Privacy Policy

How we look after your data

Daywave Trading PTE. LTD. (UEN 202537128D), Singapore asks only for the details needed to press and deliver your juice, keeps them safe, and follows Singapore’s Personal Data Protection Act (PDPA) to the letter. Your data stays within Lalaland and the few trusted partners who help bring your juice to your door — only ever used to serve you, and looked after as carefully as we’d look after our own.

What we collect

So you can see exactly what we hold, here it all is:

• Identity and contact — your name, email address and phone number.
• Delivery — your address and postal code, plus the map point we work out from it so our drivers can find you easily.
• Orders — what you’ve bought, your subscription settings, and your delivery history.
• Payment — looked after entirely by Stripe. Your full card details stay safely with them; we hold only a reference to your saved payment method.
• How you found us — a first-touch source (say, Instagram or a search engine) and, if you followed a referral link, its code.
• Technical — the standard server logs (IP address, browser type) that help us keep the store secure.

What we use it for

Everything we hold goes toward serving you:

• Pressing, charging for and delivering your orders.
• A few service messages we’ll always send while you’re a customer — order confirmations, delivery updates, and payment updates — kept to just what you’ll want to know.
• Being right there when you reach out for support.
• Keeping the store and your account safe.
• Meeting our legal obligations, such as keeping transaction records for tax.
• Marketing only if you’ve said yes, and always with an easy way to change your mind in every message, as Singapore’s Spam Control Act asks. We make marketing calls or send marketing SMS to Singapore numbers only with your clear consent, in line with the Do Not Call registry.

Cookies

A small, honest handful, each simply here to help you shop:

• Sign-in session — keeps you signed in to your account.
• Cart — remembers what’s in your cart on this device.
• Source — remembers how you first found us, for 30 days.
• Referral — remembers a referral link you clicked, for 30 days.

These four are the only cookies we use.

Who we share it with

We share your data only with the trusted partners who help us look after you, and only the piece each one needs:

• Stripe — to process your payments securely.
• Supabase and Vercel — the database and hosting this store runs on.
• Mapbox and OneMap — turning your postal code into a point on a map for routing.
• Our delivery people and partners — your name, address and phone number, so they can hand you your box.
• Authorities — only where the law genuinely requires it.

Where it’s stored

Our systems run on trusted cloud infrastructure whose servers may sit outside Singapore, within Asia-Pacific regions. Whenever your data does travel beyond Singapore, we make sure — through our contracts with these providers and their certified safeguards — that it stays protected to a standard comparable to the PDPA, exactly as the Act asks.

How long we keep it

We keep your data for as long as you have an account or an active subscription with us, and after that only for as long as the law asks — transaction records are held at least five years for tax. Then we delete it, or gently strip away anything that could identify you.

Your rights

Your data is always yours. You’re welcome to ask what we hold about you, to have us correct it, or to withdraw consent for anything that relies on it (which may simply mean we’re no longer able to deliver to you). Please write to our data protection contact below — a real person will read it, and we’ll respond within 30 days.

If ever your data is affected

In the rare event of a data breach that’s notifiable under the PDPA — one likely to cause significant harm, or affecting 500 or more people — we’ll notify the Personal Data Protection Commission within 3 calendar days of assessing it as such, and let anyone affected know promptly, clearly, and with care.

Data protection contact

Our data protection officer is reachable through the contact details just below — the place for any request to access or correct your data, or any question about it. A real person will always read it.