Privacy Policy

This Privacy Notice and its Addendum(s) (“Privacy Notice”) describe how Sicpama (singapore) Pte. Ltd, its respective subsidiaries, affiliates, associated companies and jointly controlled entities (collectively “Sicpama”, “we”, “us” or “our”) collect, use, process and disclose your Personal Data through the use of Sicpama’s website, as well as service, features and other services globally, operated by Sicpama (collectively, “Services”).

This Privacy Notice applies to our users(such as diners), (collectively “you”, “your” or “yours”).

“Personal Data” is any information which can be used to identify you or from which you are identifiable. This includes but is not limited to your name, nationality, telephone number, bank and credit card details, personal interests, email address, your image, government-issued identification numbers, biometric data, race, date of birth, marital status, religion, health information, vehicle and insurance information, employment information and financial information.

This Privacy Policy describes the types of personal data we collect from visitors to, and users of, our Online Services. The Privacy Policy also sets forth how we use such personal data, provides other details about our practices in relation to such personal data, and explains how to contact us if you have any questions or concerns. By visiting, and/or using, our Online Services, you agree and where required you consent to the collection, use and transfer of your personal data in the manner set out in this Privacy Policy.

We would like to inform you that we are a proud member of the Sicpama Group, and as a cohesive family, we make decisions together. SicPama Co.,Ltd. in South Korea, being the home country of Sicpama, plays a key role in determining the methods and purposes for processing your personal data. SicPama Pte. Ltd. Your personal information collected by in Singapore may also be accessible by SicPama Co., Ltd.This collective responsibility within the Sicpama family ensures that you can conveniently access our services across different countries. Please note that you have the right to assert your rights against both parties concerning the processing activities outlined in this Privacy Policy..

collection of personal data

Your personal data will enable us to provide you with access to the relevant parts of the Online Services and to supply the services you have requested. It will also enable us to contact you where necessary concerning our services. We will also use and analyse the information we collect so that we can administer, support, improve and develop our business, for any other purpose whether statistical or analytical and to help us prevent fraud.

An overview of the personal data we process

In this section you can find general information about the categories of personal data we process about you. For your understanding, personal data is information that directly identifies you (such as your name or photo picture) or enables us to indirectly identify you (for example, on the basis of a user ID linked with the personal information in your profile).

You will find more detailed information on our processing activities below, in the next section. But our data processing activities on the platform can be summarized by reference the main categories of personal data:

1. Required personal data for each feature

Membership registration: profile/nickname, phone number, email, name, date of birth, gender
Simple registration: profile/nickname, phone number, email, name, date of birth, gender
Sign up for phone number: phone number
Mobile phone authentication: date of birth, gender, phone number, name
Order: Order history, profile/nickname, credit card information
Service use: date of birth, gender
Customer inquiries: phone number, e-mail

2. Purpose of collection and use of personal information

Profile/nickname, name, phone number, email:Identification according to the use of membership service, delivery of announcements, confirmation of personal intention, transmission of other service information and advertisement information provided by the company and affiliates, authentication of identity required for service use, response to customer inquiries and processing
Date of birth, gender: Provide personalized service
Order history, profile/nickname, credit card information: identity verification required for service use

a. Profile data (master data)

this includes your nickname, email address, profile picture, telephone number, gender, name and date of birth.
This data is your master data, which we absolutely need for our services. Without email address/telephone number, you cannot create a profile. Together with your name, this is your master data. We need your age to ensure that you are not a minor.

b. order history data

This category includes the following information: name, order history, and email address.
We collect this data upon receipt of receipts and sales slips. The data will be retained until the service provision is completed and the payment and settlement process is finalized.

c. payment data

This includes card information(such as, card number, expiring date, cvc and name of card company)
We require this data in order to process your payment, initiate a refund, or cancel your order.

d. complaints and customer consultation data

This category includes the following information: name, telephone number, email address, content of the issue, visit history, and Telephone Consultation Transcript.
We collect this data to address and resolve complaints and provide customer consultation. The data will be retained until the complaint handling and customer consultation process is completed.

e. cookies

Cookies are small data files that are transferred to your device, allowing it to recognize and identify your device. They enable your device to store and remember information from the Online Services for future use. Cookies are used to track the visiting and usage patterns of each service and website visited by users, including popular search terms and security access status, in order to provide users with optimized information. This information helps us enhance and improve your overall user experience. It's important to note that cookies do not contain any personally identifiable information, and we do not use cookies to obtain such information. Your personal data can only be obtained by our partner service providers if you voluntarily provide it to us. If you prefer, you can refuse cookie storage by adjusting the options in the Tools > Internet Options > Privacy menu of your web browser. However, please note that refusing cookie storage may cause difficulties in accessing personalized services.e to refuse cookies by adjusting the settings on your device or web browser.

For the purpose of providing users with better services, Sicpama utilizes Google Analytics, a web analysis service provided by Google, Inc. ("Google"), to analyze and evaluate how users utilize the company's services, understand user demand, and improve and personalize the services and products in order to provide efficient services.

The company may use Google Analytics for statistical analysis and academic research purposes.
The processing of information collected through Google Analytics is subject to Google Analytics' privacy policy and terms of service:
- Google Analytics Terms of Service: https://www.google.com/analytics/terms/kr.html
- Google Analytics Privacy Policy: https://policies.google.com/privacy?hl=kr
IP addresses are anonymized by removing the last two octets and stored without being merged or linked with other Google data.
Customized Advertising: To provide personalized advertisements to customers, the company collects and uses "cookies" in web browsers and advertising identifiers (ADIDs) in mobile apps. The company automatically collects customer service usage history through cookies and advertising identifiers to conduct customized advertising. The cookies and advertising identifiers collected by the company are not linked to other personal information and do not identify individuals. Users can refuse to receive such customized advertisements at any time.

Disclosure of your information

Provision of personal information to third parties

1.1 In principle, we do not provide personal information to a third party beyond the scope of the purpose of collection and use or without the member's consent. When personal information is provided to a third party, the member is notified in advance of the 'person to be provided, the purpose of use of the person to be provided, the items of personal information provided, and the period of retention and use, and then seeks consent. If the member does not agree, does not provide

1.2 Personal information that the company provides to the following third parties:

Recipients: Partner vendors (e.g., Vibes Cafe) / Other users who have placed orders together with the user
Purpose of provision:
- Order verification and service provision (recipient verification, order management, exchange/return/cancellation processing, inquiries and consultations)
- Issuance of coupons (with user consent)
- Sharing order details with others
Personal information items provided:
- Age group, gender, order history, payment history
- Nickname, order history, statistical information
- Nickname, profile image, order history
Retention and use period of personal information:
- Until the service provision related to the user's order is completed
- Immediately deleted upon withdrawal of user consent.

User obligations

Users have an obligation to comply with the laws and regulations regarding the protection of personal information in order to securely protect their own personal information.
Users have an obligation to protect their personal information securely, and the company is not responsible for any incidents caused by the user's negligence. Therefore, users are obligated to make their best efforts to protect their personal information, such as carefully managing their ID and password and regularly updating them.
Users have an obligation to provide and maintain their personal information accurately and up to date. Users are solely responsible for any problems that may arise from inaccurate information provided by them.
Users may face penalties under the laws and regulations related to personal information if they use another person's personal information for membership registration or service usage, resulting in loss of membership status.
Users also have an obligation not to infringe upon or disclose others' personal information. If users mention or disclose personal information of other users that they have become aware of during the service usage, they may be subject to penalties under the relevant laws and regulations regarding personal information

Security and data retention

Security Measures and Disclaimer

1.1 We will request that our service providers use all reasonable endeavors to maintain the security of your personal data and protect it from misuse, interference, loss, unauthorized access, modification, or disclosure. We will destroy any personal data we hold about you that is no longer required under the terms of this Privacy Policy.

1.2 The company takes the following measures to ensure the safety of personal information:

Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
Technical measures: Management of access rights in the personal information processing system, installation of access control systems, encryption of unique identification information, installation of security programs.
Physical measures: Access control for computer rooms, data storage rooms, etc.

1.3 Due to the nature of the internet, we and our service providers do not provide any guarantee or warranty regarding the security of your personal data during transmission to us or storage by us. You acknowledge that you disclose your personal data to us at your own risk. Please contact us immediately if you become aware or have reason to believe that there has been any unauthorized use of your personal data in connection with the Online Services.

2. Destruction of personal information

2.1 The company destroys the personal information without delay when the personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing.

2.2 If personal information must be kept in accordance with other laws and regulations despite the expiration of the personal information retention period agreed to by the information subject or the achievement of the purpose of processing, the personal information is moved to a separate database (DB) or stored in a different storage location. and preserve it.

2.3 The procedure and method of destroying personal information are as follows.

2.4 Destruction procedure: The company selects the personal information for which the reason for destruction occurred and destroys the personal information with the approval of the person in charge of personal information protection of the company.

2.5 Destruction method: The company destroys personal information recorded and stored in electronic file form so that the record cannot be reproduced, and personal information recorded and stored in paper documents is destroyed by shredding or incinerating.

3. Personal Information Retention and Use Period:

Until the service provision related to the user's order is completed
Immediately deleted upon withdrawal of user consent
Personal information may be retained for a certain period of time in accordance with relevant laws and regulations.
To prevent fraudulent use, related personal information can be kept for 6 months after membership withdrawal.
If there is no record of service use by a member for one year, the member is notified in advance and stored separately for 3 years
Members who engage in expedient or illegal acts by repeatedly re-registering or voluntarily canceling membership after withdrawing from membership to obtain economic benefits with discount coupons and event benefits provided by the company, or using their names without permission in the process, their information is stored for 90 days after membership withdrawal in order to block it.
Personal information may be retained for a certain period of time in accordance with the provisions of related laws

4. Entrustment of Personal Information Processing:

To ensure smooth and improved services, the company may entrust the processing of personal information to external professional companies.
The personal information is retained until member withdrawal, termination of outsourcing contract, or service termination.

Rights, Obligations, and Exercise Methods of Data Subjects and Legal Representatives:

Data subjects have the right to access, correct, delete, and request the suspension of processing of their personal information from the company at any time.
Requests regarding the mentioned rights can be made to the company in writing, by email, fax, or other means.
Requests can also be made through a legal representative or an authorized delegate.
The right to access, correction, deletion, and suspension of processing of personal information may be limited under certain circumstances.
Requests for correction and deletion of personal information cannot be made for personal information that is expressly specified as a collection target under other laws.
The company verifies the requester's identity before processing requests related to personal information.

5. Security Measures for Personal Information:

The company implements administrative, technical, and physical measures to ensure the security of personal information.
Administrative measures include the establishment and implementation of internal management plans and regular employee training.
Technical measures include access control management, installation of access control systems, encryption, and security programs.

Accessing and updating

Please contact us if you would like to access your personal data held by us or our service providers. We will use reasonable endeavours to provide a complete list of your personal information within a reasonable period of receipt of your request. Please email us if you would like to receive a copy of this information – support@sicpama.com. We, and our service providers reserve the right to charge a nominal fee for the processing of such request in accordance with local legislation.
You may contact us at any time at support@sicpama.com to correct any of your personal data that is inaccurate, incomplete or out-of-date, or to request that all or any part of your personal data be deleted. We will use reasonable endeavours to correct or delete your personal data as requested within a reasonable period of receipt of your request.
However Requests for correction and deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.
Deletion of your account, whether with us or with our service providers will not automatically delete your personal data. If you would like our service providers to delete all personal data together with the deletion of your account, please email us at support@sicpama.com.
Please note that the deletion of your personal data from our database will result in us not being able to provide you with any services that require such personal data. If applicable, any legal requirement on us to maintain certain records of your personal data shall prevail over any of your requests. We may require you to prove your identity before providing you with copies of your personal data.
The company checks whether the person who made the request, such as a request for viewing, a request for correction or deletion, or a request for suspension of processing according to the rights of the information subject, is the person or a legitimate agent.

changes to our privacy policy

We may revise this Privacy Policy periodically. Any modifications to this Privacy Policy will be published on the Website to ensure that you stay informed about how we collect and use your personal data. We encourage you to review this Privacy Policy whenever you access the Website or engage with us to stay updated on our information practices and ways to protect your privacy. The updated versions of this Privacy Policy will indicate the date of the revision at the end, allowing you to verify the most recent amendment date. Any changes to this Privacy Policy will become effective upon posting the revised version on the Website. We will notify you of the reasons for the change and the content of the change on the service screen at least 7 days prior to implementation. However, if there are significant changes regarding members' rights in the collection and use of personal information, etc., we will notify you at least 30 days in advance. By continuing to use the Website after such changes, you acknowledge and accept the revised Privacy Policy. However, if the changes have a substantial impact on your rights or obligations regarding the handling of your personal data, they will only apply to personal data collected after the changes are implemented.

other websites

Our Website may include links to external websites, apps, content, services, or resources that are operated by third parties. It's important to note that these third-party entities have their own privacy policies. Therefore, when you access these external links and utilize their services, please be aware that we do not assume any responsibility or liability for their privacy practices or the collection of personal data through these platforms. We strongly recommend reviewing the privacy policies of these websites or apps before providing any personal information to them.

contact

All comments, queries and requests relating to our use of your information are welcomed and should be addressed to our data protection officer at s upport@sicpama.com

Last modified 22 June 2023