Privacy

With the following information, we would like to give you an overview of how your personal data is processed. The specific data processed and how it is used largely depends on the services you have commissioned or agreed upon. Therefore, not all parts of this privacy notice may apply to you.

1. Who is responsible for data processing and who can you contact?

The entity responsible for processing your data is:

7BOTANICALS PTE. LTD., 77 High Street #10-12B, High Street Plaza, Singapore 179433.

2. What data do we use

We process personal data that we receive from you during the course of our business relationship or that we collect when you use our website. Additionally, we process personal data that we obtain lawfully from publicly accessible sources (e.g., company registers, media, the Internet) or that is legitimately transmitted to us by other companies within our network or third parties. The data processed includes, in particular, personal information (e.g., name, address, phone number, email address, date of birth, place of birth, nationality), identification data, and authentication data. Furthermore, payment data, contract and order data, financial information, and documentation data may also be processed. Additionally, when using our website, access data without specific personal reference, such as information about the device used, the web browser used, the operating system, the IP address, or other similar operational data, is processed.

3. For what purpose and on what legal basis do we process your data?

The processing of personal data is carried out for the purposes of providing (pre-)contractual services, responding to your inquiries or communicating with you, technical administration, optimizing and ensuring the operation of the website, investigating complaints, asserting, exercising, or defending legal claims, and fulfilling legal obligations. We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Personal Data Protection Act (PDPA).

a) For the fulfillment of contractual obligations (Art. 6(1)(b) GDPR). b) Within the framework of balancing interests for the protection of legitimate interests (Art. 6(1)(f) GDPR), such as optimizing our service quality, (direct) marketing, or asserting legal claims. c) Based on your consent (Art. 6(1)(a) GDPR). d) Based on legal obligations (Art. 6(1)(c) GDPR) or to perform a task in the public interest (Art. 6(1)(e) GDPR).

4. Who receives your data

Within 7BOTANICALS PTE. LTD., only those departments that require your data to fulfill our contractual and legal obligations have access to it. Additionally, service providers (such as accountants) and agents acting on our behalf may have access to the data to the extent necessary. All employees are trained initially and periodically in the requirements of the GDPR and PDPA.

5. Forwarding your data

Where necessary for the fulfillment of the contract or justified by our legitimate interests, we will forward personal data to processors (service providers) we employ. The processors comply with the data protection requirements imposed by the GDPR and PDPA and are obligated to confidentiality. A written data processing agreement is concluded with the service providers employed by us.

6. Will data be transferred to a third country or an international organization?

Data transfer to entities outside the EU or the EEA (so-called third countries) will only take place if there is a legal basis for such a transfer, if appropriate safeguards are in place, or if we are legally allowed to do so (for example, with your consent, to fulfill a contract, or where the law permits it).

7. How long will your data be stored?

Where necessary, we process your personal data for the duration of the entire business relationship and beyond, in accordance with legal retention and documentation obligations. After the purposes have been achieved and the legal retention periods have expired, your data will be deleted unless you have expressly consented to its further use. We reserve the right to anonymize certain data for further statistical processing.

8. Technical and organizational measures

We have taken appropriate technical and organizational measures to protect your personal data, including an access authorization concept, a data backup concept, and physical and digital protective measures regarding our IT structure. We strive to continuously update our security measures in line with technological developments.

Newsletter and email marketing

If you subscribe to a newsletter on our website, the data you provide is used solely for sending the newsletter. Your data is also shared with Klaviyo Inc. (Klaviyo), which supports us as a data processor. You can unsubscribe at any time via the unsubscribe option in the respective newsletter or by emailing [email protected].

Cookies

Our website uses cookies, small text files stored on your device, to make the site user-friendly, ensure secure operation, and conduct anonymized analyses of usage. On your first visit, a banner lets you choose whether and which cookies you consent to. You can configure your browser to control or delete cookies at any time. The storage duration is limited to a maximum of twelve months.

Logfiles

Each time the website is accessed, data such as browser type and version, operating system, referrer URL, hostname, time of request, and IP address is stored in a log file, mainly based on our legitimate interest (Art. 6(1)(f) GDPR) to detect and prevent attacks. Our website is hosted by Hetzner Online GmbH on a server in Finland; our email server is provided by Microsoft (Hosted Exchange) within the EU.

HubSpot

Our website uses HubSpot, a service platform provided by HubSpot with an office in Ireland (Ground Floor, Two Dockland Central, Dublin 1). The storage of cookies is based on your consent (Art. 6(1)(a) GDPR). Data processed includes IP address (shortened), geographic location, browser type, visit duration, and pages accessed, to analyze and optimize our website. Privacy policy: https://legal.hubspot.com/privacy-policy

Google Analytics

This website uses Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. IP anonymization is activated (IP masking). You can prevent the collection of your data via your browser settings or the opt-out add-on at https://tools.google.com/dlpage/gaoptout?hl=en.

Google Remarketing

Our website uses Google Analytics Remarketing in connection with the cross-device functions of Google Ads and Google DoubleClick. You can opt out of cross-device remarketing by disabling personalized advertising in your Google Account at https://www.google.com/settings/ads/onweb/.

Web fonts

The website may use web fonts provided by Adobe Typekit and Google Fonts for a uniform display of fonts. When you access a page, your browser loads the necessary fonts, which requires a connection to the servers of these providers. This is in our legitimate interest in a uniform and appealing presentation (Art. 6(1)(f) GDPR).

Facebook Pixel

With your consent, we use the Facebook visitor action pixel to track actions of users after they reach our website via a Facebook ad, for statistical and market research purposes. All data collected is anonymous to us as the website operator.

Third-party services and content

Content from third parties (e.g., videos, maps, feeds, graphics) may be integrated into this offering. This requires the providers to be aware of your IP address in order to deliver the content. We use only content whose providers use the IP address solely for delivery, but we have no influence over any further storage by them.

9. Data protection rights

You have the right to information, to receive copies of your data, to rectification or deletion, to restriction of processing, to data portability, to object to processing, and to withdraw consent at any time. If you believe your data protection rights have been violated, please contact us; you also have the right to lodge a complaint with the relevant supervisory authority.

10. Changes to this privacy policy

We may make changes to our privacy policy. In such cases, we will inform you by announcing the update or by publishing the updated version on our website.