Privacy Policy

1. Introduction

UMAMI Eats Pte. Ltd. (“UMAMI”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit our website, place an order, join our loyalty programme, interact with us online, visit our outlet, or use any of our services.

This Privacy Policy applies to all personal data collected by UMAMI in Singapore.

By using our website, placing an order, joining our loyalty programme, submitting your information, or interacting with us, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We May Collect

Personal data refers to information that can identify you, whether on its own or together with other information available to us.

2.1 Information You Provide to Us

• Name
• Mobile number
• Email address
• Delivery address, if applicable
• Order details
• Payment-related information
• Loyalty programme information
• Rewards, stamps, redemption and membership activity
• Feedback, enquiries, messages or reviews
• Marketing preferences
• Dietary preferences, food preferences or allergy-related information, if you choose to provide them

2.2 Information Collected Through Orders and Transactions

• Items ordered
• Order history
• Purchase amount
• Date and time of transaction
• Outlet or ordering channel used
• Payment status
• Redemption or promotional usage

We do not store your full payment card details. Payment transactions are processed through third-party payment providers or ordering platforms.

2.3 Information Collected Automatically

• IP address
• Browser type
• Device type
• Operating system
• Website pages visited
• Time spent on our website
• Cookies and similar tracking information
• General usage and analytics data

3. How We Collect Personal Data

We may collect personal data when you:

• Visit our website
• Place an online or in-store order
• Join UMAMI Pass or any loyalty programme
• Scan a QR code
• Sign up for promotions or updates
• Contact us by email, phone, WhatsApp, social media or website form
• Leave feedback or a review
• Participate in surveys, campaigns, giveaways or promotions
• Interact with our advertisements or social media pages
• Visit our outlet or interact with our staff

We will only collect personal data that is reasonably necessary for our business, services and customer experience.

4. How We Use Your Personal Data

4.1 Providing Our Services

• Processing and fulfilling your orders
• Managing reservations, enquiries or customer requests
• Providing customer support
• Managing your loyalty account, stamps, rewards and redemptions
• Sending order-related updates
• Handling refunds, exchanges, disputes or service recovery

4.2 Business Operations

• Managing our outlet operations
• Improving our menu, service and customer experience
• Understanding customer preferences and purchasing patterns
• Conducting internal reporting and business analysis
• Maintaining records for accounting, audit, tax and legal purposes
• Preventing fraud, misuse or unauthorised transactions
• Protecting the safety and security of our customers, staff and business

4.3 Marketing and Communications

With your consent, or where permitted by law, we may use your personal data to send promotional emails, SMS, WhatsApp messages or other marketing communications, inform you about new menu items, promotions, rewards or events, and personalise offers or content based on your preferences or order history.

You may unsubscribe from marketing communications at any time by following the unsubscribe instructions in our messages or contacting us directly.

5. Consent

We will obtain your consent before collecting, using or disclosing your personal data, unless otherwise permitted or required by law.

You may provide consent when you submit your personal data through our website, create or use a loyalty account, place an order, tick a marketing consent checkbox, join a campaign, promotion or rewards programme, or continue interacting with us after being informed of the relevant purposes.

If you provide personal data relating to another person, you confirm that you have obtained their consent to provide that information to us.

6. Withdrawal of Consent

You may withdraw your consent for the collection, use or disclosure of your personal data by contacting us at general@umami.com.sg.

Please note that withdrawing consent may affect our ability to provide certain services to you, such as loyalty rewards, order support, promotional updates or account-related services.

We will process your withdrawal request within a reasonable period, unless we are required or permitted by law to continue using or retaining the information.

7. Disclosure to Third Parties

We may disclose your personal data to third parties where necessary for the purposes stated in this Privacy Policy.

• Online ordering platforms
• Payment processors
• Delivery partners
• Point-of-sale system providers
• Website hosting providers
• Cloud storage and IT service providers
• Email, SMS or marketing platform providers
• Analytics and advertising service providers
• Customer support tools
• Professional advisers, such as accountants, auditors, lawyers or insurers
• Government authorities, regulators or law enforcement agencies where required by law

We will take reasonable steps to ensure that third parties who handle personal data on our behalf protect such data appropriately and use it only for authorised purposes.

8. Marketing, SMS and Do Not Call

We may send marketing messages to you only where we have your consent or where permitted under applicable laws.

If we send marketing messages to Singapore telephone numbers, we will comply with applicable Do Not Call Registry requirements where required.

You may opt out of marketing communications at any time by clicking the unsubscribe link in our email, following the opt-out instructions in our SMS or WhatsApp message, or contacting us at general@umami.com.sg.

Even after you opt out of marketing communications, we may still send you service-related messages, such as order confirmations, loyalty account updates, transaction notices or important policy updates.

9. Cookies and Website Tracking

Our website may use cookies and similar technologies to improve your browsing experience and understand website usage.

• Enable website functionality
• Remember preferences
• Analyse website traffic and performance
• Improve website design and content
• Support advertising or remarketing activities

You may disable cookies through your browser settings. However, some website features may not work properly if cookies are disabled.

10. Accuracy, Access and Correction

We will take reasonable steps to ensure that the personal data we collect is accurate and complete where it is likely to be used to make a decision affecting you or disclosed to another organisation.

You may request access to your personal data that we hold, or request correction of inaccurate or incomplete personal data by contacting us at general@umami.com.sg.

We may need to verify your identity before processing your request. We will respond to access or correction requests within a reasonable period, in accordance with applicable laws.

11. Protection of Personal Data

We take reasonable security measures to protect personal data in our possession or control from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.

• Access controls
• Password protection
• Secure system settings
• Limiting access to authorised personnel
• Staff guidance on handling personal data
• Use of secure third-party service providers
• Regular review of systems and processes
• Secure deletion or anonymisation where appropriate

While we take reasonable steps to protect your personal data, no method of transmission or storage is completely secure. You should also take care when sharing personal data online.

12. Retention of Personal Data

We will retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by law.

• Order and transaction records may be retained for accounting, tax, audit and legal purposes.
• Loyalty programme data may be retained while your account remains active or where needed to manage rewards and redemptions.
• Marketing data may be retained until you withdraw consent, unsubscribe, or the data is no longer necessary.
• Enquiry and feedback records may be retained for customer service and business improvement purposes.

When personal data is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

13. Transfer Outside Singapore

Some of our service providers or technology platforms may store or process personal data outside Singapore.

Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the transferred personal data receives a standard of protection comparable to that required under Singapore’s Personal Data Protection Act.

14. Data Breach Management

If a data breach occurs, we will take steps to assess, contain and manage the incident.

Where required by law, we will notify the Personal Data Protection Commission and/or affected individuals as soon as practicable.

We may also take steps such as investigating the cause of the breach, implementing corrective measures and reviewing our internal processes.

15. Children’s Personal Data

Our website and services are not intended for children below the age of 13.

We do not knowingly collect personal data from children without consent from a parent or guardian. If we become aware that personal data of a child has been collected without appropriate consent, we will take reasonable steps to delete the information.

16. Third-Party Websites

Our website or communications may contain links to third-party websites, ordering platforms, payment platforms, delivery platforms or social media pages.

We are not responsible for the privacy practices, security or content of third-party websites. You should review their privacy policies before providing personal data to them.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, legal requirements or data protection practices.

The updated version will be posted on our website with the latest “Last updated” date.

Your continued use of our website or services after any update means you acknowledge the updated Privacy Policy.

18. Contact Us

If you have any questions about this Privacy Policy, wish to withdraw consent, or wish to request access or correction of your personal data, please contact us:

19. Complaints

If you have a complaint about how we handle your personal data, please contact our Data Protection Officer first so that we can look into the matter.

If you are not satisfied with our response, you may contact the Personal Data Protection Commission in Singapore.