PDPA
Effective date: 21 July 2026. RoastPoint Pte. Ltd. (UEN 202519847C), 28 Stanley Street, #01-03, Singapore 068737.
RoastPoint Pte. Ltd. ("RoastPoint", "we", "us", or "our") respects your privacy and is committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA") and related subsidiary legislation. This Privacy Policy explains what personal data we collect, why we collect it, how we use and disclose it, how long we retain it, and what rights you have in relation to your personal data when you visit our website at roastpoint.pro, communicate with us, visit our café at 28 Stanley Street, purchase goods or services, or otherwise interact with us.
By using our website, submitting our contact form, subscribing to retail delivery, booking a workshop, or purchasing at our café, you acknowledge that you have read and understood this Privacy Policy. Where the PDPA requires consent for specific purposes, we will obtain that consent separately and clearly — for example, through the unchecked consent checkbox on our contact form.
The data controller responsible for your personal data is RoastPoint Pte. Ltd., registered in Singapore with UEN 202519847C, with its principal place of business at 28 Stanley Street, #01-03, Singapore 068737. You may contact our data protection enquiries team at [email protected] or +65 6248 3917 during café operating hours (Tue–Sun, 08:00–18:00 SGT, Mon closed).
We may collect the following categories of personal data depending on how you interact with us:
We do not intentionally collect sensitive personal data such as government identification numbers, financial account credentials, or health records through our website contact form. Please do not submit medical information or unrelated sensitive data in general enquiries — we cannot provide medical advice and will delete such content if received inadvertently.
We collect personal data through direct interactions (contact forms, in-person purchases, phone calls, workshop sign-up sheets), automated technologies (cookies and server logs when you browse our website), and third parties (payment processors providing transaction confirmations, delivery couriers confirming receipt, or corporate clients providing attendee lists for private cupping sessions with appropriate authority).
We collect and use personal data for purposes that a reasonable person would consider appropriate in the circumstances, including:
We may disclose personal data to service providers who assist us under contract, including website hosting providers, email delivery services, payment terminal operators, accounting firms, and courier partners. These parties are permitted to process data only for the purposes we specify and must protect it appropriately. We do not sell personal data to third parties for their independent marketing.
Under the PDPA, we rely on consent, contractual necessity, legal obligation, or legitimate interests (assessed in a manner consistent with PDPA requirements) depending on context. Our contact form requires you to actively tick a consent box before submission; consent is not pre-selected. You may withdraw consent for marketing communications at any time by emailing [email protected], though withdrawal does not affect processing already performed or processing necessary for legal or contractual reasons.
We retain personal data only as long as necessary for the purposes described above. Contact form submissions are typically retained for twenty-four months unless a business relationship continues. Transaction records are retained for seven years to meet Singapore tax and accounting requirements. CCTV footage, if captured, is retained for a short rolling window unless an incident requires extended retention. Cookie retention periods are specified in our Cookie Policy (essential and preference cookies up to six months where applicable).
Our website may be hosted on servers located outside Singapore. Where personal data is transferred overseas, we take steps reasonably required under the PDPA to ensure that recipients provide a standard of protection comparable to the PDPA, such as contractual clauses or using providers with recognised certification programmes.
We implement administrative, technical, and physical safeguards appropriate to the nature of the data we hold, including access controls for staff systems, encrypted connections (HTTPS) on our website, and secure handling of payment terminals at the point of sale. No method of transmission or storage is completely secure; we encourage you to use strong passwords for any accounts we may provide and to contact us promptly if you suspect unauthorised access.
Subject to exceptions under the PDPA, you may request access to personal data we hold about you, correction of inaccurate data, withdrawal of consent, or information about how your data has been used or disclosed within the past year. Submit requests to [email protected] with sufficient detail for us to verify your identity. We will respond within thirty days or as otherwise permitted by law. You may also lodge a complaint with the Personal Data Protection Commission of Singapore if you believe we have handled your data contrary to the PDPA.
Our website and services are directed at adults. We do not knowingly collect personal data from children under thirteen without parental consent. If you believe a child has provided data to us, contact us and we will take steps to delete it.
Our website may link to third-party sites such as map services or social platforms. We are not responsible for their privacy practices. Review their policies before providing personal data.
We may update this Privacy Policy from time to time. The effective date at the top will change when we do. Material changes will be noted on our website. Continued use after updates constitutes acknowledgement of the revised policy where permitted by law.
Where applicable, we maintain internal do-not-call records for Singapore telephone numbers. If you prefer not to receive promotional calls or messages from RoastPoint, email [email protected] with your number and request. Service-related communications about existing orders or workshop bookings may still be sent as they are not marketing messages under the PDPA.
We do not use solely automated decision-making processes that produce legal or similarly significant effects on individuals. Staff review catering quotes, wholesale applications, and contact form messages before responding.
RoastPoint Pte. Ltd., 28 Stanley Street, #01-03, Singapore 068737. Email: [email protected]. Phone: +65 6248 3917. For contact form submissions processed through our server, messages are routed to our designated inbox for response during business hours. We aim to acknowledge data access requests within five business days and fulfil them within thirty days where the PDPA permits.