Privacy policy

General
1. The Hainan Story ("us", "we", "our") is the operator of The Hainan Story (the
"website"). We take our responsibilities under Singapore’s Personal Data Protection Act
2012 (the "PDPA") seriously. We also recognize the importance of the personal data you
have entrusted to us and believe that it is our responsibility to properly manage, protect
and process your personal data.

2. This Personal Data Protection Policy, together with our Terms of Use, Cookie Policy,
and Terms of Purchase, (if you make a purchase on the website) are designed to assist
you in understanding how we collect, use, disclose and/or process your personal data.

3. Unless restricted by the PDPA or any other applicable law, you agree that we may
process your personal data in the manner, and for the purposes set out in the terms
described in paragraph 2 above.

What is Personal Data
4. Personal data means data, whether true or not, about an individual who can be
identified from that data, or from that data and other information to which an
organization has or is likely to have access.

5. Common examples of personal data could include names, identification numbers,
contact information, medical records, photographs, and video images.

How Personal Data is collected
6. Here are examples of situations where we collect your personal data:
(a) when you register to receive our e-newsletter via our website
(b) when you submit a request or query via the Contact Form on our websites
(c) when you make a reservation with us through our website, telephone or third party
vendor we employ to assist us with our reservation;
(d) when you communicate with us directly in relation to our products and services (in
person or via our co-workers in our restaurant, by email, telephone or any other means);
(e) when you use services that are made available on the website or at our restaurants;
such as home delivery and takeaway;
(f) when you conduct certain types of transactions such as refunds;
(g) when you enter, and when you interact with us during promotions, competitions,
contests, lucky draws or special events;
(h) when you apply for employment with us;
(i) when you participate in surveys and other types of research.

When Personal Data Collected and what is Collected
7. You can use and browse the website without disclosing your personal data. The
provision of your personal data is voluntary. But, if you do not provide your personal
data to us, we may not be able to provide the products and services that you require of
us.

8. We collect personal data through newsletter registration, placement of orders,
completion of forms, emails, inquiries, requests, and other situations where you have
chosen to provide personal data to us.

9. Other examples of the types of personal data which we may collect about you include:
(a) contact information such as names, addresses, telephone numbers, and email
addresses;
(b) billing information such as billing address and credit card information;
(c) unique information such as ID or passport number, photograph, contact preferences,
and date of birth;
(d) details of your visits to the website, such as traffic data, location data, and the
resources that you access on the website; and (e) your transaction history.

Purposes for Collection, Use, Disclosure and Processing of Personal
Data
10. You may, in certain circumstances, provide us with personal data relating to third
parties (for example, your next-of-kin or any person who may receive delivery of your
purchased item on your behalf or, any person whom you have nominated as your
referee if you are a candidate for employment). When this happens, you are deemed to
have represented and confirmed to us that you have obtained the consent of such third
party to provide his/her personal data to us for processing in the manner set out in
paragraph 2 above.

11. We collect personal data if it is necessary for us to conduct our everyday activities or
functions.

12. The personal data which we collect from you may be collected, used, disclosed
and/or processed for various purposes, depending on the circumstances for which we
may/will need to process your personal data, including:
(a) to communicate with you;
(b) to maintain and improve customer relationship;
(c) to assess, process and provide products, services and/or facilities to you;
(d) to administer and process any payments (including refunds) related to products, services and facilities requested by you;
(e) to establish your identity and background;
(f) to respond to your enquiries or complaints and resolve any issues and disputes which
may arise in connection with any dealings with us;
(g) to provide you with services or assistance that you have requested;
(h) to provide you with information and/or updates on our products, services, upcoming
promotions offered by us and/or events organized by us and selected third parties which may be of interest to you from time to time;
(i) for direct marketing purposes via SMS, phone call, email, fax, mail, social media
and/or any other appropriate communication channels in accordance with your consent;
(j) to facilitate your participation in, and our administration of, any events including
contests, promotions or campaigns;
(k) to maintain and update internal record keeping;
(l) for internal administrative purposes;
(m) to send you seasonal greetings messages from time to time;
(n) to send you invitation to join our events and promotions and product launch events;
(o) to monitor, review and improve our events and promotions, products and/or
services;
(p) to conduct credit reference checks and establish your creditworthiness, where
necessary, when providing you with products, services and/or facilities;
(q) to administer, process and fulfil your commercial transactions with us (such as a
purchase on the Website, a tender award, contract for service;
(r) to process any payments related to your commercial transactions with us;
(s) to process and analyze your personal data either individually or collectively with
other individuals;
(t) to conduct market research or surveys, internal marketing analysis, customer
profiling activities, analysis of customer patterns and choices, planning and statistical
and trend analysis in relation to our products and/or services;
(u) to share any of your personal data with the auditor for our internal audit and
reporting purposes;
(v) to share any of your personal data pursuant to any agreement or document which
you have duly entered with us for purposes of seeking legal and/or financial advice
and/or for purposes of commencing legal action;
(w) to share any of your personal data with our business partners to jointly develop
products and/or services or launch marketing campaigns;
(x) to share any of your personal data with financial institutions necessary for the
purpose of applying and obtaining credit facility(ites), if necessary;
(y) for audit, risk management and security purposes;
(z) for detecting, investigating and preventing fraudulent, prohibited or illegal activities;
(aa) for enabling us to perform our obligations and enforce our rights under any
agreements or documents that we are a party to;
(bb) to transfer or assign our rights, interests and obligations under any agreements entered into with us;
(cc) for meeting any applicable legal or regulatory requirements and making disclosure
under the requirements of any applicable law, regulation, direction, court order, by-law,
guideline, circular or code applicable to us;
(dd) to enforce or defend our rights and your rights under, and to comply with, our
obligations under the applicable laws, legislation and regulations; and/or for other
purposes required to operate, maintain and better manage our business and your
relationship with us; which we notify you of at the time of obtaining your consent.

13. As the purposes for which we may/will collect, use, disclose or process your personal
data depend on the circumstances at hand, such purpose may not appear above.
However, we will notify you of such other purpose(s) at the time of obtaining your
consent, unless we are permitted by the PDPA or any other applicable law to process
your personal data without your consent.

Specific Issues for the Disclosure of Personal Data to Third Parties
14. In order to smoothly conduct our business operations or to fulfil our obligations to
you, we may also disclose the personal data that you have provided to us to our third
party service providers, agents, affiliates or related corporations, who may be situated
inside or outside of Singapore, for one or more of the purposes stated in or notified to
you under the Purposes for Collection, Use, Disclosure and Processing of Personal Data
section. We will also disclose your personal data to government regulators or authorities
to comply with any laws, rules, guidelines, regulations, or schemes that apply to us.

15. Examples of third parties that we disclose your personal data to include:
(a) data entry service providers;
(b) professional advisors, agencies, consultants and/or external auditors;
(c) third party service providers who provide operational services in connection with our
business such as telecommunications, reservations, information technology, logistics,
delivery, assembly, installation, printing and postal services or services relating to
marketing and promotional activity; and
(d) relevant government regulators or authorities.

16. The third parties whom we conduct business are only authorized to use your
information to perform the service for which they were hired. As part of our agreement
with them, they are required to adhere to the PDPA and any policies that we provide,
and to take reasonable measures to ensure your personal data is secure.

17. We respect the confidentiality of the personal data that you provide to us. We do
not sell personal data to any third party.

Request to Withdraw Consent
18. You may withdraw your consent for the collection, use and/or disclosure of your
personal data that is in our possession or under our control by writing to us
at marketingbaoshi@gmail.com

19. We will process your request within a reasonable time from such a request for
withdrawal of consent being made, and will thereafter not collect, use and/or disclose
your personal data in the manner stated in your request.

20. Your withdrawal of consent may result in certain consequences. For example, it may
mean that we will not be able to provide you with certain products or services that you
have requested or that we will not be able to continue with your existing relationship
with us. We will inform you of such consequences after we receive your request for
withdrawal.

21. However, you understand that notwithstanding your withdrawal of consent, we will
still be entitled to collect, use or disclose your personal data if we are required or
authorized to do so under the PDPA or any other applicable law.

Protection and Destruction of Personal Data
22. We will put in place reasonable security arrangements to ensure that your personal
data is adequately protected and secured. In particular, reasonable security
arrangements will be taken to prevent any unauthorized access, collection, use,
disclosure, copying, modification, leakage, loss, damage and/or alteration of your
personal data. However, we cannot assume responsibility for any unauthorized use of
your personal data by third parties which are wholly attributable to factors beyond our
control.

23. We will also put in place measures to ensure that any of your personal data that is in
our possession or under our control is destroyed and/or anonymized as soon as it is
reasonable to assume that:
(a) the purpose for which that personal data was collected is no longer being served by
the retention of such personal data; and
(b) retention is no longer necessary for any other legal or business purposes.

Updates on Personal Data Protection Policy
24. As part of our efforts to ensure that we properly manage, protect, and process your
personal data, we will be reviewing our policies, procedures, and processes from time to
time.

25. We reserve the right to amend the terms of this Personal Data Protection Policy at our absolute discretion. Any amended Personal Data Protection Policy will be posted on the website and can be viewed at www.thehainanstory.com.sg. No individual notice will be sent to you.

26. You are deemed to have acknowledged and agreed to any amended version of this
Personal Data Protection Policy if you continue to use the website after the changes have taken place. As such, you are encouraged to visit the above website from time to time to ensure that you are well informed of our latest policies in relation to personal data protection.