Last updated: 15 April 2026
We at Kurime (“we”, “us”, or “our”) respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [www.kurime.sg] and place an order for our delicious gelato.
This website is operated in Singapore and is subject to Singapore’s Personal Data Protection Act 2012 (PDPA).
1. Information We Collect
We may collect the following types of information:
a) Information you provide to us directly
- Name
- Delivery address
- Email address
- Phone number
- Order notes (e.g., special instructions or allergy information)
b) Payment information
Payments are processed securely by HitPay Payment Gateway via PayNow QR or PayNow UEN. We do not store your banking details, PayNow QR codes, or any full payment card information on our servers. All payment transactions are encrypted and handled directly by HitPay.
c) Automatically collected information
- IP address
- Browser type and version
- Pages you visit on our site
- Time and date of visit
- Referring website
- Device information (e.g., operating system)
We use cookies and similar tracking technologies (WooCommerce analytics, etc.). You can disable cookies in your browser settings, but some parts of the site may not function properly.
2. How We Use Your Information
We use the information we collect to:
- Process and fulfill your ice cream orders (including delivery)
- Send you order confirmations, shipping updates, and customer service messages
- Respond to your inquiries or requests
- Send you promotional emails or SMS about new flavors, offers, and events (you can opt out at any time)
- Comply with legal obligations
3. Legal Basis for Processing (PDPA Compliance)
We process your personal data only when we have a valid reason under the PDPA, primarily:
- To fulfill a contract with you (i.e., deliver your ice cream order)
- For our legitimate interests (e.g., analytics, fraud prevention, marketing – provided these do not override your rights)
- With your consent (e.g., marketing emails/SMS)
4. Data Retention
We keep your personal data only as long as necessary:
- Order & delivery data: 7 years (for tax & accounting purposes)
- Marketing subscribers: Until you unsubscribe
- Website logs: Up to 12 months
After these periods, we securely delete or anonymise your data.
5. Your Rights Under the PDPA
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Withdraw consent (e.g., stop marketing emails/SMS)
- Request deletion of your data (subject to legal obligations)
To exercise any of these rights, email us at [email protected].
6. Security
We use appropriate technical and organisational measures (SSL encryption, secure hosting, access controls) to protect your data. However, no method of transmission over the internet is 100% secure.
7. Children’s Privacy
Our website is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.