Privacy Policy - THEGREYSPACE.CO

1. Introduction

THEGREYSPACE.CO (“we”, “us”, “our”) is committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (“PDPA”) of Singapore. This Privacy Policy explains how we collect, use, disclose and protect your personal data when you visit our Website, shop with us online or in-store, or join our membership programme.

2. Personal Data We Collect

CATEGORY	EXAMPLES
Contact information	Name, email address, phone number, delivery/billing address
Account & membership	Login details, membership ID, points balance, purchase history
Order information	Products purchased, order value, customisation details
Payment information	Processed securely by our payment gateway; we do not store full card numbers
Technical data	IP address, browser type, device information, cookies, site usage
Communications	Records of enquiries via WhatsApp, email or contact forms

3. How We Collect Your Data

Directly from you — when you place an order, create an account, sign up for membership (online or via in-store QR code), or contact us.
Automatically — through cookies and similar technologies when you browse the Website.
In our retail stores — when you sign up as a member in person.

4. Purposes for Collection, Use & Disclosure

We collect, use and disclose your personal data for purposes including:

Processing and fulfilling your orders, including delivery and payment processing.
Managing your membership account and loyalty points.
Responding to enquiries and providing customer service, including via WhatsApp.
Sending order updates and shipping notifications.
Sending marketing communications, promotions and back-in-stock notifications — only where you have opted in.
Improving our Website, products and services.
Complying with legal and regulatory obligations.
Detecting and preventing fraud.

5. Consent & Withdrawal

By providing your personal data to us, you consent to our collecting, using and disclosing it for the purposes set out in this Policy. Where we rely on your consent for marketing communications, you may withdraw it at any time by:

Clicking “unsubscribe” in our marketing emails
Replying “STOP” to our WhatsApp messages
Emailing [email protected]

Withdrawing consent may affect our ability to provide certain services, such as order updates or membership benefits.

6. Disclosure of Personal Data

We may disclose your personal data to the following categories of recipients, strictly for the purposes stated in Section 4:

Delivery partners (e.g. SPX Courier Service), to fulfil deliveries
Payment gateway and banking partners, to process PayNow and card payments
Our CRM and membership platform provider, to manage loyalty points and membership records
IT and website hosting service providers
Government authorities or regulators, where required by law

We do not sell your personal data to third parties.

7. Cookies

Our Website uses cookies to improve your browsing experience, remember your preferences, and analyse site traffic. You may disable cookies through your browser settings; some features of the Website may not function properly as a result.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law (for example, accounting and tax record-keeping obligations).

9. Data Security

We implement reasonable administrative, technical and physical safeguards to protect your personal data against unauthorised access, use, disclosure, copying, modification or loss.

10. Access & Correction

You may request access to, or correction of, your personal data held by us by contacting our Data Protection Officer (Section 13). We will respond within a reasonable timeframe in accordance with the PDPA. We may decline certain requests as permitted under the PDPA (for example, where disclosure would reveal another individual’s personal data).

11. Overseas Transfer

Where your personal data is transferred outside Singapore — for example, to cloud service providers — we will take steps to ensure it receives a standard of protection comparable to that under the PDPA.

12. Children's Privacy

Our Website is not intended for children under 18. We do not knowingly collect personal data from minors without the consent of a parent or legal guardian.

13. Data Protection Officer

For any questions, requests or complaints regarding this Privacy Policy or your personal data, please contact:

Data Protection Officer, THEGREYSPACE.CO
Email: [email protected]
Address: 9 Tagore Lane, 9@Tagore, #03-27, Singapore 787472

Client to confirm: name of designated DPO, and whether a dedicated DPO email (e.g. [email protected]) should be set up – recommended under PDPC guidelines.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be posted on this page, with the “last updated” date reflected at the top.