Privacy Policy

Privacy Notice
At GrubZip. (“GrubZip” or “us”), we value your privacy and strive to protect your personal information in compliance with the laws of Singapore.
Pursuant thereto, this Privacy Notice is designed to explain and elaborate our policies and principles pertaining to the privacy of your personal information, all of which we have adopted as a testament of our commitment to respecting, maintaining, protecting and safeguarding the privacy of your personal information. We process personal data in accordance with the Personal Data Protection Act 2010 ("PDPA") and the laws of Singapore. By providing your personal data to us, you are agreeing to the provisions of this Privacy Notice and the processing of your personal data as described in this Privacy Notice.
This Privacy Notice explains:
the type of personal information we collect and how we collect it;
how we use your personal information;
the parties that we disclose the personal information to; and
the choices we offer, including how to access and update your personal information.
Your privacy matters to us, so please take the time to get to know our practices and if you need further information, please send us an email at support@grubzip.app

1. Collection of Personal Data
We collect personal data about you in the ways listed below. We may also combine personal data collected via these various channels:

A. You Provide Your Personal Data to Us
We collect your personal data when you provide it to us. For example, when you:
complete a user profile or registration forms (such as your name, contact information and other identification information where needed);
interact with our social media pages (such as your social media account ID, profile photo and any other publicly available data);
participate in contests or events organised by us (such as the pictures, audio, or videos you may submit, which may include images of yourself);
verify your identity through various means (such as social media logins, submission of selfie images or independently verified payment card information); and
fill up demographic information in surveys (such as your age, gender, and other information you may volunteer such as your marital status, occupation and income information).

B. When Our Services Are Used
Personal data may be collected through the normal operation or use of our mobile application and website. Some examples are:
your geo-location information;
feedback, ratings and compliments;
transaction information (such as payment method);
information about how you interacted with our app or website (such as features used and content viewed);
device information (such as hardware model and serial number, IP addresses), file and app names and versions, IMEI number, and advertising identifiers or any information that may indicate device or app modification); and
personal data you enter in messages when you use our in-app communication features.

C. From Other Sources
We may collect personal data, including but not limited to your name, contact information and other identification information where needed from other sources. Such sources include:
referral programmes;
our business partners, such as payment providers and vendors;
publicly available or governmental sources of data;
when our users add you as an emergency contact;
when our users add you as a recipient or beneficiary of any use of our services; and
marketing services providers or partners.

D. Sensitive Personal Data
We will never ask for or require that you submit any of your sensitive personal data (as defined within the PDPA) to us. However, if you choose to share your health information or other sensitive personal data with our customer care team on your own initiative, for example, information on allergies, we process this information based on our legitimate interests and in order for us to be able to establish, exercise or defend legal claims, where this is necessary. In the event that you are required to furnish any documentation or information to us for any purpose which may contain such sensitive personal data (which is not required for such purpose), you agree to redact such sensitive personal data before providing such documentation or information to us.

E. When You Provide Personal Data of Other Individuals to Us
In some situations, you may provide personal data of other individuals (such as your spouse, family members or friends) to us. For example, you may add them as your emergency contact, when you use the in-app chat, or when you add them as recipients or beneficiaries of any use of our services. If you provide us with their personal data, you represent and warrant that you have obtained their consent for their personal data to be collected, used and disclosed as set out in this Privacy Notice.

F. Personal Data of Minors
As a parent or legal guardian, please do not allow minors under your care to submit personal data to Nomcycle. In the event that such personal data of a minor is disclosed to Grubzip, you hereby consent to the processing of the minor’s personal data and accept and agree to be bound by this Privacy Notice and take responsibility for his or her actions.

2. Use of Personal Data
GRUBZIP may use your personal data for the following purposes as set out in the list below (“Purposes”). Additionally, if you use GrubZip in various capacities (for example, if you use multiple GrubZip services, or if you are both a vendor and a consumer), we may link your personal data collected across your various capacities to facilitate your use of our services and for the Purposes described below:

A. Providing Services and Features
Your personal data will be used to provide, personalise, maintain and improve our app and website. This includes using your personal data to:
engage you to provide you with services across our various business verticals;
create, administer and update your account;
process, manage or verify your eligibility for services, promotions, rewards and subscriptions with GrubZip;
conduct due diligence checks and risk assessments/analysis;
verify your identity and age (where necessary);
validate your process payments;
allow you to participate in the loyalty programmes or marketing activities organised by our vendors and/or in collaboration with GrubZip;
personalise your app experience (such as to recommend products and services relevant to you, identify your preferences or otherwise personalise your experience with GrubZip);
make your experience more seamless, such as automatically filling in your registration information (such as your name or phone number) from one service to another service or when you participate in our surveys;
perform internal operations necessary to provide our services, including troubleshooting software bugs and operational problems, conducting data analysis, testing and research, monitoring and analysing usage and activity trends;
protect the security or integrity of our services and any facilities or equipment used to make the services available;
enable communications between our users;
invite you to participate in our surveys and studies; and
fulfil the services to you as a data processor, where you have provided consent to the data user (i.e. the organisation you had purchased goods or services from, and for whom GrubZip is providing services on behalf of) for such services to be rendered.

B. Safety and Security
We use your data to ensure the safety and security of our services and all users. This includes:
screening vendors before enabling their use of our services;
verifying your identity when you log in to GrubZip;
using device, location, profile, usage and other personal data to prevent, detect and combat fraud or unsafe activities; and
monitoring compliance with our terms and conditions and policies.

C. User Support
We use personal data to resolve user support issues. For example, we may:
investigate and address concerns;
monitor and improve our user support responses;
respond to questions, comments and feedback; and
inform you about steps taken to resolve user support issues.

D. Research and Development and Security
We may use the personal data we collect for testing, research, analysis and product development. This allows us to understand and analyse your needs and preferences, protect your personal data, improve and enhance the safety and security of our services, develop new features, products, and services.

E. Legal Purposes
We may use the personal data we collect for legal purposes, such as to investigate and resolve claims or disputes, detect/prevent/prosecute crime, or as allowed or required by applicable law.
We may also use your personal data when we are required, advised, recommended, expected or requested to do so by our legal advisors or any local or foreign legal, regulatory, governmental or other authority.
For example, we may use your personal data to:
comply with court orders or other legal, governmental or regulatory requirements;
enforce our Terms of Service or other agreements; and
protect our rights or property in the event of a claim or dispute.

F. Marketing and Promotions
We may use your personal data to send you marketing communications relating to customised products or services (that may be of interest or relevance based on your profile), or GrubZip’s vendors’, sponsors’ and/or advertisers’ products, services, events or promotions. For example, we may:
send you special offers that may be of interest or relevance to you across all of GrubZip’s service offerings;
send you alerts, newsletters, updates, mailers, promotional materials, special privileges, festive greetings; and
notify, invite and manage your participation in our events or activities.
We may communicate such marketing to you by various means, where applicable (including by SMS, chat applications (e.g. WhatsApp), push notification, call, and by email).
If you wish to unsubscribe to the receiving of such marketing communications, please click on the unsubscribe link in the relevant email or message. Please note that while you may opt out of marketing or promotion communications, GrubZip may still send you account and/or service-related messages (such as two-factor authentication, information on your transactions, rewards, etc.).

G. User Published Content
If you publish content (such as a review or comment) on GrubZip’s platform, it will be shown publicly along with your personal data (such as profile name, uploaded photo(s)), and other information you choose to include in your content.

3. Disclosure of Personal Data
We need to share personal data with various parties for the Purposes. These parties include:

A. Other Users
For example:
if you are using our GrubZip app, we may share your personal data with our relevant vendor, including your order details;
if you are participating in loyalty programmes or marketing activities organised by our vendors, we may share your personal data with them, including your name and contact details; and
if you use our in-app chat service, we may share your mobile number and GrubZip-registered name with the other parties to your chat.

B. With Third Parties
With third parties related to your use of GrubZip’s services.
For example:
If you use our payment services, we may share your personal data with another individual should you authorise and enable connection of his or her third party service payment method to our payment service for the purposes of enabling your payment on GrubZip.

C. With GrubZip’s Service Providers and Business Partners
We may provide personal data to our vendors, consultants, marketing partners, research firms, and other service providers or business partners. This includes:
payment processors and facilitators;
credit bureaus, alternative credit scoring agencies and any other credit reporting organisations;
background check and anti-money laundering service providers;
cloud storage providers;
document storage and management providers;
advertising and marketing partners and platform providers;
data analytics providers;
research partners, including those performing surveys or research projects in partnership with GrubZip or on GrubZip’s behalf;
educational and training institute partners;
insurance and financing partners; and
service providers who perform identity verification services.

D. With Our Legal Advisors and Governmental Authorities
We may share your personal data with our legal advisors, law enforcement officials, government authorities and other third parties. This may take place to fulfill the legal purposes (mentioned above), or any of the following circumstances:
where it is necessary to respond to an emergency that threatens the life, health or safety of a person; or
where it is necessary in the public interest (e.g. in a public health crisis, for contact tracing purposes and safeguarding our community).

E. Business Transfers
We may share your personal data with other parties, in connection with any acquisitions, sales, mergers, joint ventures, consolidation, restructuring, financing or any other type of business transactions. Your personal data will however remain subject to our obligations made in any pre-existing Privacy Notice that you have agreed to.

4. Retention of Personal Data
To comply with the principle of storage limitation, we retain your personal data only for the period necessary to fulfill the Purposes outlined in this Privacy Notice unless a longer retention period is required or allowed by law. Once your personal data is no longer necessary for the services of the Purposes, or we no longer have a legal or business purpose for retaining your personal data, we will take steps to erase, destroy, anonymise or prevent access or use of such personal data for any purpose other than compliance with this Privacy Notice, or for purposes of safety, security, fraud prevention and detection in accordance with the requirements of applicable laws.

5. International Transfers of Personal Data
We and the parties we share your personal data with may transfer personal data to countries other than the country in which you use our services, for any Purposes specified within this Privacy Notice. Where such transfers take place, we take appropriate measures to ensure that your data is always afforded an adequate level of protection in the countries to which it is transferred.

6. Cookies, Related Technologies and Advertising on Third Party Platforms

A. Cookies
GrubZip, and third parties with whom we partner, may use cookies, web beacons, tags, scripts, local shared objects such as HTML5, advertising identifiers and similar technologies (such as software development kits (SDKs), which have similar functions to cookies and which may be installed in the GrubZip app to allow partners to collect certain information about your interaction with the GrubZip app) (collectively, “Cookies”) in connection with your use of our website and app, which may be persistent or stored only during an individual session on your browsers or devices.
Cookies may have unique identifiers, and reside, among other places, on your computer or mobile device, in emails we send to you, and on our web pages. Cookies may be used for various purposes such as to:
provide the essential, basic functions of the use of our website, services or apps;
authenticate you, or remember your user preferences and settings;
delivering and measuring the effectiveness of advertising campaigns, such as by measuring number of views or clickthroughs;
analyse site traffic and trends;
serve you relevant advertisements across other apps and websites owned by other companies (whether by us or by other advertisers); and
enhance user interface and experience by generally understanding the online behaviours and interests of users who interact with our website, services or apps.
GrubZip may allow third parties to use Cookies on the websites and apps to collect the same type of personal data for the same purposes GrubZip does for itself. Third parties may be able to associate the personal data they collect with other personal data they have about you from other sources. We do not necessarily have access to or control over the Cookies they use.

B. Disabling the Collection of Cookies on Our Website
You have the right to choose to disable, block or deactivate cookies. Please note that however refusal or removal of some cookies could affect the availability, functionality or use of our website, services or apps.
You may adjust your internet browser settings to disable, block or deactivate cookies, delete your browsing history or clear the cache from your internet browser. The settings may be contained within the “History”, “Preferences”, “Settings” or “Privacy” section of your internet browsers, or you may otherwise consult the help section of your internet browser for more information.

C. Disabling the Display of Targeted Ads on Other Platforms
We may facilitate the display of targeted advertising on other platforms, such as on other online platforms that you may be a user of.
You may be able to limit our use of your personal data to display targeted advertisements on behalf of our advertisers, by adjusting your preference through our GrubZip app. Depending on the type of phone and operating software that you are using, you may be granted the option to disable our use of mobile identifiers (such as Apple’s IDFA or Google’s GAID) and the ability to track you across apps and websites owned by other companies by adjusting the settings available on your mobile devices. Through adjusting the settings on your device, you can typically reset, delete, limit and/or otherwise restrict the use of such mobile identifiers.
Although we will not use your personal data to show you such targeted advertisements on other platforms, you may still see generic ads that appear relevant to you. This may be because we have engaged third party advertisers/platforms to display ads to users of specific attributes or demographic makeups who may find them relevant. You may be able to limit seeing these advertisements through managing your preferences on these platforms.

7. Protection of Personal Data
We will take reasonable legal, organisational and technical measures to ensure that your personal data is protected. This includes measures to prevent personal data from getting lost, or used or accessed in an unauthorised way. We limit access to your personal data to our employees on a need-to-know basis. Those processing your personal data will only do so in an authorised manner and are required to treat your information with confidentiality.
Nevertheless, please understand that the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted through any online means, therefore, any transmission remains at your own risk.

8. Your Rights with Respect to Your Personal Data
In accordance with applicable laws and regulations, you may be entitled to:
inquire about the processing of your personal data and be provided with a copy of it;
in some cases, request the correction and/or deletion of your personal data;
in some cases, request the restriction of or object to the processing of your personal data;
withdraw your consent to the processing of your personal data within our possession or control (and where we are processing your personal data based on your consent);
request receipt or transmission to another organisation, in a machine-readable form, of the personal data that you have provided to us where we are using your personal data based on consent or performance of a contract; and
complain to the relevant data privacy authority if your data privacy rights are violated, or if you have suffered detriment as a result of unlawful processing of your personal data.
Where you are given the option to share your personal data with us, you can always choose not to do so. If we have requested your consent to processing your personal data and you later choose to withdraw it, we will respect that choice in accordance with our legal obligations. However, choosing not to share your personal data with us, withdrawing your consent to our use of it or to your agreement with our Privacy Notice could mean that we are unable to perform the actions necessary to achieve the purposes of processing described in Section 2 (Use of Personal Data) or that you are unable to make use of our app or services.
After you have chosen to withdraw your consent, we may be able to continue to process your personal data to the extent required or otherwise permitted by applicable laws and regulations.
We will screen and verify all requests beforehand. In order to verify your authority to make the request, we may require you to provide supporting information or documentation to corroborate the request. Once verified, we will give effect to your request within the timelines prescribed by applicable laws.
Please note that we may decline to comply with your data access request in certain situations, for example when we are unable to confirm your identity or where information requested for is of a confidential commercial nature or in the event we receive repeated requests from you for access to the same information which burden or expense of providing access is disproportionate to the risks to your privacy. We may also decline to comply with your data correction request in certain situations, for example when you have not supplied us with such information as we may reasonably be required to ascertain in what way the personal data to which the data correction request relates is inaccurate, incomplete, misleading or not up-to-date. Nevertheless, we will notify you of the reasons for not being able to accede to your data access and/or data correction requests. We shall be entitled to charge a fee (where permitted under the applicable law) for any data access request.

9. Amendments and Updates
We reserve the right to modify, update or amend this Privacy Notice at any time to ensure compliance with relevant legal and statutory provisions, including the PDPA, and also to reflect our new processes and new technologies. Your continued use of our app, websites or services, following the modifications, updates or amendments to this Privacy Notice, whether or not reviewed by you, shall constitute your agreement to be bound by such amendments.

10. How to Contact Us
If you have any queries about this Privacy Notice or would like to exercise your rights set out in this Privacy Notice, please contact our data protection officer by sending an email at support@grubzip.app
Last updated: January 2, 2025