Privacy Policy
FRAN PTE. LTD. ("Fran", "we", "us") is a Singapore beauty retailer of skincare and beauty products. This policy explains how we collect, use, disclose and protect personal data in line with Singapore's Personal Data Protection Act 2012 ("PDPA"). It applies to our store, our website at heyfran.com, and our membership programme.
Personal data we collect
- Your name.
- Contact details, such as your email address and mobile number.
- Purchase records, such as items bought, order and payment references, and delivery details.
- Membership and loyalty records, such as your member ID, points, rewards and preferences you share with us.
- Website analytics, such as pages visited, device and browser type, and approximate location derived from your IP address.
Why we collect it
- To process purchases, payments, deliveries, exchanges and refunds.
- To run our membership and loyalty programme.
- To answer your enquiries and provide customer service.
- To send you news and offers, where you have agreed to receive them.
- To operate, secure and improve our store and website.
- To meet our legal and regulatory obligations.
Consent and withdrawal
We collect, use and disclose your personal data with your consent or as the PDPA otherwise permits. You may withdraw your consent at any time by emailing us. We will process your request within a reasonable time and tell you what withdrawal means for you. For example, we may no longer be able to run your membership account. Withdrawal does not affect processing we did before it.
Disclosure to service providers
We share personal data only as needed with service providers who act for us, including payment processors, delivery and logistics partners, and IT, hosting and software providers. They must protect the data and use it only for the services they provide to us. We do not sell your personal data.
Retention
We keep personal data only for as long as we need it for the purposes above, or as required by law, for example tax and accounting records. When we no longer need it, we delete or anonymise it.
Protection
We use reasonable administrative, physical and technical safeguards to protect personal data from unauthorised access, collection, use, disclosure, copying, modification or disposal. These include access controls and encrypted connections. No method of transmission or storage is completely secure.
Access and correction
You may ask to see the personal data we hold about you, how we have used or disclosed it in the past year, or ask us to correct it. Email the Data Protection Officer. We will respond as soon as reasonably possible, and may charge a reasonable fee for an access request, which we will tell you about first.
Cookies
Our website uses cookies and similar technologies to keep it working and to understand how visitors use it. heyfran.com uses Google Analytics cookies to see which pages people visit and how they found us. Google handles this data under its privacy policy. You can block or delete cookies in your browser settings, or opt out of Google Analytics on every site with the Google Analytics opt-out browser add-on. Some parts of the site may not work as intended if you block cookies.
Overseas transfer
Some of our service providers store or process data outside Singapore. When we transfer personal data overseas, we take steps to make sure it receives a standard of protection comparable to the PDPA.
Contact the Data Protection Officer
For questions, requests or complaints about your personal data, email our Data Protection Officer at ask@heyfran.com.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.