Brewprint CoffeeBrewprint
LegalLast updated 23 Oct 2026

Privacy Policy

How Brewprint Coffee Pte. Ltd. collects, uses and protects your personal data under Singapore's Personal Data Protection Act (PDPA).

Draft — to be reviewed by the owner with a lawyer before launch. Items in [square brackets] still need the owner’s input.

This policy explains how Brewprint Coffee Pte. Ltd. (UEN 202526896W) ("Brewprint", "we", "us") collects, uses, discloses and protects personal data under Singapore's Personal Data Protection Act 2012 (PDPA), when you use brewprintsg.app, buy from our shop, book an event, or contact us.

1. What we collect

WhenWhatWhy
You place a shop orderName, email, mobile number, delivery address (for delivery), order details, optional gift / delivery notesTo process, deliver or hand over your order, contact you about it, and keep records
You book a live stationName, email, mobile number, event date, time, venue, guest count, menu choices, notesTo deliver the event, contact you about setup, and keep records
You subscribe to our newsletter or a back-in-stock alertEmail address, where you signed up, the wording you agreed to and whenTo send the emails you asked for, and to keep a record of your consent
You use our contact formName, email, optional phone, your messageTo reply to you
You browse the siteCart contents and preferences stored in your browser; analytics data only if you accept analytics cookies (see our Cookie Notice)To keep your cart and improve the site

We do not see or store your card details. Payments are processed by Stripe on its secure checkout page.

2. Who we share it with

We share personal data only with service providers that help us run the business, and only what they need:

  • Stripe — payment processing, receipts and payment records.
  • GoHighLevel (LeadConnector) — our customer database and email system (order and booking confirmations, newsletters, enquiries).
  • Vercel — website hosting.
  • Upstash — temporary data for stock levels and event-date availability.
  • Google Analytics — website usage statistics, only if you accept analytics cookies.
  • Google Maps — the embedded map on our home and contact pages is served by Google, which receives your IP address when it loads.
  • Delivery partners, where we use one, receive your name, phone and address to deliver your order.

We do not sell your personal data.

3. Transfers outside Singapore

Some of these providers store or process data outside Singapore. Where we transfer personal data overseas, we take steps to make sure it continues to be protected to a standard comparable to the PDPA — for example, through the providers' contractual data-protection commitments.

4. Marketing emails and your consent

We only send newsletters if you actively opt in and then confirm by clicking the link in our confirmation email. Every marketing email has an unsubscribe link. You can also withdraw consent by emailing us — we'll stop within a reasonable time and tell you of any consequences. Order and booking emails are service messages, not marketing, and are sent whether or not you subscribe.

5. How long we keep it

We keep order and booking records for as long as needed for the purposes above and to meet legal, accounting and tax record-keeping requirements. Newsletter data is kept until you unsubscribe and ask us to delete it. Data we no longer need is deleted or anonymised.

[Owner to confirm retention periods with your accountant.]

6. Protecting your data

We use reputable providers, encrypted connections (HTTPS), restricted access to admin tools, and we limit who on our team can see customer data.

7. Your rights: access and correction

You can ask us for a copy of the personal data we hold about you and how it has been used in the past year, or ask us to correct it. We may charge a reasonable fee for access requests and will tell you before we do.

8. Contact our Data Protection Officer

Email brewprintcoffeesg@gmail.com with the subject "PDPA request", or write to Brewprint Coffee Pte. Ltd., Blk 285 Tampines Street 22, #07-199, Singapore 520285.

[Owner: name the person appointed as Data Protection Officer — the PDPA requires every organisation to appoint one and make their business contact information available.]

9. Changes

We may update this policy. The "last updated" date at the top shows the latest version.