ZILIN PTE LTD, operating as Okay2Go (www.okay2go.com) (“Okay2Go,” “we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, retain, and protect your personal data in compliance with applicable privacy laws, including but not limited to Singapore’s Personal Data Protection Act 2012 (PDPA), the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant data protection laws where we operate. Our goal is to maintain rigorous privacy standards worldwide, ensuring your rights and choices regarding personal information are respected, regardless of where you access our services.
By registering an account or using any Okay2Go website, application, product, software, tool, data feed, and/or service (collectively, the “Service”), you agree to the terms of this Privacy Policy.
This policy details the ways we manage your personal data. It also informs you of your rights and choices regarding your personal information and how to contact us for further assistance. Please review it carefully.
1. Applicability of this Privacy Policy
This Privacy Policy describes how Okay2Go collects and uses personal data and applies to all Okay2Go customers, unless they use a service covered by a separate privacy notice. It specifically applies to individuals who directly use and interact with Okay2Go Services through their Okay2Go account for personal use.
2. How We Collect, Disclose, and Use Personal Information
We collect information about you in various ways based on your interactions with us and our Services, including:
Directly from you, such as when you register for an account, subscribe to receive communications, place an order, make a purchase, or contact us by phone, email, or other methods.
Automatically, through technologies like cookies, server logs, and similar tools when you interact with our Services and emails, where permitted by law or with your consent.
From other sources, such as our affiliates, business partners, service providers, online social media networks, other third parties, or publicly available sources.
Okay2Go classifies data and information systems according to legal requirements, sensitivity, and business criticality to ensure that all information receives appropriate protection. In our data management, the “data controller” is the entity determining the purposes and means of processing personal information.
2.1 Okay2Go as a Data Controller
Okay2Go assumes the role of data controller when determining the purposes and methods of processing personal data. As a data controller, Okay2Go is responsible for ensuring that personal data is processed in compliance with applicable data protection laws. Activities under Okay2Go’s data controller capacity include:
Direct Sign-ups: Okay2Go acts as the data controller when customers sign up directly with our services for personal use.
Key activities as a data controller include:
-
Service Delivery: Using data to provide Okay2Go’s products and services.
-
Fraud Prevention: Monitoring and detecting fraudulent transactions and activities.
-
Legal Compliance: Adhering to financial, legal, and regulatory obligations as required.
-
Service Enhancement: Developing and improving products and services based on data analysis.
3. Information We Collect
Below are examples of the types of information we collect in different contexts and how we use that information.
-
Account Registration: To fulfill regulatory Know Your Customer (KYC) requirements and to prevent fraud, we collect information during account creation that includes, but is not limited to, the following:
-
Full Name
-
Address
-
Mobile Number
-
Email Address
-
Identification or Passport Number
-
Date of Birth (DOB)
-
Nationality
-
A copy of your identification card or passport for verification purposes
We use this information to manage account functionalities, support secure transactions, enable easy checkout, save your preferences, and maintain transaction history. This information may also be processed to fulfil our service contract with you.
-
Biometric Information: We may collect biometric identifiers, such as photo IDs, with your explicit consent, where required by law, to confirm your identity through eKYC processes.
-
Online Tracking Technologies: We use cookies and similar technologies to make our website operate efficiently. These may collect information about your browser, operating system, IP address, and site interactions, and are essential for website functionality. For non-essential tracking, such as analytics or behaviour-based advertising, we seek consent as required by law.
-
Demographic Information: We collect general demographic data, such as age or location, to better understand our customers and tailor our services.
-
Feedback/Support: If you provide feedback or contact us for support, we collect your name, email address, and other details provided to respond to your query. This helps us address customer needs and improve our services.
-
Mobile Device Data: We may collect unique identifiers from your mobile device when visiting our website to identify unique visitors and track visits.
-
Order Placement: We collect details like your name, billing and shipping addresses, email, phone number, and payment information when you place an order, using it to fulfil our contract with you to provide the requested services.
-
Surveys: When participating in surveys, we collect your responses to better understand customer preferences and improve our offerings. For surveys conducted by third-party providers, their privacy policies will govern data collection, use, and disclosure.
4. Data Retention
We retain your personal information only as long as necessary to fulfil the purposes outlined in this Privacy Policy, including to satisfy any legal, accounting, or reporting obligations, unless a longer retention period is required or permitted by law. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the information, potential risks of unauthorised use or disclosure, the purposes for collecting the information, whether those purposes can be achieved through other means, and any applicable legal requirements.
5. How We Use Personal Information
In addition to the purposes and uses described above, we use your information in the following ways:
-
To identify you when you visit our website.
-
To provide products and services or to process returns.
-
To improve our services and product offerings.
-
To streamline the checkout process.
-
To conduct analytics.
-
To communicate with you, including responses to your requests, inquiries, issues, or feedback.
-
To send marketing and promotional materials related to our products, services, sales, or promotions.
-
To detect and protect against malicious, deceptive, fraudulent, or illegal activity, including violations of our policies and terms, security incidents, and harm to the rights, property, or safety of Okay2Go, our customers, and others.
-
To debug, identify, and repair issues affecting the functionality of our website and services.
-
To comply with legal or regulatory obligations, establish or exercise our rights, and defend against legal claims.
-
For internal administrative purposes and to manage our customer relationships.
-
For any additional purposes to which you may consent from time to time.
Although the sections above describe our primary purposes for collecting your information, in many cases, we have more than one purpose. For example, if you complete an online purchase, we collect your information both to fulfil our contract with you and to retain it afterward for our legitimate interest in responding to any future questions about your order. Consequently, our collection and processing of your information may be based on your consent, the need to perform a contract, legal obligations, and/or our legitimate interest in conducting our business.
6. How We Share Personal Information
In addition to the specific instances described elsewhere in this Privacy Policy, we may disclose personal information in the following situations:
Affiliates and Acquisitions: We may share information with our corporate affiliates (such as parent companies, subsidiaries, or other entities under common control). If our company, business, or assets are acquired, or if such an acquisition is being negotiated, we may share your information with the acquiring entity.
Legal and Compliance Disclosures: We may disclose information to comply with subpoenas, warrants, court orders, legal processes, or relevant laws. Additionally, we may share your information to establish or exercise our legal rights, defend against claims, investigate and prevent illegal activities or fraud, ensure the safety of individuals or property, address violations of our policies, or fulfil a request for product shipment or service provision by a third-party intermediary.
Partner Promotions: We may offer joint promotions with third-party partners. If you choose to participate in a co-sponsored promotion, the information you provide may be shared with both Okay2Go and the third-party partner. Please note, their use of your information will be governed by their privacy policy.
Service Providers: We may share your information with trusted service providers who assist us with various aspects of our business, including website administration, technical support, payment processing, and order fulfilment.
Other Disclosures with Your Consent: We may disclose your information to third parties when we have your explicit consent or direction to do so.
Other Disclosures with Your Consent: We may disclose your information to third parties when we have your explicit consent or direction to do so.
7. Your Rights
Depending on your location and subject to applicable law, you may have the following rights regarding your personal information:
-
Access Your Data: You have the right to request that we disclose to you the personal information we collect, use, or disclose about you, along with information about our data practices. In certain cases, you may also request access to your personal information in a portable, machine-readable format.
-
Verify and Seek Rectification: You have the right to request that we correct any inaccurate personal information we maintain about you. You can update your information directly within your account profile. If you are unable to make changes, please contact us using the information below. Note that historical information may be retained in our backup files as permitted by law.
-
Request Deletion: You have the right to request that we delete personal information we have collected about you, subject to any legal retention requirements.
-
Withdraw Consent: Where you have previously given consent for us to process your personal information, you have the right to withdraw that consent at any time.
-
Object to Processing: You have the right to object to the processing of your personal information when the processing is conducted on a legal basis other than consent.
Not all of these rights apply in all circumstances, and in some cases, we may limit or deny your request if the law permits or requires us to do so, or if we cannot adequately verify your identity. We do not discriminate against individuals who exercise their privacy rights under applicable law.
If you would like to exercise any of the rights described above, or appeal a determination related to a data rights request, please contact us using the information below or via our Contact Us page. To verify your identity, we may ask for information such as your name, your last purchase, or other identifying details. In some cases, we may request a signed declaration confirming your identity.
You may also designate an authorised agent to submit requests on your behalf. If you do so, please attach a signed document authorising the agent to act for you.
How to Unsubscribe from Marketing Emails: You may opt out of marketing emails by contacting us via our Contact Us page.
How to Delete Your Account: You may delete your account by selecting the “Delete Account” option in your Profile Settings. We will process this request as quickly as possible, generally within one month, although identity verification may be required.
Retention After Deletion Requests: In certain circumstances, Okay2Go may need to retain and process your personal data even after a deletion request. For example, we may retain information to meet legal obligations related to Know Your Customer (KYC) requirements and payment transaction details.
8. Data Transfer & International Data Transfer
Okay2Go’s Services may be accessed in various countries, which means your information may be transferred to and processed in countries outside your own, where privacy laws may differ. However, we take steps to handle personal information in alignment with the privacy principles that apply under the laws of the country in which we initially collected your information.
By submitting your personal information to us, you consent to its transfer, storage, and processing in countries outside your residence, including but not limited to Singapore. For more information about how we apply local privacy principles to data transferred internationally, please contact us using the information below.
9. Security
We follow generally accepted industry standards to protect your personal information. However, no method of transmission over the internet or electronic storage is completely secure. While we strive to maintain physical, electronic, and procedural safeguards to protect the confidentiality of the information we collect, we cannot guarantee absolute security.
Okay2Go customers are responsible for keeping their passwords and account credentials secure. If you believe that your interaction with us is no longer secure (for example, if you suspect that the security of your account has been compromised), please notify us immediately at [email protected]
10. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. If we make material changes to this policy or to how we use your personal information, we will notify you by prominently posting a notice here, on our homepage, or by sending an email. We encourage you to review this policy regularly when you use our website or applications. This Privacy Policy includes an “effective” and “last updated” date. The effective date is when the current version took effect, and the last updated date indicates the most recent substantive modification.
11. Contact Information
If you have any questions, comments, appeals, or complaints concerning our privacy practices, please contact us at:
Email: [email protected]