Privacy Notice
1. This is the Privacy Notice (“Notice”) of NTUC Fairprice Co-operative Limited, a co-operative society registered in Singapore (“NTUC FairPrice”), and its Affiliates (each an “Affiliate” and collectively, the “FairPrice Group”). The terms “we” and “our” in this Notice refer to the FairPrice Group, NTUC FairPrice and/or each of the Affiliates. For the purpose of this Notice, “Affiliates” means the subsidiaries of NTUC FairPrice which are either wholly-owned or majority owned or controlled by NTUC FairPrice, in each case from time to time. Such Affiliates include Cheers Holdings (2004) Pte. Ltd, Grocery Logistics of Singapore Pte Ltd, NTUC Link Private Limited, Origins Healthcare Pte Ltd, Kopitiam Investment Pte Ltd and NTUC Foodfare Co-operative Limited.
2. Application. NTUC FairPrice and each Affiliate have different channels of collecting personal data, but each is committed to complying with this Notice in its collection, use and disclosure of personal data, to ensure that there is accountability and uniformity in the way we protect your personal data. Although this Notice is in common use by NTUC FairPrice and the Affiliates, each is responsible to you to the extent of its own collection, use and disclosure of your personal data, and its own actions.
3. Compliance with this Notice. This Notice applies to all personal data you provide to us, or that we may collect about you. Please do not provide any personal data to us if you do not accept this Notice.
4. We may also require you to accept this Notice when you contact, interact, transact or deal with us or when you access and use our websites, applications or services. If you notify us that you do not accept this Notice, we may not be able to establish a relationship with you or be able to service your requests.
5. Concerns and Contacting Us. If you have any feedback or issues in relation to your personal data, or about this Notice, or wish to make a complaint to us, you may contact our Data Protection Officer at dpo@fairprice.com.sg.
6. Amendment to this Notice. We may amend this Notice from time to time with or without notice to you (e.g. where required to comply with applicable laws or as we update our data usage and handling processes). The updated Notice will supersede earlier versions and will apply to personal data provided to us previously. You may determine if any such revision has taken place by referring to the date on which this Notice was last updated. Your continued use of our services constitutes your acknowledgement and acceptance of such changes.
7. Personal Data
a. What personal data we collect. The personal data we collect depends on the purposes for which we require the personal data and what you have chosen to provide. This includes your name, gender, date of birth, nationality, citizenship, Government Scheme Eligibility (e.g. Pioneer, Merdeka, CHAS), residential address, email, mobile number, race, marital status, child’s date of birth, payment credentials such as payment card number / primary account number (PAN), purchase / transaction data (relating to your transactions with us or third parties) and analytics / insights / signals derived from such data, mobile device IDs, and cookie IDs.
b. How we collect personal data. We collect personal data relevant to our relationship with you. We may collect your personal data directly or indirectly through various channels, including when:
(i) you use our services or enter into transactions with us (or express interest in doing so); (ii) you apply to be a member of any of our loyalty programs, respond to our promotions, or subscribe to our mailing lists;
(iii) you visit our websites, download or use our mobile applications;
(iv) you register an account with us through our websites or applications or via our business partners. For the purpose of this Notice, a “business partner” includes but not limited to a third party with whom we carry out any form of business (including without limitation payment networks and card schemes), our joint-venture partner, collaborator, and/or an individual/organisation who has entered into a legal contract with the FairPrice Group to manage a business and/or to share responsibilities and resources of such business, associated companies of the FairPrice Group and companies of which the FairPrice Group is a shareholder. For the avoidance of doubt, where a business partner uses and/or discloses personal data for its own purposes, such use and/or disclosure will be governed by that business partner’s personal data protection and privacy policy;
(v) you transact with us, contact us or request that we contact you through various communication channels, for example, through social media platforms, messenger platforms, face-to-face meetings, telephone calls, emails, fax and letters;
(vi) your images are captured via photographs or videos taken by us or our representatives when you are within our premises or attend events organised by us;
(vii) you participate in events and programmes, competitions, surveys, contests or games organised by us;
(viii) you apply for a job with us;
(ix) we seek information about you and receive your personal data in connection with your relationship with us or with others, including through our business partners, for example, if you are a customer, investor, member or shareholder;
(x) we generate or derive information about you based on our analysis of the data we collect, or from combining such data with other data or information in our possession (such as the data provided to us by our business partners); or
(xi) you submit your personal data to us for any other reason.
Depending on your relationship with us, we may also collect your personal data from third parties, including:
(xii) from other organisations and entities which are part of NTUC Enterprise (see http://ntucenterprise.sg/) (collectively “NTUC Enterprise group of entities”); (xiii) from Myinfo through Singpass via the FairPrice Group mobile application;
(xiv)from the National Trades Union Congress and NTUC Club;
(xv) from our business partners whom you consented to their sharing of your personal data to us or where we otherwise have a lawful basis for such collection;
(xvi)from your family members, job placement agents or friends who provide your personal data to us on your behalf; and
(xvii) from public agencies or other public sources.
To enhance your experience and streamline transactions within FairPrice Group, we may utilize Myinfo, a service provided by the Singapore Government, to retrieve and pre-fill certain personal data in our forms when you access our Website/Service as an individual. This will only occur with your explicit consent via your Singpass login, and you will have the opportunity to review and manage the data shared. The types of personal data we may receive from Myinfo include your name, gender, date of birth, nationality, citizenship, government scheme eligibility (e.g. Pioneer, Merdeka, CHAS), residential address, email, mobile number, race, marital status, child’s date of birth, and Singpass UUID. We use this data to provide you with a more personalised shopping experience, including tailored discounts and recommendations. Please note that while Myinfo provides verified data, it is your responsibility to ensure the information displayed is current and accurate. Our use and retention of data obtained from Myinfo are in accordance with this Privacy Notice.
Our websites and applications may also contain or involve certain technologies that automate the collection of data (including personal data). These technologies include cookies, web beacons and web analytics. If you do not wish to have your data collected through such technologies you may disable the operation of these technologies on your devices (where possible), or you may refrain from using our websites and applications.
8. Voluntary provision of personal data. Your provision of personal data to us is voluntary and you have the right to withdraw any consent you had given to us for our collection, use or disclosure of your personal data at any time by contacting and submitting a request to us. Your withdrawal will take effect after your request is processed. However, if you choose not to provide us with the personal data we require, it may not be possible for us to fulfil the purposes for which we require the personal data, including providing products and services which you need from us. For avoidance of doubt, we may collect, use or disclose your personal data for any purpose, where required or authorised under the Personal Data Protection Act 2012 (PDPA) or other applicable laws (even if you have not given consent or have withdrawn consent in respect of such purpose).
9. Providing personal data belonging to others. In certain circumstances, you may also provide the personal data of persons other than yourself (including your family members). If you do so, you are responsible for informing him/her of the purposes for which we require his/her personal data and warrant that you are validly acting on behalf of him/her to consent to our collection, use and disclosure of his/her personal data.
10. Accuracy and Completeness of personal data. You must ensure that all personal data that you provide is true, accurate and complete and promptly inform us of any changes to the personal data.
11. Minor. If you are a child, minor or not of legal age (under the age of 18 years old), please inform and seek the consent of your parent or guardian, before you provide your personal data to us. If you
are a parent or guardian and you have reason to believe your child or ward has provided us with their personal data without your consent, please contact us to request for erasure of their personal data.
12. Purposes
a. We collect, use and disclose your personal data where:
● you have given us consent;
● necessary to comply with our legal or regulatory obligations;
● it is in our legitimate business interests to do so, provided that the benefits outweigh any adverse effect to you;
● necessary to perform a contract or transaction you have entered into with us, or provide a product and/or service that you have requested or required from us or from our business partners; and/or
● where permitted by applicable law.
b. General purposes. Generally, we collect, use and disclose your personal data for purposes connected or relevant to our business, including:
(i) processing your account application with us or with our business partners; (ii) processing your transactions with us, or to provide products and services to you; (iii) managing your relationship with us;
(iv) facilitating your use of our and our business partners’ platforms, products and services;
(v) assisting you with your requests, enquiries and feedback;
(vi) allowing data matching with our business partners;
(vii) determining your government scheme eligibility for relevant benefits, for example: the Merdeka Generation discount, Pioneer Generation discount, and CHAS Blue & Orange Tier discounts;
(viii) administrative purposes, e.g. accounting, risk management and record keeping, business research, data, planning and statistical analysis, and staff training;
(ix) collecting the physical location of your mobile device by using satellite, cell phone tower or Wi-Fi signals, etc. We may use your mobile device’s physical location to provide you with personalised location-based services and content;
(x) security and safety purposes, e.g. protecting our platforms from unauthorised access or usage and to monitor for security threats, and your image may be captured by security cameras;
(xi) carrying out research, data and statistical analysis;
(xii) compliance with laws and regulations, internal policies and procedures, e.g. audit, accounting, risk management and record keeping;
(xiii) enforcing legal obligations involving us, or responding to complaints, litigation or investigations involving us;
(xiv) managing and engaging third parties or data processors that provide services to us, e.g. IT services, data analytics, marketing, and other professional services;
(xv) (if you are a job applicant) assessing and evaluating your suitability for employment in any current or prospective position within the FairPrice Group;
(xvi) such purposes that may be informed to you when your personal data is collected; (xvii) carrying out our legitimate business interests (listed below); and/or
(xviii) any other reasonable purposes related to the aforesaid.
c. Marketing purposes. We collect, use and disclose your personal data for purposes of: (i) managing and/or administering your request to receive news (including events and product launches), promotions and marketing information from us, NTUC Enterprise group of entities and/or our business partners;
(ii) analysing and/or profiling your purchases, transactions (whether with us or third parties) and/or likes or dislikes and/or obtaining insights relating to your purchases / transactions, whether with us or third parties, so as to be better able to send you relevant or targeted news (including events and product launches), promotion and marketing information from us, NTUC Enterprise group of entities and/or our business partners;
(iii) contacting you or sending you news (including events and product launches), marketing information and promotions from us, NTUC Enterprise group of entities and/or our business partners, via various mode of communications including mail, e-mail, phone calls, text messages, pop-up notifications (when you are using our applications) and social media platforms;
(iv) providing our business partners with data to send you relevant or targeted advertisements while on our websites and applications or for their own purposes e.g., marketing analytics, lead generation, purchase measurement, profiling,
marketing, advertising platform services (including onward sale of data by such platforms for marketing and related activities as aforementioned) etc.. Such data may include hashed or encrypted identifiers (e.g. payment credentials / PANs, email addresses, mobile numbers, address and gender), unhashed identifiers (such as mobile device IDs and cookie IDs), as well as purchase / transaction data, on an individual level;
(v) merging, matching and processing your data, which may include hashed or encrypted identifiers (e.g. payment credentials / PANs, email addresses, mobile numbers, address and gender), unhashed identifiers (such as mobile device IDs and cookie IDs), as well as purchase / transaction data, on an individual level, with data from our business partners, and using such combined data within data management platforms, data clean rooms, customer data platforms, or similar environments, for purposes such as campaign management, reporting, insights, analytics, profiling, personalised marketing, and audience activation across digital media platforms (whether for FairPrice Group’s purposes, our business partners’ purposes, or jointly, as applicable);
(vi) sharing of aggregated data through dashboards (including through the sharing of data via advertising platforms) for third party use in relation to campaign monitoring, measurement and reporting, audience insights and analysis, and profiling and targeted advertising across different platforms.
d. Legitimate business interests. Our legitimate business interests include: (i) managing our business and relationship with you, and providing products and services to our users and customers;
(ii) protecting our rights and interests and those of our users and customers; (iii) preventing and investigating possible misuse of our websites, applications and services;
(iv) understanding and responding to inquiries and feedback;
(v) understanding how our users use our websites, applications and services; (vi) identifying what our users want and improving our websites, applications, products and services and offerings;
(vii) enforcing obligations owed to us, or protecting ourselves from legal liability; (viii) analysing and/or profiling your purchases, transactions (whether with us or other third parties) and/or likes or dislikes so as to be better able to (i) improve, enhance or develop new products and services; (ii) improve, enhance or develop new methods or processes for our operations; (iii) learn and understand your behavior and preferences in relation to our products and services; and (iv) identify products and services that may be suitable for you or personalising such products and services for you; and/or
(ix) sharing data in connection with acquisitions and transfers of our business. e. Purposes involving the National Trades Union Congress, NTUC Club, FairPrice Group and/or NTUC Enterprise group of entities. Without prejudice to the generality of other provisions in this Notice, for administrative efficiencies and to allow us to better serve your needs, your personal data will also be collected, used and disclosed to the National Trades Union Congress and NTUC Club (if you are a NTUC union member) as well as an organisation which are part of the FairPrice Group and/or NTUC Enterprise group of entities for the following purposes:
(i) facilitating the provision of centralised administrative and management services; (ii) facilitating use of centralised resources e.g. shared information technology resources and systems;
(iii) facilitating internal audits, reporting and management of our operations; and/or (iv) facilitating the conduct of centralised business activities and functions e.g. data analytics.
13. Use permitted under applicable laws. We may also collect, use, disclose and process your personal data for other purposes, without your knowledge or consent, where this is required or permitted by law.
14. Contacting you. When using your personal data to contact you for the above purposes, we may contact you via mail, e-mail, phone call, text message, pop-up notification (when you are using our applications), social media platform or any other means.
15. We will not contact you for direct marketing purposes unless with your consent. In particular, when contacting you for direct marketing purposes, we will not contact you through your telephone
number, unless you have specifically consented to such a mode of communication. If you do not wish to receive any communication or information from us, or wish to restrict the manner by which we may contact or send you information, you may contact us to do so, or update the marketing communication preference setting in your account with us via the applicable websites and/or applications.
16. Disclosure of Personal Data
a. Disclosure to the National Trades Union Congress, NTUC Club, NTUC Enterprise group of entities and organisations which are part of the FairPrice Group. We may disclose or share your personal data with the National Trades Union Congress and NTUC Club (if you are a NTUC union member), NTUC Enterprise group of entities and/or organisations which are part of the FairPrice Group for the purposes described in this Privacy Notice
b. Other Disclosures. We may also disclose or share your personal data in connection with the purposes described in this Privacy Notice, including to the following parties: (i) third parties who are appointed to provide services to us, e.g. IT vendors, marketing companies and event organisers;
(ii) third parties that we conduct joint marketing and cross promotions with;
(iii) business partners; and/or
(iv) regulatory authorities and public agencies.
When disclosing personal data to third parties, we will (where appropriate and required by applicable law) enter into contracts with these third parties to protect your personal data in a manner that is consistent with applicable laws and/or ensure that they only process your personal data in accordance with our instructions.
17. Cross Jurisdiction Transfers of Personal Data
Safeguards. We may transfer your personal data out of Singapore for the purposes set out in this Privacy Notice. When transferring personal data outside Singapore, we will require recipients of the personal data to protect personal data at a standard comparable to that under the laws of Singapore. For example, we may enter into legally enforceable agreements with the recipients to ensure that they protect your personal data.
18. Protection of Personal Data
a. Period of retention. We keep your personal data only for so long as we need the data to fulfil the purposes we collected it for, and to satisfy our business, compliance and legal purposes, including archival, audit, accounting or reporting requirements. How long we keep your personal data depends on the nature of the data, e.g. we keep personal data for at least the duration of the limitation period for bringing claims if the personal data may be required to commence or defend legal proceedings. Certain information may also be retained for longer, e.g. where we are required to do so by law. Typically, our data retention period is from 6 years upwards, depending on the limitation period.
b. Anonymised data. In some circumstances we may anonymise your personal data so that it no longer identifies you, in which case we are entitled to retain and use such anonymised data without restriction, including for data analytics.
c. Unauthorised access and vulnerabilities. While we take reasonable precautions to safeguard your personal data in our possession or under our control, we cannot be held responsible for unauthorised or unintended access that is beyond our control, including hacking or cybercrimes. We also do not guarantee that our websites and applications are invulnerable to security breaches, or that your use of our websites and applications is safe and protected from viruses, worms, Trojan horses, and other vulnerabilities.
19. Your Rights
You enjoy certain rights at law in relation to your personal data that we hold or control. These rights include:
a. Withdrawal of consent: You may withdraw any consent given for our use of your personal data in relation to your account by requesting to terminate your account via the webform at https://help.fairprice.com.sg/hc/en-us and under “Manage orders and account”. Upon receipt of your request, we will terminate your account, and anonymise or delete your personal data unless we need to keep it to satisfy our business, compliance or legal purposes.
b. Correction. You may request that any incomplete or inaccurate data that we hold or control be corrected.
c. Access. You may ask if we hold or control your personal data and if we are, you can request access to such data.
d. Exercising your rights. If you have an account with us, you may access or correct your personal data at any time by accessing your account on our website(s) and/or application(s). If you do not have an account with us but would like to request for access or correction of your personal data in our possession or control, please use the Request Form for Access of Personal Data which can be obtained here. Where permitted by law, we may charge you a fee to process your request.
e. Limitations. We may be permitted under applicable laws to refuse your request to exercise your rights, for example, we may refuse (a) a request for erasure where the personal data is required for in connection with claims; or (b) an objection request and continue processing your personal data based on compelling legitimate grounds for the processing.
