Privacy Policy

1. Information We Collect

Log Data

When you visit our website, our servers may automatically log standard technical data provided by your web browser. This includes your computer’s Internet Protocol (IP) address, browser type and version, pages visited, time and date of visit, time spent on each page, and related technical diagnostic details.

Device Data

We may collect data regarding the device used to access our website, including device type, operating system, unique device identifiers, and general geographic location data depending on individual device software settings.

Personal Information

We may ask for personal details when you interact with our site, including:

• Name and contact details
• Email address
• Inquiries and diagnostic message submissions
• Preferences and newsletter subscriptions

2. Legal Bases for Processing

We process your personal information lawfully, fairly, and transparently. We collect and process data only where:

• It is necessary for the performance of a service or contract to which you are a party;
• It satisfies a legitimate interest (such as research, development, and website performance optimization) that is not overridden by your data protection rights;
• You give explicit consent for a specific purpose (e.g., subscribing to care updates);
• Processing is required to comply with legal and regulatory obligations.

We retain personal information only for as long as necessary to fulfill its intended purpose, protecting it within commercially acceptable means to prevent unauthorized access, disclosure, or loss.

3. Collection and Use of Information

We collect and use information to:

• Personalize and optimize your browsing experience;
• Enable access to our website tools, plant guides, and contact channels;
• Respond to horticultural questions and customer inquiries;
• Maintain internal administrative records and analyze website traffic performance;
• Comply with statutory legal obligations and resolve disputes.

4. Disclosure of Personal Information to Third Parties

We do not sell personal data. We may disclose information only to:

• Third-party IT, hosting, and server infrastructure providers;
• Analytics and site performance service providers;
• Regulatory authorities or law enforcement where required by applicable law;
• Third-party agents assisting in providing customer communication.

5. International Data Transfers

Data collected is stored and processed in Singapore or where our partners maintain technical infrastructure. Any transfer of personal information from the European Economic Area (EEA) to countries outside the EEA is protected by standard contractual clauses or equivalent legal safeguards.

6. Your Rights and Controlling Personal Information

Choice & Consent: You are not required to provide personal information, though withholding details may affect access to certain website features.

Access & Portability: You may request details and a copy of the personal information we hold about you at any time.

Correction & Erasure: If you believe stored data is inaccurate or out of date, or wish for your information to be deleted, contact us at support@bonsai-express.com.

Unsubscribe: To opt out of communications, use the unsubscribe link provided in our emails or contact our support team directly.

7. Cookies

We use cookies to analyze user activity, remember user preferences, and maintain website speed and security. For full details on our cookie usage and controls, please review our dedicated Cookie Policy.

8. External Links

Our website may contain links to external horticultural sites. We have no control over the content and policies of third-party domains and cannot accept liability for their respective privacy practices.

9. Changes to This Policy

We may update this policy periodically to reflect operational, legal, or regulatory updates. Continued use of the website following changes constitutes acceptance of the updated practices.

10. Singapore Personal Data Protection Act (PDPA) Compliance

Under Singapore’s Personal Data Protection Act (PDPA), individuals have the statutory right:

1. To check whether we hold personal data and request access to such data;
2. To request correction of any inaccurate personal data as soon as reasonably practicable;
3. To ascertain our data protection policies and practices;
4. To object to the use of personal data for direct marketing purposes.

11. Governing Law & Contact Information

This Privacy Policy is governed by and construed in accordance with the laws of Singapore. For inquiries regarding data protection, please contact: