WOK HEY - PRIVACY POLICY

Privacy Policy

This Privacy Policy serves to inform you of our policies and procedures regarding the collection, use and disclosure of the Personal Data we receive when you access and use our websites/subdomains (including https://www.wokhey.sg) and mobile applications (collectively, the “Sites”) and all other products and services (all of the foregoing collectively and any of them, the “Services”) provided by WOK HEY Pte Ltd (“WOK HEY”, “our”, “us” and “we”). In this Privacy Policy, “you” and “your” mean you, the person accessing or using our Services.

This Privacy Policy is based on the Singapore Personal Data Protection Act 2012 (“PDPA”) and applies to Personal Data in our possession or under our control. This Privacy Policy is incorporated by reference into our Terms of Sales, currently available at https://www.wokhey.sg/terms-conditions/ (the “Terms of Sales”). By using our Services (including accessing our Sites), you consent to the practices and procedures described in this Privacy Policy.

How We Collect Your Personal Data

“Personal Data” refers to data, whether true or not, about an individual who can be identified (a) from that data, or (b) from that data and other information to which we have or are likely to have access. Examples of the types of Personal Data you may provide to us include, but are not limited to, your name, contact number (telephone/mobile), mailing address (residential and/or billing), network data (such as IP address or device identifiers), and any other information about you that is associated with or linked to any of the foregoing information.

We may collect Personal Data from you in various ways, including but not limited to, when you:

use our Services;
access or browse our Sites;
make purchases through our Sites or self-ordering kiosks;
participate in promotions;
offer feedback or reviews about our Services;
contact customer service;
subscribe to marketing communications; or
visit our physical premises.

Providing your Personal Data is voluntary. However, certain Personal Data may be necessary for us to provide you with access to or functionality within our Services. if you choose not to provide such Personal Data when requested, we may not be able to provide you certain features or functionalities, or the availability and quality of the Services may be affected.

Where you provide us with any Personal Data of third parties, you confirm that you have obtained all necessary concents to do so, and that we may collect, use and disclose such Personal Data for the purposes set out in this Privacy Policy, in accordance with the PDPA (and all amendments and regulations to the same).

We may engage third parties to operate the Sites on our behalf, and these third parties may collect Personal Data directly from you about your visits to the Sites on our behalf. We may also receive Personal Data about you from third parties where you have consented to such third parties sharing your Personal Data with us for specific purposes.

How We Use Your Personal Data

You agree that we may use your Personal Data for the following purposes set out in the list below (“Purposes”):

to provide you access to our Services, including our Sites;
to provide you with information about our Services;
to send you updates and information about your orders;
to fulfill your orders and process payments and refunds;
to gather customer feedback or reviews;
to provide customer service and support, and to respond and deal to your inquiries;
to communicate with you in respect of any correspondence or request that you have sent us;
to plan and run marketing campaigns;
to send you alerts, promotions, offers, and news about our products via email, SMS, social media, and other messaging applications (e.g. WhatsApp, Telegram, LINE, Viber, and WeChat);
to manage your participation in contests, promotions, and special events;
to conduct data analytics, including consumer research, trend analysis, and financial analysis, to understand and improve our Services, including our Sites;
to analyze, operate, evaluate, and improve our business, products, services, marketing, and online platforms (including our Services and our Sites);
to investigate accidents, incidents, or claims that may occur on our premises;
to protect against fraud and other illegal activities;
to enable us to enforce our legal rights and interests, including defending any claim, or to protect the rights, property or safety of our employees;
to comply with all applicable court orders, laws and regulations;
any other incidental business purposes related to or in connection with the above.

We will seek your consent before collecting any additional Personal Data and before using your Personal Data for a purpose which has not been notified to you (except where permitted or authorised by applicable laws).

How We Use Cookies

When you access and use our Sites, we use tools like cookies, pixels, and similar technologies (collectively called “Cookies”). These Cookies automatically gather anonymous information about the device you are using and how you browse our Sites. Cookies might be stored on your device, in emails we send, or on our Sites. The data collected includes information such as your browser type, IP address, time zone, which pages you visit, how you found our Sites (e.g., search terms or other websites), and how you interact with our pages.

Managing Your Preferences

You have the option to disable, block, or turn off cookies. However, please know that doing so might affect your experience, as some features of our Sites or Services may not work correctly or be available (e.g. you may not be able to access all or parts of our Sites).

How to Adjust Settings: You can manage cookies by changing your internet browser’s settings. Look for options typically located in the “History,” “Preferences,” “Settings,” or “Privacy” section. Your browser’s help guide will have specific instructions. These sections often also allow you to clear Browse history or cache.

Links To Other Websites and Social Medias

Our Sites may feature content and links to external websites or social media platforms operated by third parties that may also use Cookies. You may wish to review the privacy policies, terms, and other rules applicable to those third-party sites to find out how those sites collect and use your Personal Data and to establish whether and for what purpose they use Cookies. These third parties do not have access to our Cookies. WOK HEY does not control and is not responsible for the policies or practices of any third-party websites or services. The handling of any information you submit to them is subject to their own policies, and this Privacy Policy does not apply to them.

Personal Data of Minors

Our Sites are not intended for individuals under the age of 13. If you are under 13 years of age, please do not use our Sites or provide any Personal Data to us without the involvement or consent of your parent or guardian. We urge parents and guardians to monitor the use of all digital media by the minors under your care. If we become aware that we have collected Personal Data from an individual under the age of 13 without the involvement or consent of such individual’s parents or guardians, we will take steps to delete such Personal Data. Parents or guardians who believe their minors have provided us with Personal Data without their consent may contact us to request deletion. Please keep in mind that the deletion of such Personal Data may limit your or your minor’s access to all or a portion of the Services.

Disclosure of Personal Data

You agree that we may disclose or share your Personal Data with the following categories of recipients, for purposes consistent with those notified to you (including the Purposes) and where permitted or required by applicable laws:

any other entity within our group of companies, including our “related corporations” as defined in the Singapore Companies Act 1967;
service providers and business partners who perform services on our behalf or with whom we collaborate to provide our Services, including those who assist with:
- processing payments;
- storing data in the cloud;
- managing documents and records;
- advertising, marketing, and related platforms;
- analyzing data;
- conducting research;
- educational or training initiatives;
- providing and supporting our core technology, including computer systems, networks, and potentially internet-connected device (IoT) systems.
in the event of a proposed or actual merger, acquisition, financing, sale of assets, or any other situation where some or all of WOK HEY’s business assets might be transferred or otherwise disposed of; and
essential operations, such as those offering software platforms (SaaS) or managing promotions, contests, and prize draws. This sharing only occurs when necessary for them to perform these functions.

These service providers and business partners are only authorized to process, use or disclose your Personal Data in accordance with our instructions, including for the purpose of carrying out the Services on our behalf, and not for any independent use.

You agree that we may disclose your Personal Data without your consent where such disclosure is permitted or required under the PDPA, including but not limited to the following circumstances:

(a) to comply with applicable laws, regulations, legal processes, or enforceable governmental requests;

(b) in response to a valid subpoena, search warrant, court order, or other lawful request from a competent authority;

(d) to protect the security and integrity of our Sites, services, and systems; or

(e) to protect our rights, property, or safety, or the rights, property, or safety of others.

Storage of Personal Data

All Personal Data collected by us are stored in systems that may only be accessed by our authorised personnel and/or our authorised third-party service providers and business partners. Where any Personal Data is shared with authorised third-party service providers and business partners, even with your consent, such sharing of Personal Data will be on terms that such third-party service providers and business partners will comply with the PDPA and these Terms. We will take necessary steps to ensure that your Personal Data is adequately protected and processed in accordance with this Privacy Policy. You consent to such transfer and processing of your Personal Data.

Use of CCTVS

We use closed-circuit television cameras (CCTVs) at our physical restaurant locations for the safety and security of our customers, staff, and property. These CCTVs may record images and video footage of individuals within their field of view.

Purpose of CCTV Monitoring

The primary purpose of our CCTV monitoring is to enhance safety and security on our premises. This includes deterring and detecting criminal activity such as theft, vandalism, or assault, ensuring the safety and well-being of both the public and our staff, and investigating any accidents, incidents, or claims that may occur. In limited circumstances, we may also use anonymized or aggregated CCTV data, with safeguards to ensure no individuals are identified, to analyze customer traffic flow and improve operational efficiency. Finally, we use CCTV footage as necessary to comply with applicable laws, regulations, or legal requests from authorities.

Types of Data Collected Via CCTV

The CCTVs may capture the following types of data:

Images and Video Footage: Recordings of individuals, their actions, and their surroundings.
Date and Time Stamps: Information about when the recordings were made.
Camera Location: Information about the specific camera that captured the footage.

Disclosure of CCTV Footage

We disclose CCTV footage only under limited and necessary circumstances. Primarily, this may involve sharing footage with law enforcement or government authorities when required by law or legal process, or if we have a good faith belief that disclosure is necessary to prevent harm or investigate potential criminal acts. We may also provide footage to our legal advisors for handling legal proceedings or claims, and to our insurance providers in connection with relevant incidents or claims. Separately, third-party service providers who help install, maintain, or operate our CCTV systems might need access to footage to perform their duties. When this occurs, these providers are required by contract to uphold the confidentiality and security of the footage they access on our behalf.

Retention of Personal Data

We may retain your Personal Data for as long as it is necessary to fulfill the purposes for which it was collected, or as required or permitted by applicable laws. We will cease to retain your Personal Data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose(s) for which the Personal Data was collected and is no longer necessary for legal or business purposes.

Our Commitment to Data Security

WOK HEY is dedicated to safeguarding your Personal Data through reasonable security arrangements, consistent with Singapore’s PDPA obligations. We utilize appropriate legal, physical, administrative, and technical controls designed to protect your Personal Data in our posession or under our control, to prevent (a) unauthorised access, collection, use, disclosure, copying, modification or disposal, of your Personal Data, and (b) the loss of any storage medium or device on which your Personal Data is stored. However, please recognize that data transmission over the internet inherently carries risks. Despite our security efforts to protect your Personal Data, you acknowledge that we cannot always guarantee the security of data transmitted over the internet and that any transmission of your Personal Data is at your own risk. While security cannot be guaranteed, we strive to protect the security of your Personal Data and are constantly reviewing and enhancing our information security measures.

Accuracy of Personal Data

We generally rely on Personal Data provided by you (or your authorised representative). In order to ensure that your Personal Data is current, complete and accurate, please update us if there are changes to your Personal Data by contacting our Data Protection Officer in the manner prescribed in the “Contact Us” section below.

Access, Correction and Deletion of Personal Data

To make a request regarding your Personal Data (such as access, correction, or deletion), please email us using the contact information found at the end of this Privacy Policy. To ensure the security of your data, we will need to verify your identity before processing your request and may ask for additional details to help us respond accurately. Please understand that fulfilling certain requests, especially for deletion, might impact our ability to provide ongoing Services. In line with Singapore’s PDPA, a reasonable fee may be charged for access requests, and we will notify you of any applicable fee before processing your access request.

Withdrawal of Consent

The consent that you provide for the collection, use and disclosure of your Personal Data will remain valid until such time it is being withdrawn by you in writing. You may withdraw your consent and request us to stop using and/or disclosing your Personal Data for any or all of the Purposes by submitting your written request to our Data Protection Officer. Upon receipt of your written receipt to withdraw your consent, we endeavour to process your request and inform you of the likely consequences of us acceding to your request as soon as possible. Please note that if you withdraw your consent for us to use your Personal Data for any purposes which we regard as necessary to provide you our Services, we may no longer be in a position to continue to provide our Services to you. We shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform our Data Protection Officer. Please note that withdrawing your consent does not affect our right to continue to collect, use and disclose Personal Data where such collection, use and disclosure without your consent is permittd or required under applicable laws.

Changes to this Privacy Policy

We reserve the right to review, modify, update or amend the terms in this Privacy Policy from time to time, and any such modification, update or amendment will be reflected on our Sites. Once published on our Sites, any modifications, updates or amendments to this Privacy Policy will be deemed to be effective immediately at that time. We encourage you to check this page regularly to stay informed about our current privacy practices.

Governing Law and Jurisdiction

You agree that the terms of this Privacy Policy shall be governed by the laws of Singapore, and you agree to submit to the non-exclusive jurisdiction of the courts of Singapore.

Contact Us

If you have questions about this Privacy Policy, please direct your email to our Data Protection Officer at dpo@wokhey.sg.