Privacy policy

Last updated: November 26, 2024

Your Personal Data is Important to Us

Your personal data is important to letsbloom and it is our policy to respect and protect your personal data. This Policy outlines how we manage the personal data we hold in compliance with applicable laws and regulations in our constant endeavour to enhance the transparency of information processes, honouring your control of data and safeguarding your information security.

How We Use Your Personal Data

We will only collect, use, and disclose your personal data for the purposes you have been notified of and consented to or which are permitted under applicable laws and regulations. We will not sell, rent, or give away personal data to third parties for commercial purposes without your consent.

Where your data is likely to be used:

In accordance with the applicable laws and prevailing regulations or our express agreement entered with you, the data collected may be used in one or more of the following ways:

1. Providing you with products and services as subscribed to or requested by you;

2. Processing your applications for products and services, effecting payments from and to you, processing transactions and completing instructions or requests;

3. Providing you a better personalized experience. For example: ascertaining the preferred language or relevant time zone settings.

4. Providing customer service, customer support, and technical support, including in relation to product updates;

5. For product development and optimization. For example: recording and analyzing the information generated in the event of malfunctions, system downtimes, or crashes, to minimize such instances in the future and better our offerings.

6. To ensure security. For example: we will use your information for identity authentication, safety precautions, and other applications.

7. To ensure the security of our services, to aid us further understand the state of performance of our applications, we may record relevant information. For example: the frequency of your usage, crash logs information, overall usage, and performance data.

8. Market research and surveys with the aim of improving our products and services;

9. Marketing purposes, promotional events, competitions, lucky draws, or other similar purposes;

10. Complying with and monitoring compliance with applicable laws and regulations, voluntary codes, internal policies (including that of our affiliates), contractual obligations (including between us and our affiliates), and other requirements.

11. In the event of letsbloom or its Affiliates’ corporate developments. For example: mergers, acquisitions, asset transfers, or other such corporate actions.

Depending on the purpose of processing your personal data, personal data may be disclosed to:

1. Our affiliates anywhere in the world, including any officer, employee, agent, or director of any affiliate;

2. Our joint venture partners, business alliance partners, or other investors;

3. Our professional advisers and service providers in order to provide administrative, financial, legal, accounting, information technology, research, or other services;

4. A merchant or a member of a card association where the disclosure is in connection with the use of a card; and

5. Anyone authorized by you, as specified by you or in any contract with you;

6. Any person to whom disclosure is required or permitted under applicable laws and regulations;

7. Anyone we consider necessary to facilitate requests for services or applications for products with our affiliates; and

8. Anyone we consider necessary in order to provide services in connection with a product or service.

This Privacy Policy is not intended to place any limits on what we do with data that is aggregated and/or anonymized so it is no longer associated with an identifiable user of the services.

letsbloom.io adheres to the following privacy protection principles and is committed to providing you with more secure and reliable service:

1. Security:

Personal data may be transferred to, or stored at, a location outside of your country of residence, which may not have data protection law. The security of your personal data is important to us. We have technical and organisational security measures in place tosafeguard your personal data. When using external service providers, we require that they adhere to security standards mandated by us. We may do this through contractual provisions, including any required by a privacy regulator, and oversight of the service provider. Regardless of where personal data is transferred, we take all steps reasonably necessary to ensure that personal data is kept securely and to prevent your information from breach, damage, or loss via effective and reasonable information security technology and administrative processes.

We employ various encryption technologies such as AES-256 and RSA for data protection. These technologies ensure that your data is encrypted during transmission and storage, safeguarding it against unauthorized access.

However, you will appreciate that it is not possible for us to perfectly secure your personal data from cyberattacks, such as hacking, spyware, and viruses. Accordingly, you will not hold us liable for any unauthorized disclosure, loss, or destruction of your personal data arising from such risks.

2. Retention:

As a practice, we retain your personal data in line with our legal and regulatory obligations and for business and operational purposes yet in the shortest possible time to fulfil the purpose of collection of such information. We will cease to retain your personal data when we no longer require such personal data for the purposes we originally notified you of or for any business or legal needs. Generally, we retain personal data for a period of seven years from the date of collection or as required by law.

However, for the following purposes, we may change the retention period for the purposes of compliance:

• 2.1. To comply with the relevant laws and regulations;
• 2.2. To comply with court decisions, rulings, or requirements of other legal procedures;
• 2.3. To comply with the requirements of relevant government agencies or other legally authoritative entities;
• 2.4. Should the operation of our products or service terminate, we will inform you, and delete or anonymize your personal information within a reasonable period of time.

3. Reasonableness and Necessity:

We will collect necessary data so that we can provide you and other users with better service in order to achieve products’ functions.

4. Cookies

Cookies are small bits of information that are stored by a website on the user’s device. Cookies are a widely used industry standard and are used on most major websites. We may collect your information via safely inserted cookies, for purposes for recording log data. We set and access our own Cookies on the domains operated by us. You may set or manage Cookie via your browser setting. But please be noted that you may not enjoy the best service experience and certain services may not be used if you stop using Cookies.

5. Transparency

It is our intention to draft this Policy in a manner that is easy to read and comprehend for every user. letsbloom considers privacy important in all stages of product or service development, including multiple factors such as the laws, products, and designs. This Policy aims to share what type of information we collect and how that information will be used by us together with our affiliates.

6. Nature of Information Collected and Your Rights

We hope that you will read this Privacy Policy carefully to understand what and how we collect and use information in order for you to further understand our offerings.

As stated in This Policy, within the permitted legal framework, we may collect, either directly or indirectly, the following information, that is necessary for the purpose of achieving the product’s function: Personal data, data can relate to you, such as:

By using our service or application or making use of our offerings, you agree to the contents contained in this policy.

We will not send you marketing material if you have specifically asked us not to do so. You have the right to opt out of receiving marketing material at any time. To make a request to access or correct the personal data we hold about you, to make a request to withdraw your consent previously given, or to opt out of receiving marketing material, please contact our Data Protection Officer (details below).

7. Managing your own Information

You may manage your own information by accessing, amending, and deleting the information provided by you during the registration of your account or other personal information when using our services and offerings. The extent to which you access, amend,or delete your personal information will depend on the service you avail from us.

We will collect and use your information only for achieving the functions of our products or services in accordance with this policy. If you find that our collection or use of your personal information is not in accordance with the laws, administrative regulations, or the agreement of both parties, you can require us to delete such information. If you find that we have collected or stored your wrong personal information, you can also require us to correct it. Please contact us via the contact details listed in this Privacy Policy. For account security purposes, we may ask you to verify your identity before we allow you to access, amend, and delete relevant information. Please understand that due to technical limitations, legal or regulatory requirements, we may not be able to meet all your requests in a reasonable response time.

8. Information Security

We take security measures to protect your information against loss, improper use, unauthorized access, or disclosure. These measures take into account the sensitivity of the information we collect, process, and store, and the current state of technology.

We work within reasonable security standards and use a variety of security measures to protect the security of information. For example, we will use encryption technologies (such as AES-256 and RSA), anonymization, and other means to protect your personal information. We have established a specialized management process to ensure information security. For example, we strictly restrict the scope of personnel who can access information and require them to comply with their confidentiality obligations and conduct audits. In the event of a breach of security incident involving personal information, we will activate an incident response plan to prevent the expansion of such a security incident and inform you in the form of push notifications, public announcements, and other means deemed best feasible at the time. Furthermore, when using passwords, identity numbers, or other special access facilities on our website or application, it is also your responsibility to protect them accordingly. We strongly recommend that you do not disclose your password to anyone and change it at regular intervals.

9. Storage of Information

We will store your personal information collected within Singapore in accordance with applicable laws and regulations.

10. Updates to This Policy

This Policy may be updated from time to time and amendments take effect from the date they are placed on this site. Under such circumstances, if you continue to use our services, you will be deemed to have agreed to the updated policy. You are advised to visit this site regularly to check for any amendments. This policy was last updated on [date of uploading on the website in May 2024]. In our endeavour to stay updated with global privacy laws, we keenly follow and aim to observe the Privacy and Data Protection Laws in India, Singapore, and the Australian region. If your organization or geographical presence mandates you to enter into any additional safeguards with us, we request you to please enter into a separate agreement with us detailing the provisions of the data protection and privacy laws applicable to you. In the absence of such a specific agreement, we assume that you have ensured and safeguarded the Privacy and Data Protection laws in your respective specific geography while availing our services and offerings.

11. Third-Party Websites and Services

This Policy does not apply to any linked third-party websites which we do not operate or control.

12. Security Commitments

At letsbloom, the security and privacy of your data are our top priorities. We are committed to implementing and maintaining the highest standards of security to ensure that your information remains safe and protected. Please refer to our Security Commitments.

13. Contacting Us

Should you wish to reach out to us to understand any specific clause of this Privacy Policy or should you have queries, concerns, or comments, please contact our Data Protection Officer at privacy@letsbloom.io.