This Privacy Policy explains how Grov, a brand operated by [NORFH LEGAL NAME] (UEN [UEN]) ("we", "us", "our"), collects, uses, discloses and protects personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA), in connection with grov.norfh.com (the "Site").
1. Personal data we collect
When you submit an enquiry, we collect the information you give us through the lead form or over WhatsApp, which may include: your name, your company name, your position, your contact number, your email address, and whether you currently run ads.
When you visit the Site, our advertising and analytics tools (including the Meta Pixel) may automatically collect technical information such as your device and browser type, IP address, pages viewed, and how you interact with the Site, using cookies and similar technologies.
We do not intentionally collect sensitive personal data through the Site, and we ask that you do not submit any.
2. How we use your data
We use personal data to: respond to your enquiry and provide the review or service you requested; contact you about your enquiry, including by WhatsApp, phone or email; measure and improve the performance of our own advertising and the Site; and comply with legal obligations. We rely on your consent, and on the legitimate purposes permitted under the PDPA, as the basis for these uses.
3. Cookies and the Meta Pixel
The Site uses cookies and the Meta Pixel to understand traffic and to measure and optimise our advertising on Meta platforms (Facebook and Instagram). This may allow Meta to recognise your device and to show you our ads. The data collected by the Meta Pixel is processed by Meta under its own data policy. You can manage cookies through your browser settings and manage ad preferences through your Meta account settings and Meta's ad tools."
4. Who we share data with
We do not sell your personal data. We may share it with: service providers who help us operate the Site and our business (for example, hosting, form and messaging tools) under confidentiality obligations; advertising and analytics platforms, including Meta, as described above; and authorities or advisors where required by law or to protect our legal rights. Some of these providers may process data outside Singapore; where they do, we take steps intended to ensure a standard of protection comparable to the PDPA.
5. How long we keep it
We keep personal data only for as long as needed for the purposes above, or as required by law, after which it is deleted or anonymised.
6. Protecting your data
We apply reasonable administrative and technical measures to protect personal data against unauthorised access, use or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your rights under the PDPA
Subject to the PDPA, you may request access to the personal data we hold about you, request correction of it, or withdraw your consent to our use of it. To make a request, or to ask a question about this policy, contact our data protection officer at [DPO EMAIL]. Withdrawing consent may mean we can no longer respond to your enquiry or provide certain services. We will respond to requests within a reasonable time.
8. Third-party links
The Site may link to third-party sites (including Meta and our production partner). We are not responsible for the privacy practices of those sites; please review their policies.
9. Changes to this policy
We may update this policy from time to time. The current version is always the one published on the Site, dated above.
10. Contact
Data Protection Officer, [NORFH LEGAL NAME] — [DPO EMAIL] — [REGISTERED ADDRESS].