1.  APPLICATION

This Privacy Policy explains the types of Personal Data we collect and how we use, disclose, transfer, process and protect that information.

We collect Personal Data through, but not limited to, the following means:
(a) When you shop on or browse any website owned, operated, controlled and/or managed by us
(the “Website”);
(b) When you shop in-store at our physical stores;
(c) When you connect with us through social media or attend our marketing events; and
(d) When you agree and consent to be a member of the Shiseido Membership, whether through physical or electronic means.

We may update this Privacy Policy from time to time by posting updated versions on the Website, and/or by sending an e-mail to you. Your continued membership, access to and/or use of the Website will be taken to be your agreement to, and acceptance of, all changes made in each updated version.

Please check back regularly for updated information on how we handle your Personal Data.

2.  CONSENT

We do not collect, use or disclose your Personal Data without your consent (except where permitted and authorised by law). By providing your Personal Data to us, you hereby consent to us collecting, using, disclosing, transferring, and processing your Personal Data for the purposes set out in Section 3 of this Privacy Policy.

The types of Personal Data we collect include, but are not limited to, your: (a) first name and family name; (b) home address; (c) date of birth; (d) email address; and, only if appropriate, your (e) user name and password; (f) billing and delivery address; and (g) other information as may be reasonably required for us to provide you with the Services as defined in Section 3 below.

3.  PURPOSE

We collect, use, disclose, transfer and process your Personal Data for the purpose of providing services. These services include, but are not limited to:

1. providing you with information on products and campaigns from us, Shiseido Group and our third party business partners via email, SMS, and post (where we have your express consent);
2. allowing you to purchase products and services offered for sale via the Website;
3. facilitating your transactions with us;
4. sending you product samples and/or products;
5. keeping you informed of updates, changes, and developments relating to us and our Services;
6. notifying you about important changes to this Privacy Policy, and to our other policies or services;
7. providing you with personalized consultations;
8. responding to queries or feedback from you;
9. maintaining and operating the Website;
10. managing our administrative and business operations;
11. engaging third party business partners and data processors to perform certain aspects of the Services;
12. performing customer profiling, market analysis, and research to improve our product and service offerings to you;
13. preventing, detecting and investigating crime and analysing and managing commercial risks; and
14. other purposes which are reasonably related to the above.(collectively, the "Services")

4.  WITHDRAWAL OF CONSENT, ACCESS & CORRECTION

If you wish to withdraw your consent to receive information on new products and campaigns, or any other Services, you may do so by:

1. unsubscribing from our Website;
2. clicking the “Unsubscribe" link in the email(s) we send to you;
3. contacting our Data Protection Officer at the email address below; or
4. writing to us at the address below.

Please note that if you choose to withdraw your consent to our use, disclosure, transfer and/or processing of your Personal Data, we may not be able to provide you with some or all of the Services.

We will ensure that the Personal Data in our possession is accurate and complete to the best of our knowledge.

You have a right to request for access and correction of your Personal Data. If you would like assistance in accessing and/or correcting your Personal Data, please contact our Data Protection Officer at the email address below. We will get back to you within 30 days.

5.  CHILDREN

This Website is directed toward and designed for use by persons aged 16 or older. We do not intend to collect Personal Data from children under 16 years of age, except on some sites specifically directed to children.

We protect the Personal Data of children along with the necessary parental consent in the same manner as it protects the Personal Data of adults.

6.  THIRD PARTY DISCLOSURE & TRANSFER

We do not disclose or transfer your Personal Data to third parties unless we have clearly asked for and obtained your consent to do so (except where permitted and authorised by law). The Personal Data which you provide to us may be stored, processed, transferred between, and accessed from servers located in the United States and other countries which have laws and regulations that may not guarantee the same level of protection of Personal Data as Singapore. However, we will take reasonable steps to ensure that your Personal Data is handled in accordance with this Privacy Policy, regardless of where your Personal Data is stored or accessed from.

6.1 Disclosure to affiliated companies in the Shiseido Group

The Shiseido Group comprises a number of affiliated companies and legal entities located both within and outside Singapore. We may disclose, where appropriate and to the extent necessary, your Personal Data to such affiliated companies and legal entities for the purposes of corporate reporting, market research and analysis, customer relationship management and other related legal and business purposes. Please note that we provide our affiliated companies and legal entities with only the Personal Data they need for such business and legal purposes, and we require that they protect such Personal Data in accordance with the applicable laws and regulations and this Privacy Policy, and not use it for any other purpose.

6.2 Disclosure to third party business partners

We rely on third party business partners to perform a variety of services on our behalf. In so doing, Shiseido may let service providers, located both within and outside Singapore, use your Personal Data for the marketing and promotion of products, services or events that may be of interest to you, for market research and analysis, for customer relationship management, and for the fulfilment of your orders for products and services purchased via the Website. Please note that we provide our third party business partners with only the Personal Data they need to perform their services and we require that they protect such Personal Data in accordance with the applicable laws and regulations and this Privacy Policy, and not use it for any other purpose.　　

6.3 Disclosure to third party data processors

We may use third party service providers, located both within and outside Singapore, to help us maintain and operate the Website, or for other reasons related to the operation of the Website and Shiseido’s business, and they may receive your Personal Data for these purposes. We only provide them the Personal Data they need to provide these services on our behalf. We require these companies to protect the Personal Data in accordance with the applicable laws and regulations and this Privacy Policy, and to not use the information for any other purpose.

6.4 Other disclosure

We may use and disclose your Personal Data to perform your instructions and, as relevant, (a) comply with legislative and regulatory requirements; (b) protect or defend rights or properties of customers and employees of Shiseido; and/or (c) take emergency measures for the purpose of securing the safety of customers, Shiseido, or the general public.

7.  SECURITY & PROTECTION

We maintain strict procedures, standards, and security arrangements to protect Personal Data in our possession or under our control. Upon receipt of your Personal Data, whether through physical or electronic means of collection, we will make the necessary security arrangements to protect such Personal Data as are reasonable and appropriate in the circumstances. Such arrangements may comprise administrative measures, physical measures, technical measures, or a combination of such measures.

When disclosing or transferring your Personal Data over the internet, we take all reasonable care to prevent unauthorised access to your Personal Data. However, no data transmission over the internet can be guaranteed as fully secure and you acknowledge that you submit information over the internet at your own risk.

8.  RETENTION OF PERSONAL DATA

We will not retain your Personal Data for any period of time longer than is necessary to serve the purposes set out in this Privacy Policy and any valid business or legal purposes. After this period of time, we will destroy or anonymise any documents containing your Personal Data in a safe and secure manner.

9.  GOVERNING LAW

This Privacy Policy is governed by Singapore law.

10.  CONTACT US

If you would like to access or correct any Personal Data which you have provided to us, submit a complaint, or have any queries about your Personal Data, please contact our Data Protection Officer by contacting us at event@narscosmetics.com.sg. Alternatively, you may write to us at: