Yum Cha Restaurant (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website www.yumcha.com.sg (the “Website”), place orders through our online store, or use our services. This policy complies with the Personal Data Protection Act 2012 of Singapore (“PDPA”).
Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your experience. See Section 6 for more details.
We use your personal information for the following purposes:
Under the PDPA, we process your personal data based on:
We do not sell your personal information. We may share your information with:
These service providers are contractually obligated to protect your information and use it only for the services they provide to us.
Payment card information is collected and processed by our PCI-DSS compliant payment processors. We do not store complete credit card numbers on our servers. Only tokenized or encrypted payment information is retained for authorized transactions.
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We may disclose your information if required by law, court order, or government authority, or to protect our rights, property, or safety, or that of others.
We may share your information with third parties when you have given us explicit permission to do so.
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
After the retention period, we will securely delete or anonymize your personal information.
Cookies are small text files stored on your device when you visit our Website. They help us recognize you and remember your preferences.
Our website may use third-party cookies from:
You can control cookies through your browser settings. However, disabling certain cookies may affect your ability to:
To opt-out of marketing cookies specifically, you can adjust your preferences through our cookie consent banner.
Under Singapore’s Personal Data Protection Act, you have the following rights:
You can request a copy of the personal information we hold about you, including your order history and account data.
You can request that we correct any inaccurate or incomplete personal information. You can also update most information directly in your account settings.
You can withdraw your consent for us to process your personal information for marketing purposes at any time. Note that withdrawal of consent may affect our ability to provide certain services.
You can request that we provide your personal information in a commonly used, machine-readable format.
You can request deletion of your personal information, subject to our legal obligations to retain certain data (e.g., tax records).
You can object to our processing of your personal information in certain circumstances, such as marketing purposes.
We will respond to your request within 30 days as required by PDPA.
When you place an order, we process your personal and payment information to complete the transaction. This includes:
During checkout, your information is encrypted using SSL/TLS technology. Payment card details are sent directly to our payment processor and are not stored on our servers (except in tokenized form for authorized future transactions).
If you check out as a guest, we collect only the information necessary to process your order. Your data is retained according to our retention policy but is not used to create a customer account unless you explicitly choose to do so.
If you create an account:
With your consent, we may send you:
You can opt-out at any time by:
Even if you opt-out of marketing, we will still send:
We implement appropriate technical and organizational measures to protect your personal information:
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We encourage you to use strong passwords and keep your login credentials confidential.
Our Website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.
Our Website may contain links to third-party websites, social media platforms, or services that are not operated by us. This includes:
We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
In the unlikely event of a data breach that poses a significant risk to your rights and freedoms, we will:
If you believe we have not handled your personal information in accordance with the PDPA, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore:
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
Your continued use of our Website after any changes indicates your acceptance of the updated Privacy Policy.
This Privacy Policy is written in English. In the event of any inconsistency between the English version and any translation, the English version shall prevail.
