This notice applies to MScents Pte Ltd, established in Singapore (“MScents”, “we” or “us”), a business unit of SG Global Holdings Pte Ltd. It explains how we collect, use, disclose and protect personal data, including through www.mscents.com, in line with the Personal Data Protection Act 2012 of Singapore and its regulations (“PDPA”). “Personal data” has the meaning given to it in the PDPA.

We collect, use or disclose personal data only for reasonable purposes we have told you about, with your consent or deemed consent, or where the law requires or allows it.

Personal Data We Collect

Depending on how you deal with us, we may collect:

  • Orders: your name, email address, phone number, billing and delivery addresses, the items you buy, gift messages, order notes and your order history.
  • Your account: your name, email address, password (stored only in a scrambled, one-way form we cannot read), saved addresses, wishlist and newsletter preference.
  • Payments: card payments are handled by our payment provider, Stripe. We do not see or store your full card number; we keep only the card brand, its last four digits and the payment reference. If you choose to save a card, Stripe stores it for you.
  • Workshops, events and corporate enquiries: your contact details, company name, preferred dates, the number of guests and their names, and any notes you send us.
  • Newsletter: your email address and when you subscribed or unsubscribed.
  • When you contact us: what you tell us by email, phone, WhatsApp or in person.
  • Technical data: your IP address, browser type and the pages you request, which our servers record to keep the website running and secure.

If you give us personal data about someone else, such as a gift recipient or a workshop guest, you confirm that they have agreed to it and that you have told them about this notice.

How We Use Your Personal Data

  • To process, deliver and support your orders, including payment, delivery or self-collection, replacements and refunds.
  • To send you the emails your order or account needs, such as order confirmations, delivery updates, password resets and email verification.
  • To manage your account, saved addresses and wishlist.
  • To arrange workshops, events and corporate orders, and to answer your enquiries.
  • With your consent, to send you news, offers, event invitations and surveys. You can opt out at any time using the unsubscribe link in any marketing email, through your account, or by emailing us. We will act on your request within 28 days.
  • To protect the website and our customers from fraud, spam and abuse, and to keep records for accounting, tax and legal purposes.

Who We Share It With

We do not sell your personal data. We share it only when required or allowed by law, with your consent, or with service providers who process it on our behalf under contract and are bound to keep it confidential and secure. These are:

  • Stripe, to take card payments and store cards you choose to save;
  • couriers and delivery partners, who receive your name, delivery address and phone number to deliver your order;
  • our e-commerce platform and hosting providers, including Google Cloud, which run the website and keep our records;
  • Amazon Web Services, which sends our emails;
  • Cloudflare, which protects the website from attacks and checks that forms are filled in by people rather than bots.

Personal data may also be shared within the SG Global Holdings group for the purpose you gave it to us, and with a buyer or successor if all or part of our business is transferred.

Transfer Outside Singapore

Our website and email service are hosted in Singapore. Some service providers, such as Stripe, may process personal data in other countries. Where personal data is transferred outside Singapore, we make sure it receives a standard of protection comparable to the PDPA.

Cookies

We use only the cookies the website needs to work. We do not use advertising or analytics cookies.

  • mscents_cart: remembers your shopping cart.
  • mscents_session: keeps you signed in to your account.
  • MSCENTS_CURRENCY: remembers the currency you chose for display.
  • PARAGLIDE_LOCALE: remembers the language you chose.

Stripe (at checkout) and Cloudflare (on sign-up and password reset) may set their own cookies to prevent fraud and spam. You can block cookies in your browser, but your cart, sign-in and checkout will then not work.

How Long We Keep It

We keep personal data only as long as we need it for the purpose it was collected or for legal and business reasons. Order and payment records are kept for [To confirm: retention period, e.g. at least five years] to meet Singapore tax and accounting requirements. Your account stays until you ask us to close it. After that, we delete your personal data or make it anonymous.

How We Protect It

We use industry-standard security, including encrypted connections (HTTPS), restricted access, and encryption of sensitive data such as the contents of queued emails. Only authorised staff and service providers who are bound to confidentiality can access personal data. No method of transmission or storage is completely secure, but we work to protect your data from unauthorised access, loss and misuse.

Accuracy

We make a reasonable effort to keep your personal data accurate and complete. You can update your details at any time in My account, or ask us to.

Access, Correction and Deletion

You may ask to see the personal data we hold about you, to correct it, or to delete it. Email our Data Protection Officer at admin@mscents.com. We will respond in line with the PDPA. We may charge a reasonable fee for an access request, and we will tell you the fee before we proceed. We may refuse access where the PDPA allows, for example if it would reveal someone else’s personal data.

Withdrawing Consent

You may withdraw your consent by giving us reasonable notice. We will tell you what this means for you. For example, we cannot deliver an order without your address. We will then stop, and ask our service providers to stop, collecting, using or disclosing your personal data, unless the law requires or allows us to continue.

Recruitment

Personal data you send when applying for a job with us is used only by staff and partners involved in hiring. It may be shared within the SG Global Holdings group for that purpose.

Other Websites

Our website links to other websites, such as our Shopee, Lazada and TikTok shops and social media pages. Their privacy practices are their own. Please read their privacy policies.

Changes to This Notice

We may update this notice from time to time. We will post the updated notice here with its new date, and flag significant changes on the website for at least two weeks.

Data Protection Officer

For questions, requests or complaints about your personal data, contact our Data Protection Officer, [To confirm: Data Protection Officer name (currently Reeve Ho)]:

Email: admin@mscents.com
Phone: +65 8799 1212
Address: 53 Ubi Avenue 1, #05-02, Paya Ubi Industrial Park, Singapore 408934