Privacy Policy

This Privacy Policy explains how The Whale Tea (“we”, “us”, or “our”), operated by The Golden Whale International Pte. Ltd., collects, uses, discloses, and protects your personal data when you use our mobile application and website (the “Services”). This Policy complies with the Personal Data Protection Act 2012 (PDPA) of Singapore.

When you create an account, we collect information depending on your sign-up method:

• Email and password, if you register with an email address.
• Your name and email address, if you sign up using Google.
• Your name and email address (or a private relay address if you hide your email), if you sign up using Apple.
• Your name and mobile number, if you sign up using WhatsApp.

With your permission, we collect your device’s location to help you find nearby Whale Tea stores, show relevant promotions, and improve service delivery. You may disable location access at any time through your device settings, though this may limit certain features such as the store locator.

Payments are processed by our third-party payment processor. We do not store your full card number, CVV, or banking credentials on our servers. We may retain limited transaction metadata (amount, date, order reference) for order history and accounting purposes.

If you enable push notifications, we collect a device token to deliver order updates, promotions, reward point updates, and game or voucher alerts. You can disable push notifications at any time in your device settings.

We collect data related to your use of our loyalty and engagement features, including:

• Reward points earned, redeemed, and expired.
• Vouchers issued, applied, and their discount usage.
• Referral codes you generate or use, and the relationship between referrer and referred accounts.
• Participation and scores in in-app games used to earn reward points or vouchers.

We automatically collect technical information when you use our Services, including device type, operating system, app version, IP address, and general usage analytics, to maintain and improve the Services.

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, we will obtain your consent before using non-essential tracking technologies.

We use the information we collect to:

• Create and manage your account.
• Process orders, payments, and reward point or voucher redemptions.
• Operate the referral programme, including crediting points to referrers and referred users.
• Operate in-app games and award points or vouchers based on game outcomes.
• Send order updates, promotional messages, and service notifications (you may opt out of marketing messages at any time).
• Personalise content and offers based on your location and usage patterns.
• Detect and prevent fraud or abuse of the rewards and referral systems.
• Comply with legal and regulatory obligations.

We do not sell your personal data. We may share your information with:

• Payment processors, to complete transactions.
• Cloud hosting and infrastructure providers, to operate the Services.
• Push notification providers (Apple, Google), to deliver notifications.
• Authentication providers (Google, Apple, WhatsApp), where you use these to sign in.
• Analytics and SDK providers, to support app functionality and performance measurement.
• Government authorities or regulators, where required by law.
• A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to this Policy continuing to apply.

We retain your personal data for as long as your account remains active, and for a reasonable period thereafter to comply with legal, accounting, or reporting obligations, or to resolve disputes.

Reward points and vouchers are subject to their own validity periods as stated in our Terms and Conditions, and unused points or vouchers may expire even while your account remains active.

Under the PDPA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate personal data.
• Withdraw consent to our collection, use, or disclosure of your personal data.
• Request deletion of your account and associated personal data.

To exercise these rights, submit a request via the “Account Deletion” option on our Contact Us page at https://thewhaletea.com.sg/contact/, or email tech@thewhaletea.com.sg. We will verify your identity before processing any request and respond within a reasonable timeframe in accordance with the PDPA.

You may request deletion of your account and associated personal data at any time. To submit a request:

• Via the app: Navigate to Settings → Account → Delete Account.
• Via the website: Submit a request using the “Account Deletion” option at https://thewhaletea.com.sg/contact/.
• Via email: Contact us at tech@thewhaletea.com.sg.

We will verify your identity before processing the request. Please note that deletion of your account will result in the permanent loss of all associated reward points, vouchers, order history, and referral credits. Some data may be retained where required by law or for legitimate business purposes such as fraud prevention.

If a data breach occurs that affects your personal data, we will notify you in accordance with applicable legal requirements, including information about the nature of the breach and the steps being taken to address it.

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure.

Our Services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at tech@thewhaletea.com.sg so we can take appropriate action.

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by posting an updated version on our website with a revised “Last updated” date. Previous versions will be made available upon request. Continued use of the Services after such changes constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

• Email: tech@thewhaletea.com.sg
• Website: https://thewhaletea.com.sg/contact/
• Operated by: The Golden Whale International Pte. Ltd., Singapore