Policies And Terms

Privacy Policy

 

This Privacy Policy explains how SYROS Pte. Ltd. (UEN 202605418K) (“AYROS”, “we”, “us” or “our”) collects, uses, discloses and protects your personal data when you visit https://ayroswellness.com (the “Site”), buy our products, subscribe to our services or otherwise interact with us. We comply with the Personal Data Protection Act 2012 of Singapore (“PDPA”).

We collect, use and disclose your personal data with your consent, or where the PDPA otherwise permits. For health and wellness data, we ask for your express consent before you provide it (see Section 2).

1. Personal data we collect

Depending on how you interact with us, we may collect:

  • Identity and contact data: name, email address, phone number, delivery and billing address.

  • Account data: login details, order history, subscription settings, loyalty points and preferences.

  • Transaction data: products purchased, amounts paid, payment method type. Full card details are processed by our payment providers and are not stored by us.

  • Health and wellness data: information you choose to give us through our wellness quiz, customer service conversations or reviews, such as health goals, symptoms, age range, pregnancy or breastfeeding status, dietary restrictions, allergies and medications.

  • Technical data: IP address, device and browser type, pages viewed, referring website, and data collected through cookies and similar technologies.

  • Marketing and communications data: your marketing preferences, responses to surveys, and your communications with us.

  • User content: reviews, photos, testimonials and social media content you submit or tag us in.

We do not ask for your NRIC, FIN or passport number for online purchases.

2. Health and wellness data

Health information is sensitive. We collect it only when you choose to provide it. Before you start our wellness quiz, we ask you to give your express consent by ticking a box that is not pre-ticked. We use this data only to:

  • recommend products that may suit your stated goals;

  • personalise your subscription and product information; and

  • answer your questions and handle feedback or product complaints.

We do not sell your health data or share it with advertising or social media platforms. Our quiz pages do not run advertising pixels, and your answers are not sent to advertising or analytics providers. Access within our team is limited to staff who need it, and we apply stronger security safeguards to this data. You may ask us to delete your quiz answers at any time (see Section 9).

Our recommendations are general in nature and are not medical advice. Please consult a qualified healthcare professional before starting any supplement, especially if you are pregnant, breastfeeding, taking medication or have a medical condition.

3. How we use your personal data

We use your personal data to:

  1. process, fulfil and deliver your orders and subscriptions, including recurring billing;

  2. create and manage your account and loyalty membership;

  3. communicate with you about orders, deliveries, subscription renewals, product recalls and service changes;

  4. respond to enquiries, complaints, returns and refund requests;

  5. provide personalised product recommendations;

  6. send marketing communications, where you have consented (see Section 5);

  7. run promotions, contests, referral programmes and events;

  8. improve the Site, our products and customer experience through analytics;

  9. prevent fraud, secure our systems and enforce our Terms and Conditions; and

  10. comply with laws, regulations and requests from authorities, including the Health Sciences Authority (HSA) where required.

4. Disclosure to third parties

We do not sell your personal data. We share it only as needed with:

  • E-commerce and IT providers: website hosting, our e-commerce platform, cloud storage and customer service tools;

  • Payment providers: to process payments and prevent fraud;

  • Logistics partners: to deliver your orders;

  • Marketing and analytics providers: for email and SMS delivery, analytics and advertising. They receive contact, technical and browsing data only, never your health and wellness data;

  • Professional advisers: lawyers, accountants and auditors; and

  • Authorities, where required or permitted by law.

Our service providers may only use your data to perform services for us and must protect it under contract.

5. Marketing communications

We will only send you marketing emails, SMS, WhatsApp messages or calls if you have given consent, for example by ticking a box at checkout or signing up to our newsletter. We comply with the Do Not Call (DNC) provisions of the PDPA and the Spam Control Act 2007.

You can withdraw consent at any time by clicking “unsubscribe” in any email, replying “STOP” to SMS, updating your account settings or contacting us. Service messages about your orders and subscription (such as renewal reminders) will still be sent.

6. Cookies and similar technologies

We use cookies and similar technologies to keep the Site working, remember your cart and preferences, understand how the Site is used and show relevant advertising. You can manage cookies through your browser settings or our cookie banner. Blocking essential cookies may affect Site functions such as checkout.

7. Transfers outside Singapore

Some of our service providers store or process data outside Singapore, in the countries where those providers operate. Where we transfer personal data overseas, we take steps to ensure the recipient provides a standard of protection comparable to the PDPA, such as contractual safeguards.

8. Protection and retention

We use reasonable administrative, physical and technical measures to protect your personal data, including encryption in transit, access controls and staff training. No method of transmission or storage is completely secure, but we work to prevent unauthorised access.

If a data breach occurs that is notifiable under the PDPA, we will notify the Personal Data Protection Commission and, where required, affected individuals, within the timelines required by law.

We keep personal data only as long as needed for the purposes it was collected, or as required by law (for example, transaction records for tax and accounting purposes, generally 5 years). We then delete or anonymise it.

9. Your rights

You may:

  • access the personal data we hold about you and how it has been used or disclosed in the past year;

  • correct inaccurate or incomplete data;

  • withdraw consent to our collection, use or disclosure of your data; and

  • ask us to delete your account or specific data such as quiz answers.

Send requests to our Data Protection Officer:

Name of DPO: Data Protection Officer

Contact No.: +65 6917 4013

Email Address: care.ayros.sg@gmail.com 

We will respond within 30 days where reasonably possible, and we may charge a reasonable fee for access requests, which we will tell you before proceeding. If you withdraw consent, we may no longer be able to provide some products or services, such as an active subscription, and we will explain the consequences before acting on your request.

If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore (www.pdpc.gov.sg).

10. Minors

The Site is intended for users aged 18 and above. We do not knowingly collect personal data from persons under 18 without the consent of a parent or guardian. If you believe a minor has given us personal data, please contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. The latest version will always be on this page with its “last updated” date. Where changes are significant, we will notify you by email or through the Site.