Privacy policy

This policy explains how The One Retail Pte. Ltd. ("One Retail", "we", "us"), registered in Singapore under UEN 201817395W, collects, uses, discloses and protects personal data through this website, theoneretail.com. We follow Singapore's Personal Data Protection Act 2012 (PDPA) and, where they apply to you, other data protection laws such as Malaysia's Personal Data Protection Act 2010 and the EU General Data Protection Regulation (GDPR).

This policy covers the website and the enquiries made through it. It does not cover the One Retail platform that our clients run. Personal data held in a client's environment is governed by that client's own privacy notice and by our agreement with them, under which we act on their instructions.

1. What we collect

When you contact us

Our contact, demo, quote and partner forms ask for your name, work email address and company. You can also tell us what you would like to do, your store format, how many stores you run, a module list you built on our pricing page, and a message. We do not ask for sensitive personal data; please do not include it in your message.

When you download a guide

To download one of our guides, you give us your name, work email address, company and job title. You can also tell us your store format and how many stores you run, and tick a box to receive new guides and One Retail news.

When you visit the website

Like most websites, our server records technical details of each request: your IP address, your browser and device type, the page requested and the time. While you browse, a session record holds your IP address and browser details and expires after two hours without activity.

Cookies

We use two cookies, both strictly necessary for the website to work: one keeps your session, and one protects our forms against cross-site request forgery. We do not use analytics, advertising or tracking cookies, and the website loads no third-party scripts. Our fonts and video are served from our own server.

While you browse, your browser also remembers which store format you were reading about, such as pharmacy, so that our contact form can start with it already chosen. This stays in your browser, is deleted when you close the tab, and reaches us only if you send the form. If you close the announcement bar at the top of the site, your browser remembers that so it stays closed; that too never leaves your browser.

2. How we use it

• To reply to your enquiry, arrange a demonstration, prepare a quote, consider a partner application or send a security pack you asked for.
• To keep a record of our conversations with prospective clients and partners.
• To keep the website secure, prevent abuse and fix problems.
• To give you the guide you asked for, and to follow up with you about your evaluation.
• If you ticked the box to hear from us, to send you new guides and One Retail news. You can unsubscribe at any time.

We do not sell personal data, and we do not make automated decisions about you. We will not add you to a mailing list unless you ask us to, for example by ticking the box when you download a guide.

If the GDPR applies to you, we rely on your consent when you send us a form, on the steps needed before entering into a contract when you ask for a quote, and on our legitimate interest in running a secure website and a business for the technical records.

3. Who we share it with

• The people at One Retail who handle your enquiry.
• Service providers who host and run the website for us. They act only on our instructions.
• Professional advisers, and public authorities where the law requires it.
• A successor, if our business or part of it is transferred.

4. Where it is kept

The website and its records are kept on servers operated for us by our service providers. If personal data is transferred outside Singapore, we make sure it receives a standard of protection comparable to the PDPA, as the PDPA's transfer rules require.

5. How long we keep it

• Enquiries and guide downloads: 24 months after our last contact with you, unless you become a client or partner, in which case our agreement with you applies.
• Server logs: 90 days.
• Session records: they expire after two hours without activity.
• Your request to receive new guides and news: until you withdraw it.

6. How we protect it

The website is served only over encrypted connections (HTTPS), and access to enquiries is limited to the people who need it. No system is perfectly secure, but we make reasonable security arrangements to protect personal data from unauthorised access, use, disclosure and loss.

7. Your rights

You can ask for access to the personal data we hold about you, ask us to correct it, and withdraw your consent to our using it. If the GDPR applies to you, you can also ask us to erase or restrict it, object to our use of it, ask for a copy in a portable format, and complain to your data protection authority. In Singapore you can contact the Personal Data Protection Commission.

To make a request, email our Data Protection Officer at the address below. We will reply within 30 days and may need to confirm who you are first.

8. Children

This website is for businesses and is not directed at anyone under 18.

9. Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.

10. Contact and Data Protection Officer

Data Protection Officer: dpo@theoneretail.com
The One Retail Pte. Ltd., 1 Kim Seng Promenade, #11-00, Singapore 237994