In this Personal Data Protection Policy, “Personal Data” refers to any data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which we have or are likely to have access, including data in our records as may be updated from time to time.
Examples of such Personal Data you may provide to us include your name, NRIC, passport or other identification number, telephone numbers, mailing address, email address, network data and any other information relating to any individual which you have provided us in any form you may have submitted to us, or via other form of interaction with you.
Collection of your personal information
Generally, Toast Box collects Personal Data, either directly from you or from your authorised representatives (i.e. persons whom you have authorised, persons who have been validly identified as being you or your authorised representative pursuant to our then-current security procedures), from third parties, from publicly available sources or through our website (or any of our other online presence, including Facebook) in the following ways:
- when you submit a form for registering as a customer on our website or any other forms relating to any of our Products and Services
- when you interact with us, for example, via telephone calls, letters, face-to-face meetings and emails;
- when you use some of our services, for example, websites and apps including establishing any online accounts with us;
- when you request that we contact you, be included in an email or other mailing list;
- when you respond to our promotions, initiatives or to any request for additional Personal Data;
- when you are contacted by, and respond to, our marketing representatives and customer service team;
- when we receive references from business partners and third parties, for example, where you have been referred by them; or
- when you submit your Personal Data to us for any other reasons.
If you provide us with any Personal Data relating to a third party (e.g. information of your spouse, children, parents, and/or employees), by submitting such information to us, you represent to us that you have obtained the consent of such third party to provide us with their Personal Data for the respective purposes.
You should ensure that all Personal Data submitted to us is complete, accurate, true and correct. Failure on your part to do so may result in our inability to provide you with the Products and Services you have requested.
Purposes for the collection, use and disclosure of personal data
Toast Box may collect, use and disclose your Personal Data for the following purposes:
- responding to your queries and requests;
- managing the administrative and business operations of Toast Box and complying with internal policies and procedures;
- facilitating business asset transactions (which may extend to any mergers, acquisitions or asset sales) involving any of the Companies;
- matching any Personal Data held which relates to you for any of the purposes listed herein;
- resolving complaints and handling requests and enquiries;
- preventing, detecting and investigating crime and analyzing and managing commercial risks;
- providing media announcements and responses;
- monitoring or recording phone calls and customer-facing interactions for quality assurance, employee training and performance evaluation and identity verification purposes;
- organising promotional events;
- legal purposes (including but not limited to obtaining legal advice and dispute resolution);
- conducting investigations relating to disputes, billing or fraud;
- meeting or complying with any applicable rules, laws, regulations, codes of practice or guidelines issued by any legal or regulatory bodies which are binding on Toast Box (including but not limited to responding to regulatory complaints, disclosing to regulatory bodies and conducting audit checks, due diligence and investigations); and
- purposes which are reasonably related to the aforesaid.
Where permitted under the Personal Data Protection Act (the “Act”):-
- Toast Box may also collect, use and disclose your Personal Data for the following “Toast Box Additional Purposes”:
- analytics and tracking;
- conducting market research and surveys to enable us to understand and determine customer location, preferences and demographics to develop special offers and marketing programmes in relation to Toast Box’s Products and Services, and to improve our service delivery and your customer experience at our touchpoints;
- providing additional Products and Services and benefits to you, including promotions, loyalty and reward programmes from Toast Box;
- matching Personal Data with other data collected for other purposes and from other sources (including third parties) in connection with the provision, marketing or offering of Products and Services by Toast Box;
- leads generation and management for marketing Toast Box’s Products and Services;
- administering contests, competitions and marketing campaigns, and personalising your experience at Toast Box’s touchpoints;
- communicating to you advertisements involving details of our Products and Services, special offers and rewards, either to our customers generally, or of which we have identified may be of interest to you (including but not limited to upselling, cross selling and online marketing);
- organising promotional events and corporate social responsibility projects; and
- purposes which are reasonably related to the aforesaid.
- In addition, where permitted under the Act and subject to the provisions of any applicable law, your Personal Data may be disclosed, for Toast Box’s Additional Purposes, to the vendors or other third party service providers in connection with promotions, Products and Services offered by Toast Box.
- Toast Box may also collect, use and disclose your Personal Data for the following “Preferred Partners’ Additional Purposes”:
- conducting market research and surveys to enable us to understand and determine customer location, preferences and demographics to develop special offers and marketing programmes with our preferred partners;
- matching Personal Data with other data collected for other purposes and from other sources (including third parties) in connection with the provision, marketing or offering of products and services (including promotions, loyalty and reward programmes) by our preferred partners;
- leads generation and management for marketing the products and services offered by our preferred partners;
- administering contests, competitions and marketing campaigns in connection with the products and services offered by our preferred partners;
- communicating to you advertisements involving details of the products, services, special offers and rewards offered by our preferred partners, either to our customers generally, (including but not limited to upselling, cross selling and online marketing); and
- purposes which are reasonably related to the aforesaid.
In addition, where permitted under the Act and subject to the provisions of any applicable law, your Personal Data may be disclosed, for Preferred Partners’ Additional Purposes, to the vendors or other third party service providers in connection with promotions and services offered by Toast Box’s preferred partners.
If you have provided your Singapore telephone numbers, Toast Box may contact you using such Singapore telephone numbers (including via voice calls, SMSes, fax or other means) with information about our Products and Services or those products and services offered by our preferred partners (including discounts, flash sales and special offers).
In relation to particular Products and Services or in your interactions with us, we may also have specifically notified you of other purposes for which we collect, use or disclose your Personal Data. If so, we will collect, use and disclose your Personal Data for these additional purposes as well, unless we have specifically notified you otherwise.
Disclosure of personal data
Toast Box will take reasonable steps to protect your Personal Data against unauthorised disclosure. Subject to the provisions of any applicable law, your Personal Data may be disclosed, for the purposes listed above (where applicable), to the following:
- Toast Box’s related corporations and employees who provide content, Products and Services to you, address your questions and requests in relation to your customer accounts, subscription and billing or order arrangements with us as well as our Products and Services, to activate, deactivate, install, maintain and operate our systems and/or services;
- companies who provide insurance and consultancy services to Toast Box;
- agents, contractors or third party service providers who provide operational services to Toast Box, such as courier services, telecommunications, information technology, payment, printing, billing, payroll, processing, technical services, training, market research, call centre, security or other services to Toast Box;
- vendors or third party service providers who provide marketing promotions and services offered by Toast Box or its preferred partners;
- commercial shops and retailers who provide rewards and benefits in partnership with Toast Box;
- any business partner, investor, assignee or transferee (actual or prospective) who facilitates business asset transactions (which may extend to any merger, acquisition or asset sale) involving any of the companies under the Toast Box which we are part of;
- our professional advisers such as auditors and lawyers;
- relevant government regulators, statutory boards or authorities or law enforcement agencies to comply with any laws, rules, guidelines and regulations or schemes imposed by any governmental authority; and
- any other party to whom you authorise us to disclose your Personal Data to.
Withdrawal of consent
Should you wish to withdraw your consent for us to send you sales, marketing or promotional information via a specific mode, please inform us in the following manner:
- to withdraw consent from receiving SMS promotions: please unsubscribe by following the steps provided in the promotional SMS;
- to withdraw consent from promotional emails: please click on the “Unsubscribe” link in the promotional emails; and
- to withdraw consent from receiving promotional material by mail: please email us, with the words “PERSONAL DATA” in the subject line, to our email address – email@example.com.
Please be aware that once we receive confirmation that you wish to withdraw your consent for marketing or promotional materials/communication, it may take up to thirty (30) days for your withdrawal to be reflected in our systems. Therefore, you may still receive marketing or promotional materials/communication during this period of time. Please note that even if you withdraw your consent for the receipt of marketing or promotional materials through a specific mode, we may still contact you for other purposes in relation to the Products and Services that you have requested from or subscribed with Toast Box.
Otherwise than stated above, if you wish to withdraw any consent given in respect of the collection, use or disclosure of your Personal Data, please contact our Data Protection Officer (“DPO”) at DPO@breadtalk.com. Please note that such withdrawal of consent may affect our ability to provide our Products and Services you have requested or may request in the future.
Access and correction of personal data
If you wish to request for access to and/or correction of your Personal Data we have in possession or control over, please contact our DPO at the following email address: DPO@breadtalk.com. Our DPO may require you to fill up a form for such requests.
Unless prohibited by law, we will provide access or make the correction to your Personal Data as soon as reasonably possible.
Please note that Toast Box reserves the right to charge a reasonable fee in order to meet your requests.
Transfer of personal data overseas
Your Personal Data may be transferred overseas to our preferred partners, affiliates, agents, vendors or third party service providers. In this case, we will contractually demand that our such preferred partners, affiliates, agents, vendors or third party service providers comply with the requirements in the Act in dealing with your Personal Data.
Changes to this policy
Third party website
This Personal Data Protection Policy and your use of this website shall be governed by and construed in all respects in accordance with the laws of the Republic of Singapore. You shall submit to the exclusive jurisdiction of the Singapore courts.
Contacting Our DPO
You may contact our DPO at the following email address: DPO@breadtalk.com, if you wish to:
- request for more information on our policies and practices in protecting your Personal Data;
- make a complaint with respect to our obligations under the Act.