Privacy Policy

Last updated: 29 June 2026

This Privacy Policy explains how The Apothecary Island Pte Ltd (UEN: [202122513Z]) ("we", "us", "our") collects, uses, discloses, and protects your personal data. It applies to our website [joraorganics.com] and to our brands, including Jora Organics and A For Apothecary.

We handle your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). By joining our list or purchasing from us, you consent to the practices described here.

1. What personal data we collect

Depending on how you interact with us, we may collect:

• When you join our list: your email address (and your name, if you give it).
• When you place an order: your name, email, phone number, billing and shipping address, and order details.
• Payment information: processed securely by our payment provider. We do not store your full card details.
• When you contact us: your name, email, and the contents of your message.
• Automatically, when you browse: basic technical and usage data such as your device type, browser, and how you use the Site, collected through cookies and similar tools (see Section 7).

We only collect what we reasonably need.

2. How we collect it

We collect personal data directly from you — when you fill in a form, join our list, place an order, or contact us — and automatically through cookies when you use the Site.

3. Why we use your data

We use your personal data to:

• send you the updates you signed up for (our launch, products, and occasional notes);
• process, fulfil, and deliver your orders;
• respond to your questions and provide customer support;
• improve our Site and understand how it's used;
• keep proper business records and meet our legal obligations;
• protect against fraud or misuse.

We rely on your consent for marketing communications. For data needed to complete an order you've placed, we may rely on deemed consent or other lawful bases under the PDPA. We will not use your data for new purposes without letting you know.

4. Who we share it with

We do not sell your personal data. We share it only with trusted third parties who help us run the business, and only as far as needed:

• Payment processors (to take payment securely);
• Shipping and fulfilment partners (to deliver your order);
• Our email/marketing platform (to send you the messages you signed up for);
• Website and analytics providers (to host and improve the Site);
• Professional advisers or authorities, where required by law.

These parties are required to protect your data and use it only for the services they provide to us.

5. Transfers outside Singapore

Some of our service providers (for example, our email or hosting platforms) may store or process data on servers outside Singapore. Where this happens, we take reasonable steps to ensure your data receives a standard of protection comparable to that under the PDPA.

6. How long we keep it

We keep your personal data only for as long as we need it for the purposes above, or as required by law (for example, tax and accounting records). When we no longer need it, we securely delete or anonymise it. If you unsubscribe, we'll stop sending you marketing and remove your details from our active mailing list.

7. Cookies

Our Site uses cookies and similar technologies to help it function, remember your preferences, and understand how the Site is used. You can control or disable cookies through your browser settings, though some parts of the Site may not work as well without them.

8. How we protect your data

We use reasonable administrative, technical, and physical safeguards to protect your personal data against loss, misuse, or unauthorised access. No method of transmission over the internet is completely secure, but we take security seriously and act promptly if an issue arises.

9. Your rights

Under the PDPA, you may:

• Access the personal data we hold about you, and ask how it's been used;
• Correct any data that's inaccurate or out of date;
• Withdraw your consent to our use of your data at any time (note that this may mean we can no longer provide certain services, such as sending you updates or fulfilling an order).

To make any of these requests, contact our Data Protection Officer (below). We'll respond within a reasonable time, in line with the PDPA.

10. Our Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for overseeing our handling of personal data and your questions about it.

Data Protection Officer The Apothecary Island Pte Ltd Email: contact@aforapothecary.com

11. Children

Our Site and products are intended for adults. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian. If you believe a child has provided us with personal data, please contact us and we'll remove it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The current version will always be posted on this Site, with the "Last updated" date revised accordingly. Significant changes will be communicated where appropriate.

13. Contact us

Questions, requests, or concerns about your personal data:

joraorganics@gmail.com Instagram: @joraorganics