Privacy policy

This policy explains how The One Retail Pte. Ltd. ("One Retail", "we", "us"), registered in Singapore under UEN 201817395W, collects, uses, discloses and protects personal data through this website, theoneretail.com. We follow Singapore's Personal Data Protection Act 2012 (PDPA) and, where they apply to you, other data protection laws such as Malaysia's Personal Data Protection Act 2010 and the EU General Data Protection Regulation (GDPR).

This policy covers the website and the enquiries made through it. It does not cover the One Retail platform that our clients run. Personal data held in a client's environment is governed by that client's own privacy notice and by our agreement with them, under which we act on their instructions.

1. What we collect

When you contact us

Our contact, demo, quote and partner forms ask for your name, work email address and company. You can also tell us what you would like to do, your store format, how many stores you run, a module list you built on our pricing page, and a message. We do not ask for sensitive personal data; please do not include it in your message.

When you download a guide

To download one of our guides, you give us your name, work email address, company and job title. You can also tell us your store format and how many stores you run, and tick a box to receive new guides and One Retail news.

When you visit the website

Like most websites, our server records technical details of each request: your IP address, your browser and device type, the page requested and the time. While you browse, a session record holds your IP address and browser details and expires after two hours without activity.

Cookies and analytics

Two cookies are strictly necessary for the website to work: one keeps your session, and one protects our forms against cross-site request forgery. Our fonts and video are served from our own server.

With your consent, we also use Google Analytics, a service of Google, to learn which pages are read and how visitors find us. We ask on your first visit, and until you accept, nothing is loaded from Google and no analytics cookies are set. If you accept, Google Analytics sets cookies named _ga and _ga_ followed by an ID, which last up to two years, and receives the pages you view, the site that sent you, your browser and device type, and your approximate location, worked out from your IP address, which Google Analytics does not store. When you send one of our forms, Google Analytics records that a form was sent and which kind, never what you wrote. Google signals and advertising features are turned off.

You can change your choice at any time with Cookie settings at the foot of every page. Declining removes the analytics cookies from your browser. Your browser remembers your choice for 12 months, so we do not ask on every page.

While you browse, your browser also remembers which store format you were reading about, such as pharmacy, so that our contact form can start with it already chosen. This stays in your browser, is deleted when you close the tab, and reaches us only if you send the form. If you close the announcement bar at the top of the site, your browser remembers that so it stays closed; that too never leaves your browser.

2. How we use it

• To reply to your enquiry, arrange a demonstration, prepare a quote, consider a partner application or send a security pack you asked for.
• To keep a record of our conversations with prospective clients and partners.
• To keep the website secure, prevent abuse and fix problems.
• To give you the guide you asked for, and to follow up with you about your evaluation.
• If you ticked the box to hear from us, to send you new guides and One Retail news. You can unsubscribe at any time.

We do not sell personal data, and we do not make automated decisions about you. We will not add you to a mailing list unless you ask us to, for example by ticking the box when you download a guide.

If the GDPR applies to you, we rely on your consent when you send us a form or accept analytics cookies, on the steps needed before entering into a contract when you ask for a quote, and on our legitimate interest in running a secure website and a business for the technical records.

3. Who we share it with

• The people at One Retail who handle your enquiry.
• Service providers who host and run the website for us. They act only on our instructions.
• Google, if you accept analytics cookies, which runs Google Analytics for us under its data processing terms.
• Professional advisers, and public authorities where the law requires it.
• A successor, if our business or part of it is transferred.

4. Where it is kept

The website and its records are kept on servers operated for us by our service providers. Google Analytics data may be processed by Google outside Singapore, including in the United States. If personal data is transferred outside Singapore, we make sure it receives a standard of protection comparable to the PDPA, as the PDPA's transfer rules require.

5. How long we keep it

• Enquiries and guide downloads: 24 months after our last contact with you, unless you become a client or partner, in which case our agreement with you applies.
• Server logs: 90 days.
• Session records: they expire after two hours without activity.
• Google Analytics data: 14 months, after which Google deletes it.
• Your cookie choice: 12 months, in your browser.
• Your request to receive new guides and news: until you withdraw it.

6. How we protect it

The website is served only over encrypted connections (HTTPS), and access to enquiries is limited to the people who need it. No system is perfectly secure, but we make reasonable security arrangements to protect personal data from unauthorised access, use, disclosure and loss.

7. Your rights

You can ask for access to the personal data we hold about you, ask us to correct it, and withdraw your consent to our using it. If the GDPR applies to you, you can also ask us to erase or restrict it, object to our use of it, ask for a copy in a portable format, and complain to your data protection authority. In Singapore you can contact the Personal Data Protection Commission.

To make a request, email our Data Protection Officer at the address below. We will reply within 30 days and may need to confirm who you are first.

8. Children

This website is for businesses and is not directed at anyone under 18.

9. Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.

10. Contact and Data Protection Officer

Data Protection Officer: dpo@theoneretail.com
The One Retail Pte. Ltd., 1 Kim Seng Promenade, #11-00, Singapore 237994