Personal Data Protection Act Notice

Singapore overlay

Scope and accountability

For this Notice, "personal data" means data, whether true or not, about an individual who can be identified from that data or from that data together with other information to which an organisation has or is likely to have access.

This Notice covers personal data in Floramis's possession or control, including personal data processed on our behalf by service providers. Floramis remains responsible for appointing a Data Protection Officer and maintaining policies and practices needed to meet its PDPA obligations.

The detailed categories of personal data and product purposes are set out in the Privacy Policy:

• Floramis World data schedule
• Floramis Walk data schedule
• Floramis Focus data schedule
• Floramis Store and website data schedule

Purposes and disclosure

Collection, use, and disclosure

How we collect personal data

We may collect personal data when you provide it directly, when you authorise a platform or service to provide it, when it is generated through your use of Floramis, or when collection without consent is permitted or required by the PDPA or another law.

Where required, we will notify you of the relevant purposes and obtain consent before collecting, using, or disclosing additional personal data for a new purpose.

Purposes

Subject to the product schedules in the Privacy Policy, Floramis may collect, use, or disclose personal data to:

• provide, personalise, maintain, and secure Floramis apps, websites, accounts, physical products, Store orders, and support;
• authenticate users and connect the correct account, app state, entitlements, purchases, sessions, and physical Florami;
• process payments, pre-orders, delivery, customs, returns, refunds, and customer requests;
• operate World scanning and location features, Walk step-based progression, and Focus NFC, session, profile, social, group, and event features;
• diagnose faults, prevent fraud or misuse, protect users and Floramis, and improve service reliability;
• respond to enquiries, complaints, requests, feedback, disputes, or legal claims; and
• comply with applicable law, regulation, court orders, or lawful requests from public authorities.

Disclosure to service providers and others

Floramis may disclose personal data to service providers and partners only where reasonably needed for the notified purposes, including hosting, identity, platform, analytics, diagnostics, commerce, payment, delivery, customer-support, security, and professional-service providers.

We may also disclose personal data where required by law, to protect users or Floramis, to investigate suspected wrongdoing, or in connection with a corporate transaction subject to appropriate safeguards.

Individual controls

Your PDPA choices and rights

Withdrawal of consent

You may withdraw consent for the collection, use, or disclosure of personal data by contacting us in writing. We will explain the likely consequences before completing the request where appropriate. Depending on the data and purpose, withdrawal may prevent Floramis from continuing to provide an account, app feature, Store service, or support.

Withdrawal does not affect processing already carried out with valid consent and does not prevent processing that is permitted or required without consent under applicable law.

Access and correction

Subject to exceptions under the PDPA, you may request access to personal data that Floramis holds about you and information about how it has been used or disclosed. You may also request correction of inaccurate or incomplete personal data.

We may need to verify your identity and the scope of your request. A reasonable fee may apply to an access request where permitted. If so, we will tell you the amount before proceeding.

Account deletion and data requests

You may request account deletion or exercise other available privacy rights through the current in-app or support process. Until a dedicated external request route is published, contact support@floramis.com. Some records may be retained where required or permitted for legal, accounting, fraud-prevention, dispute, security, or other legitimate business purposes.

Response handling

Floramis will acknowledge and respond to requests within the periods required by the PDPA. If more time is reasonably needed, we will provide the notice required by law rather than promising a shorter fixed response time that the operating process cannot reliably meet.

Lifecycle safeguards

Protection, retention, and transfers

Accuracy

Floramis takes reasonable steps to ensure that personal data used or disclosed for a decision affecting you is accurate and complete. Please update your account information or contact us when relevant details change.

Protection

Floramis uses reasonable administrative, technical, and organisational measures to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, and similar risks. The measures used depend on the sensitivity of the data, the service involved, and the current risk.

Retention

Floramis stops retaining personal data, or removes the means by which it can be associated with an individual, when it is reasonable to conclude that retention no longer serves the purpose for which the data was collected and is no longer necessary for legal or business purposes.

The Privacy Policy explains the retention criteria that apply across the shared Floramis backend and each product schedule.

Transfers outside Singapore

Floramis and its service providers may process personal data outside Singapore. Floramis will take steps required by the PDPA to ensure that transferred personal data receives a standard of protection comparable to the protection under the PDPA. Those steps may include contractual, organisational, technical, or other legally recognised safeguards.

Data breaches

If Floramis becomes aware of a personal-data breach, we will assess the breach and take appropriate containment and remediation steps. We will notify the Personal Data Protection Commission and affected individuals where the PDPA requires notification.

Contact and changes

Contact Floramis

For personal-data enquiries, feedback, complaints, access or correction requests, withdrawal of consent, or account-deletion requests, contact:

Data Protection Officer
Floramis Pte Ltd
support@floramis.com

Changes to this Notice

Floramis may update this Notice to reflect changes in law, products, or data-processing practices. We will update the date shown on the published notice and provide additional notice where required by law or where a change materially affects your choices.