PRIVACY POLICY
Last updated: 6 August 2026
1. INTRODUCTION
This Privacy Policy describes how Rice&Shine (a brand operated by Farlee Private Limited, UEN 200722707K) ("we", "us", "our") collects, uses, discloses, and protects your personal data in accordance with the Personal Data Protection Act 2012 (the "PDPA") of Singapore.
By visiting our website, creating an account, or making a purchase, you consent to the collection, use, and disclosure of your personal data as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our website or services.
This Privacy Policy should be read together with our Terms of Service, which can be viewed here.
2. PERSONAL DATA WE COLLECT
We collect the following categories of personal data when you interact with our store:
2.1 Information you provide
- Name
- Email address
- Phone number
- Shipping and billing address
- Payment information (credit/debit card details, which are processed by our payment gateways and not stored on our servers)
- Order history and purchase preferences
- Product reviews and feedback
- Communications you send us (emails, messages, chat transcripts)
- Any other information you voluntarily provide when interacting with our store
2.2 Information collected automatically
- IP address and device information (device type, browser type, operating system)
- Browsing behaviour on our website (pages visited, time spent, click patterns)
- Location data (approximate, based on IP address)
- Cookies and similar technologies (see Section 10 below)
2.3 Information from third parties
- Shopify, as our e-commerce platform provider, may share with us certain analytical and transactional data about your use of our store.
- Social media platforms, if you interact with our store through social media integrations.
3. HOW WE USE YOUR PERSONAL DATA
We collect, use, and disclose your personal data for the following purposes, which a reasonable person would consider appropriate in the circumstances:
3.1 Processing your orders
- To process and fulfil your orders, including payment processing, shipping, and delivery
- To send you order confirmations, shipping notifications, and delivery updates
- To handle returns, exchanges, and refund requests
- To verify your identity and prevent fraud
3.2 Customer service and support
- To respond to your enquiries, complaints, and feedback
- To provide product information and support
3.3 Marketing and communications
- To send you promotional emails, newsletters, and product updates, but only where you have provided consent or where permitted under the PDPA
- To send you marketing messages via SMS or phone calls, but only where you have provided clear and unambiguous consent and where we have checked the Do Not Call (DNC) Registry where required
- You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails, replying "STOP" to our SMS messages, or contacting us at sales@farlee.com.sg
3.4 Operating and improving our store
- To operate, maintain, and improve our website and services
- To analyse shopping behaviour and preferences to improve product offerings and user experience
- To detect, prevent, and address technical issues, fraud, and security issues
3.5 Legal compliance
- To comply with our legal and regulatory obligations under Singapore law
- To maintain records for accounting, tax, and audit purposes
- To respond to lawful requests from public authorities
4. DISCLOSURE OF YOUR PERSONAL DATA
We may disclose your personal data to the following categories of recipients:
- Shopify: As our e-commerce platform provider, Shopify processes personal data on our behalf as a data intermediary. Shopify may store and process data in countries outside Singapore. We encourage you to review Shopify's Privacy Policy here.
- Payment processors: Such as credit card networks and payment gateways, to process your payments securely. We do not store your full credit card details on our servers.
- Shipping and logistics providers: To deliver your orders. We share your name, contact number, and delivery address with these providers.
- Service providers: Third-party tools and services that help us operate our store (e.g., email marketing platforms, analytics tools, customer service tools). These providers act as data intermediaries processing data on our behalf.
- Public authorities: Where required by law, court order, or regulatory authority in Singapore.
- Professional advisors: Lawyers, accountants, and auditors who require access to personal data to provide professional services.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
5. CROSS-BORDER TRANSFER OF YOUR PERSONAL DATA
Because our store is hosted by Shopify and we use third-party service providers that may be located outside Singapore, your personal data may be transferred to, stored in, or processed in countries outside Singapore, including but not limited to the United States, Canada, and other countries where Shopify and our service providers operate.
We take reasonable steps to ensure that any transfer of personal data outside Singapore is conducted in accordance with the Transfer Limitation Obligation under Section 26 of the PDPA. This includes ensuring that our service providers and data intermediaries provide a standard of protection comparable to that under the PDPA, through contractual arrangements such as data processing agreements and Standard Contractual Clauses where applicable.
6. RETENTION OF YOUR PERSONAL DATA
We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws, regulations, or legitimate business purposes. Specifically:
- Order and transaction data: Retained for a minimum of 5 years as required for accounting and tax purposes under the Inland Revenue Authority of Singapore (IRAS) requirements.
- Customer account data: Retained for the duration of your account and thereafter for a reasonable period to handle any post-termination enquiries or legal claims.
- Marketing data: Retained only for as long as you have consented to receive marketing communications. Upon withdrawal of consent, we will cease using your data for marketing within a reasonable period.
- Browsing and analytics data: Retained for a maximum of 24 months, after which it is anonymised or deleted.
When your personal data is no longer needed, we will delete it or anonymise it so that it can no longer be used to identify you.
7. PROTECTION OF YOUR PERSONAL DATA
We take reasonable security measures to protect your personal data against unauthorised access, collection, use, disclosure, loss, or modification. These measures include:
- Encryption of data in transit using SSL/TLS technology
- Secure payment processing through PCI-DSS compliant payment gateways
- Restricted access to personal data on a need-to-know basis within our organisation
- Regular review of our data protection practices
- Use of reputable third-party service providers with appropriate data security arrangements
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but will take all reasonable steps to protect your personal data in accordance with the PDPA.
8. DATA BREACH NOTIFICATION
In the event of a data breach that meets the threshold for mandatory notification under Part 6A of the PDPA (i.e., a breach affecting 500 or more individuals, or resulting in significant harm to affected individuals), we will notify the Personal Data Protection Commission (PDPC) and the affected individuals as soon as practicable and no later than 3 calendar days from the time we assess that the breach is notifiable.
9. ACCESS AND CORRECTION OF YOUR PERSONAL DATA
Under Sections 21 and 22 of the PDPA, you have the right to:
- Access: Request access to the personal data we hold about you and information about how we have used or disclosed it.
- Correct: Request that we correct any personal data about you that is inaccurate, incomplete, or outdated.
To make an access or correction request, please contact our Data Protection Officer at sales@farlee.com.sg. We will respond to your request within 30 days. We may need to verify your identity before processing your request. We may charge a reasonable fee for access requests that are excessive or repetitive, and we will inform you of any applicable fee before processing your request.
10. WITHDRAWAL OF CONSENT
If you have provided consent for us to collect, use, or disclose your personal data for a specific purpose, you may withdraw that consent at any time by contacting us at sales@farlee.com.sg.
Upon receiving your withdrawal of consent, we will cease collecting, using, or disclosing your personal data for that purpose within a reasonable period. However, withdrawal of consent does not affect any collection, use, or disclosure that was made before the withdrawal, and we may continue to retain and use your personal data where required by law or for legitimate business purposes such as maintaining order records for tax compliance.
11. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies and similar technologies to operate and improve our store. Cookies are small text files stored on your device when you visit a website. We use the following types of cookies:
- Essential cookies: Required for the website to function properly (e.g., maintaining your shopping cart, processing checkout). These cannot be disabled.
- Analytics cookies
- Marketing cookies: Used to display relevant advertisements and track the effectiveness of marketing campaigns, but only where you have provided consent.
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website (e.g., you may not be able to complete checkout). By continuing to use our website without disabling cookies, you consent to our use of cookies as described in this section.
12. DO NOT CALL (DNC) REGISTRY
If we send marketing messages via SMS, voice calls, or fax to Singapore telephone numbers, we will comply with the Do Not Call provisions under the PDPA. Before sending any telemarketing messages, we will check the DNC Registry unless you have provided clear and unambiguous written consent to receive marketing messages at your specific telephone number. You may withdraw your consent at any time by contacting us at sales@farlee.com.sg.
13. CHILDREN'S PERSONAL DATA
Our store is not directed at children under 18 years of age, and we do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at sales@farlee.com.sg and we will take steps to delete that information.
14. DATA PROTECTION OFFICER
We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection practices and ensuring compliance with the PDPA. If you have any questions or concerns about how we handle your personal data, or if you wish to make a request under the PDPA, please contact our DPO:
Data Protection Officer
Rice&Shine (Farlee Private Limited)
39 Woodlands Close, #01-47 MEGA@Woodlands
Singapore 737856
Email: sales@farlee.com.sg
Phone: +65 6484 1075
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Privacy Policy on our website and update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of our website after any changes constitutes acceptance of the updated Privacy Policy.
16. CONTACT US
If you have any questions about this Privacy Policy or our data protection practices, please contact us at:
Rice&Shine (Farlee Private Limited)
39 Woodlands Close, #01-47 MEGA@Woodlands
Singapore 737856
Email: sales@farlee.com.sg
Phone: +65 6484 1075
UEN: 200722707K