries or quality concerns. We also keep appropriate business records and protect the service against fraud, abuse and duplicate orders.

Order reporting may include purchased items, totals, delivery timing, a postal sector, an account identifier where available and a coded customer identifier. If you enable campaign attribution, we can link limited campaign information to that reporting to understand which sources bring customers to the shop.

Order confirmations, payment instructions and delivery updates are service messages. Promotional messages require a separate permitted basis under the PDPA and applicable Do Not Call rules. You can ask us to stop promotional messages without losing ordinary order support.

We share information relevant to the service with the people and providers helping us operate the shop:

• Take App: order processing, customer and delivery details, order references, totals and the order/payment workflow.
• WhatsApp: messages you exchange with us and the order communications provided through Take App. Those services also apply their own privacy terms.
• Google: authentication if you choose Google sign-in.
• Hosting, database and technical providers: infrastructure used to run the website and store its records, including Vercel hosting and our MongoDB database service.
• Delivery and support personnel: the contact, address and order information needed to fulfil delivery or resolve an issue.
• Professional advisers or public authorities: where reasonably necessary for advice, a legal obligation, an investigation or the protection of legal rights.

Some providers may process information outside Singapore. Where we transfer personal data overseas, we must ensure a standard of protection comparable to that under the PDPA through the applicable arrangements or another permitted basis.

Essential cookies support sign-in and security. A short-lived order cookie lets you view an accepted order’s confirmation; it expires after one hour. Browser storage remembers your cart and helps avoid duplicate order submissions.

Optional campaign attribution is separate from these shopping functions. It is off unless you enable it in your privacy choices. If enabled, it stores the first and most recent qualifying campaign or referral information; it is not a record of every page you view. We do not use this setting to subscribe you to marketing messages.

You can manage cookies and site storage in your browser. Clearing or blocking essential storage may sign you out, clear your cart or affect checkout recovery. Browser-stored cart, preference and enabled campaign records can remain until cleared or replaced; they do not all have an automatic expiry.

This choice applies to this browser. Turning optional attribution off removes its saved browser data and stops future attribution being sent with orders from this browser. It does not automatically erase information already held in order records. Contact us about previously collected information.

We use reasonable safeguards appropriate to the information we handle, including restricted account access and measures to protect order requests. No online service can promise absolute security. Please protect your account and avoid sending passwords or unnecessary identity documents in order notes or messages.

We retain personal data for as long as it remains necessary for the relevant business or legal purpose, including order fulfilment, accounting, disputes and security. When those purposes no longer require it, the information should be deleted or anonymised. Different records and service providers may have different retention periods; contact us about a particular record.

We will assess suspected personal data breaches and notify the Personal Data Protection Commission and affected individuals where the PDPA requires it, within the applicable time limits.

You can contact us to request access to your personal data and information about its use or disclosure, ask for inaccurate information to be corrected, withdraw consent with reasonable notice, or raise a privacy concern. These requests are subject to the PDPA’s requirements and exceptions.

We may need proportionate information to verify your identity and understand the request. We will respond as soon as reasonably possible. If we cannot fulfil an access or correction request within 30 days, we will tell you in writing within that period when we expect to respond. Any permitted access fee will be explained in advance.

If you withdraw consent needed for an order or account service, we will explain the likely effect before acting on the request. Withdrawal does not affect processing already carried out lawfully, or information we must still retain or use under a legal exception or obligation.

You may also ask us to review whether information can be deleted. We will consider any ongoing business or legal need to keep it. You can remove saved addresses through the account features where available.

Email seabaeho@gmail.com or message WhatsApp +65 9188 2739. Please mark your message “Privacy / data protection” and describe your request so it can be directed to the person responsible for data protection.

If a concern remains unresolved, you can find information about your rights and the complaints process on the Personal Data Protection Commission’s website.

We may update this policy when our services, practices or legal obligations change. The updated date appears above. Where a new purpose needs consent, publishing an updated policy alone will not replace that consent. Our Terms & Conditions explain how ordering works.